Privacy policy

Who we are

kejn is a dating service for people who want something real. It is run by:

ClickAttack Ltd decides why and how your data is used, which makes us the controller under the Swiss Federal Act on Data Protection (FADP) and, for people in the European Union, under the General Data Protection Regulation (GDPR). In this policy, "kejn", "we" and "us" mean ClickAttack Ltd.

If you live in the EU, you can reach us in your language at the same address. We answer every request ourselves.

What this policy covers

This policy applies to the kejn website, the kejn web app and the kejn apps for iOS and Android. How we use cookies and browser storage is explained in more detail in our cookie policy. Especially sensitive data, and our notice for residents of US states with consumer health data laws, are covered in our sensitive data policy.

kejn is only for adults. You must be at least 18 years old to use it.

What we collect

When you create an account

• Phone number. You sign in with a one-time code we send by SMS. There is no password.
• E-mail address, if you add one or sign in with Apple, Google or Huawei. In that case we also receive your name and an account identifier from that provider, never your password.
• Date of birth, first name, gender and who you want to meet.
• Your answers to the kejn promise, and the choices you make during sign-up.

Your profile

• Photos and, if you add one, a short video.
• Prompts (short written answers), a short bio, the languages you speak, what you are looking for, and the city you live in.
• Optional facts such as height, job, education, interests, and lifestyle facts like smoking, drinking, exercise, children and pets. You can leave any of them out.
• Your orientation, if you choose to add it.
• Compass answers. kejn sets for each Compass question where its answer goes, and the question shows this before you answer: on your profile, shown only after a mutual yes, or private, which means it only shapes your introductions.

Identity verification

Before your first contact, that is when you send your first invitation or say yes to one, you verify your identity with our partner Didit. You photograph your ID document and record a short selfie video. Didit checks that the document is genuine, that you are a real person who is present, and that your face matches the photo on the document.

We receive the result and the details read from your document: name, date of birth, gender, nationality, document type, number, issuing country and validity, plus the scores of the checks. The photos and the video stay with Didit; we do not keep copies of them. Biometric data is especially sensitive. Our sensitive data policy explains what that means.

Location

• If you allow it, your device’s precise location. We use it to find introductions near you and to show other members how far away you are, in whole kilometres and never less than 1 km. We never show your exact location.
• If you do not share your location, we use the city you live in.
• Your approximate location (country and region) derived from your IP address, using a database that runs on our own servers.

Invitations, conversations and activity

• Invitations you send and receive, including the short note you add, your yes or no, and when you close a conversation kindly.
• Messages, photos you send in conversations, and voice messages and calls when these features are available. Call audio and video are not recorded.
• Your settings, such as the time of your daily introductions, notification choices and whether photos sent to you are blurred.
• Who you blocked, what you reported and what was reported about you.
• When you were last active, and a record of some steps you take, such as sending, holding or accepting an invitation, reaching a daily limit, or starting and completing your ID check. These records are for our own service statistics, described below.

Devices and sign-ins

• IP address, device type, operating system, app version, language, time zone and a random identifier created by kejn for your device or browser.
• A history of your sign-ins, so you and we can spot sign-ins that do not look like you.
• Push notification tokens, so we can send notifications to your device.

Payments

If you buy a plan or a Boost, we receive confirmation of the purchase from Apple, Google, Huawei, PayPal or Payrexx: product, price, date, status and transaction numbers. We never receive your card details.

When you contact us

If you write to us or use the contact form, we keep your message, your contact details and our reply.

From other people

Other members create data about you when they send you an invitation or a message, or report you. Apple, Google, Huawei and payment providers tell us whether a sign-in or a payment worked.

What other members see

Your gender and, if you added it, your orientation are part of your profile. Remember that anything you write in a prompt, a note or a message can be read by the person you send it to.

Why we use your data, and on what legal basis

We only use your data when the law allows it. Under the GDPR, every use needs a legal basis. Under Swiss law, we follow the principles of lawfulness, good faith, proportionality, purpose limitation and transparency, and we ask for your consent where the law requires it.

