Privacy Policy

Effective 10 October 2026

Kendell Tech Ltd ("Kendell", "we", "us") provides the Kendell application at app.kendell.ai (the "Service"), an assistant that connects to a user's own email, calendar, contacts, storage and other accounts to help them track commitments, prepare documents, schedule meetings and recall information. This policy explains what we collect, why, and what rights you have over it.

Kendell Tech Ltd is registered in England and Wales, registered office 3 Chiltern Court, Asheridge Rd, Chesham HP5 2PX, United Kingdom. For any question about this policy or your data, write to hello@kendell.ai.

1. What we collect

Account information. Your name, email address and authentication credentials, created when you sign up or sign in with Google or Microsoft.

Connected provider data.When you connect Google or Microsoft, you grant Kendell specific, named permissions ("scopes") to read and act on your account on your behalf. Depending on what you connect and enable, this can include email messages (to read, triage, draft replies to and archive on your instruction), calendar events (to read your schedule, find free time, and create, move or cancel meetings), contacts (to recognise who you are communicating with), files you create through Kendell or open with it in Google Drive or OneDrive (so generated documents and exports can be saved into your own storage), and, only if you separately turn it on in Settings, read-only metadata — names, links, dates, never file contents — from the rest of your Google Drive.

We request the minimum scope available for each feature, and every one of these is visible and revocable from your Google or Microsoft account settings, and from Kendell's own Settings → Connected Apps.

WhatsApp. If you link a WhatsApp account, Kendell reads messages through a connection you authorise from your own device, to track commitments and surface what needs a reply. Kendell does not send WhatsApp messages without your explicit approval of each one.

Voice and recordings. If you start an Ambient recording or a voice call with Kendell, audio is sent to a transcription provider (ElevenLabs, or Google Gemini as a fallback) to produce a transcript, and to a voice provider (ElevenLabs) to synthesise spoken replies. The audio itself is not retained once a transcript exists — only the resulting text, which you can delete at any time from Settings or the relevant history page.

Content you provide. Messages you send Kendell, documents you upload, tasks and notes you create, and preferences you state (for example, how you like to be addressed, your working hours, people you work with).

Usage and diagnostic data. Error reports and basic request logs, used only to keep the Service working and to investigate faults.

2. Why we process it, and the AI providers involved

Kendell processes your data to operate the features you use: summarising your day, drafting replies, detecting commitments, answering questions about your own records, generating documents and scheduling meetings. Some of this is done deterministically in our own code; some of it is done by sending the relevant, minimal context to a language model.

Kendell uses Amazon Bedrock, OpenAI and Google Gemini as model providers, and ElevenLabs for speech. These providers process the specific text or audio needed to answer a given request; none of them is given standing access to your connected accounts, and none of them is permitted to use your data to train their own general-purpose models under our agreements with them.

Any action that leaves Kendell in your name — sending an email, booking a meeting, sending a WhatsApp message — is staged for your explicit approval first. Nothing is sent or booked without you pressing approve, except where you have separately turned on an automatic option (such as auto-booking an agreed meeting time) and can turn it back off at any time.

3. Who we share data with

We do not sell your personal data. We share it only with the providers named above (Google, Microsoft, Amazon Web Services/Bedrock, OpenAI, Google Gemini, ElevenLabs), each acting as a data processor for the specific purpose described; infrastructure providers hosting the Service; the people you choose to communicate with through the Service, by your own instruction; and law enforcement or regulators, only where we are legally required to.

Some of these providers are based outside the United Kingdom and European Economic Area. Where that is the case, transfers are made under appropriate safeguards, such as the providers' own standard contractual clauses.

4. How long we keep it

We keep your data for as long as your account is active. Disconnecting a provider stops Kendell reading new data from it, but does not retroactively delete what was already imported — delete a specific record, or your whole account, to remove it. Deleting your account (Settings → Privacy → Delete account) removes your records; a small number of fields are kept as a soft-deleted audit trail where required for fraud prevention or legal compliance, and are not used for any other purpose.

5. Your rights

If you are in the UK or EEA, you have the right to access, correct, delete, export and restrict the processing of your personal data, and to object to processing based on our legitimate interests. You can exercise most of these directly from the app: Settings → Privacy → Export your data, Settings → Connected Apps to disconnect any provider, and Settings → Privacy → Delete account.

For anything else, or if you believe we have not handled a request properly, contact hello@kendell.ai. UK residents may also complain to the Information Commissioner's Office (ico.org.uk).

6. Security

Data in transit is encrypted (TLS). Access to production systems is restricted to the team operating the Service. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security, but we take reasonable technical and organisational measures to protect your data.

7. Children

The Service is not directed at and should not be used by anyone under 16.

8. Changes to this policy

If we make a material change to this policy, we will update the effective date above and, where the change is significant, notify you in the app or by email.