01Information We Collect

We collect only what is necessary to provide the Platform:

• Account data: mobile number, account ID, nickname, avatar, login password (stored as a one-way hash; we never keep it in plain text), account status and verification status.
• Questions and conversations: the question you type, the recent dialogue context sent with the request, retrieved citations, answer routing and quality self-assessment records, and a client conversation identifier. When signed out, history stays only in your browser or app; after sign-in it is synced by client identifier so you can continue across devices.
• Long-term memory: only facts you state about yourself and "previously asked about …" records. We never infer a disease or make a diagnosis. You can view, delete individually or clear all of it under Settings → Long-term Memory.
• Transactions and advertising: recharge and ad orders, packages, amounts, payment channel, order status and transaction IDs returned by the payment provider; ad copy, links, category, placement and review results.
• Open Platform: API keys, permission scopes, call counts, account balance and call logs.
• Device and logs: IP address (rate limiting and abuse prevention), User-Agent and device type (payment channel adaptation), access times and error logs.
• Cookies and local storage: login tokens, a cross-subdomain single-sign-on cookie (.kenglu.com), language preference, recommendation rotation and local conversation records.

We do not collect card numbers or payment passwords; those are handled directly by payment institutions.

02Purposes of Use

• delivering classical-text retrieval, plain-language restatements and genuine citations, and understanding context for continuous dialogue;
• registration and sign-in, account security checks, rate limiting and abuse prevention;
• billing and reconciliation for API and ad orders, creative review and the legally required "Ad" label;
• troubleshooting, service-quality statistics, and improving retrieval ranking and answer quality;
• complying with legal obligations and responding to regulatory requests.

03Third Parties & Sharing

• Large language model service: to understand questions and generate plain-language restatements, we send the question text and necessary dialogue context. Account passwords, payment details and API keys are not included.
• Payment institutions: licensed providers such as Alipay and WeChat Pay receive only the order number, amount and service description needed to complete the order.
• Cloud provider: servers, databases and file storage are hosted by a cloud provider, used to store the above data under access control.

Third-party SDKs used by the Android app:

• OkHttp (Square, Inc.): establishes HTTPS connections to kenglu.com for sign-in, classic-text retrieval, conversation sync and update checks; it does not independently collect personal information.
• ZXing Core (Google): generates WeChat Pay QR codes locally on the device; no data is uploaded.
• Alipay / WeChat Pay client apps: invoked via a system intent only when you initiate a top-up or advertising payment; they receive the order number, amount and service description.
• AndroidX & Material Components (Google): basic UI components; no personal information is collected.

System permissions requested by the Android app and their purposes: INTERNET / ACCESS_NETWORK_STATE (connect to the service and check network availability), POST_NOTIFICATIONS (update and review-result notifications), and REQUEST_INSTALL_PACKAGES (used solely to install a newer official Kenglu release after your confirmation; we never install third-party apps). These permissions are used only after you accept this policy and only for the purposes stated here. On first launch we request your explicit consent in a dialog, and you may decline and exit the app.

Beyond these cases, we disclose personal information only with your consent, where required by law or regulators, or where necessary to protect the lawful rights of you or others.

04Cookies & Local Storage

Cookies and local storage keep you signed in, remember your language preference, maintain conversation continuity, rotate recommendations and support rate limiting and security checks. We do not use cross-site advertising tracking cookies.

You may clear local data in your browser or app settings. After clearing, you will need to sign in again and device-only conversation records cannot be recovered; conversations already synced to the server are unaffected.

05Retention & Storage

Account data is kept for the life of the account. Question and API call logs are retained for a reasonable period for statistics, security and quality improvement, then deleted or anonymised.

After account deletion we delete or anonymise the corresponding personal information; payment and advertising transaction records are retained for the minimum period required by law or financial reconciliation.

Data is stored in servers and databases we operate, protected by transport encryption, access control and per-account isolation.

06Your Rights

• Access and correction: edit nickname, avatar, password and bound mobile number in your profile.
• Manage long-term memory: view, delete individually or clear all under Settings → Long-term Memory.
• Manage conversations: delete local conversations in your browser or app; contact us regarding server-side conversations.
• Deletion and closure: email api@kenglu.com; after identity verification we will process account closure and data deletion requests.
• Withdraw consent: you may disable cookies or sign out, though this affects sign-in and account-dependent features.

07Security Measures

We use HTTPS, hashed password storage, scoped API keys, rate limiting, per-account data isolation and least-privilege internal access. No internet environment is absolutely secure, so please safeguard your account, password and devices, and contact us promptly if you notice anything unusual.

08Minors

If you are under 18, please use the Platform under the guidance of a guardian. We do not knowingly collect minors' personal information unrelated to the service; a guardian may contact us to request deletion.

09Policy Updates

Updates are published on this page with a revised "Last updated" date. Material changes will also be announced through reasonable in-product notices. Continued use of the Platform indicates that you are aware of the update.

10Contact Us

Operator: Hainan Huawen Technology Co., Ltd.　|　Website: www.kenglu.com　|　ICP Filing: 琼ICP备2024046510号-7

For data-rights requests, privacy questions, business enquiries and support, email api@kenglu.com. We will reply within a reasonable period.