Legal
Privacy
Updated 15 October 2026
Who we are
Kayan is a product of Sastemny, a registered company of Shieldra Holding (SHIELDRA EG), Cairo, Egypt. This policy explains what we process when you use Kayan.
Privacy requests: legal@sastemny.com. Support: support@sastemny.com. Billing: billing@sastemny.com.
What we process
Account data: email, display name, locale, theme, age confirmation timestamp, and sign-in method.
Service data: encrypted messages, memory and files; persona names and instructions; Personal and Work chat metadata; folders; tasks and calendar items; session labels (browser family, approximate city if configured).
If you join a waitlist or write to us: the email and message you send.
Why we process it
To run your account, generate replies, keep Personal and Work apart, apply daily limits, remember what you ask us to remember, and improve reliability. We do not sell your data.
Encryption
Messages, memory and files are encrypted with a key unique to your account. Associated data includes your user id and the record id. Account deletion destroys that key so old ciphertext cannot be decrypted.
Isolation
User tables are locked to your account with row-level security. The application database role cannot skip that lock.
Operational logs
Conversation text is never written to operating logs, traces or analytics. Request logs keep method, route, status, duration and a request id. They do not keep bodies, query strings, cookies or authorization headers.
Saved chats and model providers
Saved chats stay in your account, encrypted, until you delete them or the account. To generate a reply we send the turn context needed for that reply to a model provider under contract. We do not use your chats to advertise to you.
Sign-in
Email magic link: we store a hash of the one-time token, not the token itself. Google: if you choose it, we receive your name, email and subject id from Google. We do not store your Google password.
Age
Accounts are for people 16 and older. We store that you confirmed this and when. We do not collect your birth date.
Retention
We keep account and encrypted service data while your account is open. After you delete the account we destroy the encryption key. Waitlist and contact messages are kept only as long as needed to reply or to honour the list you joined. Session records expire and can be revoked by you.
Your rights
Under Egyptian personal-data law you can access, correct and delete your data, and object to optional processing. Export and delete are in Settings → Data. You can revoke Sastemny permissions from Settings when that connection is on. To exercise a right by email, write to legal@sastemny.com.
Processors
We use model providers to generate replies, Google if you sign in with Google, and an email provider to send magic links and waitlist mail. They process only what is needed for that task, under contract.
Children
Kayan is not for people under 16. We do not knowingly create accounts for children.
Changes
We may update this policy. The date at the top is the effective date. Material changes will be flagged in the product where we reasonably can.
Contact
Legal: legal@sastemny.com. Support: support@sastemny.com. Billing: billing@sastemny.com. Cairo, Egypt.