Where we rely on legitimate interests, you can object, as explained below. You do not have to give us any optional information. Without the information marked as required, such as your phone number, date of birth and identity verification, we cannot offer you kejn.

How your introductions are chosen

Every day, kejn prepares a small number of introductions for you. A computer program chooses them. This is how it works:

1. Basic fit. We only introduce people who fit each other: your gender matches who they want to meet and the other way round, your ages are within each other’s age range, you are within each other’s distance, and you are both looking for something compatible. If you chose a feel age, that age is used for age ranges. People you blocked, declined or closed a conversation with are left out.
2. Order. Among the people who fit, we put first those you have more in common with: shared interests and languages, similar intentions, what your Compass answers say about how well you might get on, and distance.
3. Fairness and trust. Verified members, members who complete their Compass and members who reliably reply are shown somewhat more often. Members who have a paid plan or an active Boost are also shown somewhat more often. People you have already seen are moved back.

Private Compass answers are used here, but they are never shown to anyone. The program does not decide whether you may use kejn; it only decides the order of introductions. You always decide for yourself whom you invite and whom you say yes to.

When many more people of one gender join than of another, new accounts can wait for a short time before they receive introductions. This keeps introductions balanced for everyone. Nobody waits longer than 14 days.

Safety checks and moderation

A respectful, safe community needs some checks. We use the following:

• Respectful message nudge. Before an invitation note or a message is sent, kejn checks it against word lists in many languages. If it finds words that are often hurtful, it asks you to look again. This check runs on our own servers, uses no artificial intelligence, and nothing is sent anywhere for it.
• No contact details before it’s mutual. Invitation notes and prompts may not contain phone numbers, e-mail addresses, links or social media handles. A simple pattern check on our servers catches these.
• Photos and videos. Every photo and video you upload is checked by an automated image service (Amazon Rekognition, in the EU) for nudity, violence and other content that is not allowed, and to confirm that a face is visible. The service also estimates facial attributes, such as an approximate age range. We do not use it to recognise or identify you.
• Reports. When someone reports a profile or a conversation, a person on our team reviews it. To do so, they can read the reported content and the conversation it belongs to.

No artificial intelligence reads your messages or invitation notes. Apart from the word-list check and the contact-details rule above, which run on our own servers, your messages are read only by the person you send them to, and by our team if a conversation is reported.

Some automated decisions have a direct effect: a photo that is clearly not allowed is rejected right away, and an account that matches one we banned before can be suspended automatically. We tell you about such a decision, unless telling you would put other people at risk. You can ask for a person to review the decision, explain your point of view and contest it by writing to privacy@kejn.com. Decisions to ban someone after a report are always made by a person.

If there is a serious threat to someone’s life or safety, or we are legally required to, we may pass information to the police or other authorities.

No analytics, no tracking

kejn uses no analytics tools and no tracking, on the website or in the apps. No other company learns from us how you use kejn.

We do keep service statistics on our own servers. When certain things happen, for example an invitation is sent, held or accepted, a daily limit is reached, or an ID check is started or completed, we record that step together with your member ID, your city or country and your gender. We use these records to count, per region and gender, how introductions are going, so we can keep pacing and gender balance fair and notice when something does not work. They are never shared, never used for advertising and never processed with third-party tools.

Legal basis: our legitimate interest in a fair service that works (Art. 6(1)(f) GDPR). We keep these records for 24 months and then delete them; only overall totals remain. You can object by writing to privacy@kejn.com.

Who else is involved

We do not sell your data and we do not share it with advertisers. We work with a small number of service providers who process data for us, only on our instructions and under a contract that protects it. The main ones are:

Some partners are responsible for their own processing, under their own privacy policies:

• Apple, Google and Huawei when you sign in with them, download the app or pay in the app.
• PayPal and Payrexx when you pay on the web.
• Your browser’s push service when you allow notifications in the web app.

We may also share data with authorities or courts when the law requires it, with advisers such as lawyers and auditors who are bound to confidentiality, and, if kejn is ever sold or merged, with the new owner, who would have to respect this policy.

