Browse tools

Privacy Policy

This explains what personal data Kenning collects, why, who we share it with, how long we keep it, and what rights you have. We have tried to keep it plain. If something is unclear, email [email protected].

Contents

Who we are

Kenning is the data controller for personal data collected through kenning.news.

We have not appointed a data protection officer. For anything about your personal data, use the email below.

For anything, including data rights, corrections, complaints and legal notices, email [email protected].

What we collect and why

Each item gives the data, the reason, and our legal basis under the UK GDPR.

  • Correspondence. Your name, email address and what you tell us when you write to us. Legal basis: our legitimate interest in answering you, and legal obligation where we must keep records.
  • Website visitors. Your IP address and basic request data (browser, device type, pages requested) are processed by our hosting and security providers. Legal basis: our legitimate interest in running and securing the site.
  • Analytics. See the cookies section below. Where it uses cookies or similar technology that need consent, the legal basis is your consent.
  • People we write about. Public information about public figures in AI. See the section on people we write about. Legal basis: our legitimate interest in journalism and public-interest publishing.

You do not have to give us any data to read the site.

We do not make decisions about you using solely automated means that have legal or similarly significant effects. We do not sell your personal data.

Using the website, cookies and analytics

When you visit kenning.news, our servers and our providers (see the section on who we share data with) see your IP address, browser, device and the pages you request. We use this to deliver the site and keep it secure.

Some pages load fonts from Fontshare. When your browser fetches them, Fontshare sees your IP address and browser details. We do not set cookies for this.

Essential storage. We use only what the site needs to work, such as remembering your cookie choices. This does not need consent.

Analytics. We use PostHog Cloud EU (PostHog Inc.), with data hosted in Frankfurt, Germany. We use it for page views, events (such as affiliate link clicks and scroll depth), funnels, and campaign attribution (for example, which site a visit came from, through UTM tags in links).

We run basic aggregate statistics, used only to improve Kenning, under the statistical-purposes exception in the privacy and electronic communications rules. It is not shared except with PostHog as our provider. You can object for free at any time through the "Manage cookies" link or by emailing [email protected].

Session recordings and heatmaps. PostHog can also record how individual visitors move around a page (session recordings and heatmaps). We only turn these on, and any other tracking that identifies you, after you accept them in our cookie banner. If you reject or ignore the banner, they stay off. Recordings mask form inputs.

You can change your mind at any time with the "Manage cookies" link in the site footer. Rejecting is as easy as accepting.

Other sites that we link to have their own cookies and policies. We do not control them.

Affiliate links

Some links to tools earn Kenning a commission if you sign up or buy, at no extra cost to you. Affiliate links never affect Kenning scores. We mark affiliate links on the site.

When you click an affiliate link, you leave Kenning. The other company can see your IP address, browser, the page you came from and any code in the link. It may set its own cookies and will collect any data you give it. That company is responsible for that data under its own privacy policy. We receive only commission reports. We do not receive your name or email from them.

Measurement or attribution cookies on our own site, if we ever add them, will be treated as non-essential and only run after you consent.

People we write about

Kenning publishes profile pages of public figures in AI. If you have a profile, we did not get your data from you. We got it from public sources.

  • What we use. Names, job roles, company and career history, public statements, public posts, quotes, published interviews, and public court and regulator records.
  • Where from. Public websites, news reports, company filings, social media posts you have made publicly, and public court and regulator records. Profiles cite their sources. Some profiles have an "In court" section that links to public court or regulator records.
  • What we do not publish. We do not publish details of private life, family, health or home addresses.
  • Review. We review profiles at least every three months.
  • Research tools. To prepare profiles we use web search tools and AI model providers. These may process public information about public figures, such as names, public posts and quotes. We do not use them to build private files on people.
  • Legal basis. Our legitimate interest, and the public interest, in journalism and informing readers.

Journalism exemption. The Data Protection Act 2018 (Schedule 2, Part 5) lets us set aside some data protection rules, including some transparency rules and some rights, where we reasonably believe that complying would be incompatible with journalism, the processing is with a view to publication, and publication is in the public interest. We do not treat this as automatic. We decide case by case, and we give weight to freedom of expression and to relevant editorial codes. It does not apply to our analytics or other non-journalistic data.

Corrections and objections. If something about you is wrong, or you want to object to what we publish, email [email protected]. Tell us the page, what is wrong, and what you want us to do. We review each request case by case. We may correct, update, limit or remove content. We may decline where we can show a compelling reason or where the journalism exemption applies, and if so we will tell you why.

Content is researched and drafted with AI assistance under human editorial control, with sources cited.

Who we share data with

We share personal data only with providers who help us run Kenning, and where the law requires. They act on our instructions as processors unless stated.

  • Cloudflare. Hosting, content delivery, DNS, security and email forwarding. Sees visitor IP addresses and request data, and emails sent to our addresses.
  • Fontshare. Web fonts. Sees your IP address when you load a page.
  • PostHog (PostHog Inc.). Analytics, hosted in the EU (Frankfurt). Receives usage data about how you use the site, and session recordings and heatmaps only after consent.
  • Research tool and AI model providers. Public information about public figures, as described above. We do not send them visitor data.
  • Professional advisers, regulators and law enforcement. Where the law requires or to protect legal rights.

Transfers outside the UK

Some of our providers are based in, or access data from, the United States or other countries outside the UK. When we send personal data outside the UK we use a lawful route. Our analytics run on PostHog's EU cloud, hosted in Frankfurt; PostHog says event and user data in its EU cloud is not transferred to the United States. Any access by PostHog Inc. (US) is covered by its data processing agreement. Analytics data is hosted in the EU. For other providers, including Cloudflare, we rely on UK adequacy rules, the UK-US data bridge where the provider is certified, or standard contract clauses with the UK Addendum. You can ask us for details at [email protected].

How long we keep data

  • Correspondence. 2 years.
  • Analytics. Analytics events are kept for 12 months and session recordings for 30 days.
  • Server and security logs. Cloudflare keeps request logs for between 3 and 7 days.
  • Research notes about public figures. While the related profile is live and under review, then deleted or anonymised when no longer needed. A published profile stays online until we correct, update or remove it.

Your rights

Under UK data protection law you have the right to:

  • be told how we use your data (this policy);
  • get a copy of your data;
  • have wrong data corrected;
  • have your data erased in some cases;
  • restrict how we use your data in some cases;
  • receive your data in a portable format where we rely on consent;
  • object to processing based on our legitimate interests, and object to direct marketing at any time;
  • withdraw consent at any time; and
  • not be subject to solely automated decisions with legal or similar effects (we do not make any).

To use a right, email [email protected]. We may need to check who you are. We will reply within one month. Some rights have limits, including for journalism as explained above. It is free to ask unless a request is clearly unfounded or excessive.

Complaints

If you are unhappy with how we handle your data, tell us first at [email protected]. We will acknowledge your complaint within 30 days, look into it, and tell you the outcome.

You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113. You do not have to complain to us first.

Children

Kenning is for adults. We do not knowingly collect data from under-16s. If we find we have collected a child's data by mistake, we will delete it. If you think this has happened, email [email protected].

Security

We use reasonable technical and organisational measures to protect personal data, including secure hosting and access controls. No system is perfectly secure. If a data breach is likely to put you at risk, we will tell you and the ICO as the law requires.

Changes to this policy

We may update this policy as Kenning changes. The date at the top shows when it last changed. If a change materially affects how we use your data, we will say so on the site before it takes effect. If we introduce new features such as paid subscriptions, reader reviews or tool submissions, we will update this policy first.