Data outside Switzerland and the EU

Our servers are in Germany. Switzerland and the EU recognise each other as providing an adequate level of data protection.

Some providers are in the USA or can access data from there. We transfer data to them only if they are certified under the EU-U.S. Data Privacy Framework or the Swiss-U.S. Data Privacy Framework, or if we have signed the European Commission’s standard contractual clauses (with the additions required by Swiss law) and checked that further safeguards are in place where needed.

You can ask us for a copy of the safeguards we use by writing to privacy@kejn.com.

How long we keep your data

We keep your data only as long as we need it. These are the periods we use:

If the law requires us to keep something longer, or we need it to defend a legal claim, we keep it only for that purpose and restrict access to it.

Your rights

You have these rights, under Swiss law and, if you live in the EU, under the GDPR:

• Access: ask what data we have about you and get a complete copy. You can request it in the kejn app or at kejn.com under Settings › Download my data, or by writing to us. You receive a JSON file; the download link works for 24 hours, and the file is deleted after 7 days.
• Correction: correct data that is wrong. You can change most of it yourself in the app.
• Deletion: delete your account in Settings, or ask us to delete specific data.
• Portability: receive the data you gave us in a common, machine-readable format (JSON), so you can take it elsewhere.
• Restriction: ask us to pause the use of your data while we check a complaint.
• Objection: object at any time to uses based on our legitimate interest. You can always object to direct marketing.
• Withdrawing consent: withdraw a consent at any time, for example by removing information from your profile. This does not affect what happened before.
• Human review: ask a person to review an automated decision, as described above.

To use your rights, write to privacy@kejn.com from the phone number or e-mail address linked to your account, or use the options in the app. We may ask you to confirm it is you. We answer within 30 days, free of charge.

If you want to complain

Please talk to us first; we would like to help. You also have the right to complain to a data protection authority:

• In Switzerland: the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, edoeb.admin.ch.
• In the EU: the authority in the country where you live or work, for example in Austria the Datenschutzbehörde (dsb.gv.at), or in Germany the data protection authority of your federal state.

Only for adults

kejn is for people aged 18 and over. We check age at sign-up and again with the identity verification. If an ID shows that someone is under 18, we close the account straight away and delete it after 30 days. We keep the document number blocked until that person’s 18th birthday, so the account cannot simply be created again. If you think a minor is using kejn, please report the profile or write to us.

If the birthday you gave us differs from your ID by more than 12 months, you choose whether your profile shows the age on your ID or your "feel age". A feel age is shown as "feels N" and is used in other members’ age filters. Nobody ever learns your real age from us.

How we protect your data

• All connections to kejn are encrypted (TLS).
• Our servers are in a professionally run data centre in Germany.
• Only a small number of authorised people at kejn can access member data, and only when their work needs it, for example to review a report.
• There are no passwords that can leak: you sign in with one-time codes, and deleting your account requires a code too.
• Your documents and selfie video stay with our verification partner and are not stored on our servers.
• No analytics or tracking tools run on kejn, so no other company learns how you use it.

No system is completely secure. If a breach is likely to put you at risk, we will tell you and the responsible authorities without delay, as the law requires.

Notifications, e-mails and permissions

We send notifications about invitations, messages, your daily introductions at the time you chose, and important account matters. You can choose which notifications you get in Settings, and turn them off in your device settings.

Every e-mail that is not strictly about your account has a link to unsubscribe. We send SMS only for sign-in codes.

The apps ask for permission before they use your location, camera, microphone, photos or notifications. You can change this at any time in your device settings. kejn shows no ads, uses no analytics or tracking tools, and does not track you across other companies’ apps or websites.

Changes to this policy

When kejn changes, this policy may change too. We publish the new version here, with its date at the top. For important changes, we also tell you before they apply, and where the law requires your consent, we ask for it again.

Contact

For anything about your data, write to privacy@kejn.com or to ClickAttack Ltd, Data protection, Einsiedlerstrasse 23, 8834 Schindellegi, Switzerland.