85 of 85 cards
Legal Rights & Agreement Rules · Context
The policy states an effective date of August 31, 2026 and a last-updated date of August 24, 2026.
Effective Date: August 31, 2026 Last Updated: August 24, 2026
Legal Rights & Agreement Rules · Context
The policy is issued by Beijing Moonshot Technology Co., Ltd. (referred to as "we"), and Section 1.1 says the team comes from that company and its affiliates. Contact information is in Section 11 of the policy.
Beijing Moonshot Technology Co., Ltd. (hereinafter "we," "us," or "our")
1.1 Our team comes from Beijing Moonshot Technology Co., Ltd. and its affiliates. Contact information is set out in Section 11.
Legal Rights & Agreement Rules · Company practice
The policy says that if you do not understand or do not agree with part or all of it, you should not use the products and services, and that once you begin using them you are deemed to have fully understood and agreed to accept all of its terms.
If you do not understand or do not agree with part or all of this Privacy Policy, please do not use our products and services. Once you begin using our products and services, it means you have fully understood and agreed to accept all the terms of this Privacy Policy.
Data Access & Collection · Company commitment
Kimi commits to a minimum-necessity principle (minimum impact, minimum scope, shortest time) when processing personal information, says it collects information only when necessary for a specific service purpose, and says you can enable or disable certain business functions in product settings. For non-essential personal information you may choose not to provide it, and refusing will not affect normal use of the basic services.
we will always follow the principle of minimum necessity (minimum impact, minimum scope, and shortest time) when processing your personal information
You can choose to enable or disable certain specific business functions through the settings options of the products. We will collect your personal information only when necessary to achieve a specific service purpose. For non-essential personal information, you have the right to choose not to provide it. Refusing to provide such information will not affect your normal use of our basic services.
Legal Rights & Agreement Rules · Context
The policy applies to all products and services Kimi provides, including the kimi.com website, the Kimi app and its PC version, the Kimi Claw app, mini-programs and future formats, for natural-person users. If a particular product or service has a separate privacy policy, that policy prevails, and this policy applies to matters the separate policy does not address.
This Policy applies to all products and services we provide, including but not limited to those we offer to you through our website (kimi.com), applications (the Kimi APP and its PC version; the Kimi Claw APP), mini-programs
If a particular product or service of ours has a separate privacy policy, that policy shall prevail. For matters not addressed in that separate privacy policy, this Policy shall apply.
Legal Rights & Agreement Rules · Restriction or exception
When you access third-party products and services through Kimi’s products and services, or use integrated third-party products and services, the third party manages your personal information under its own policies, and Kimi says it cannot be responsible for the third party’s processing activities. Kimi recommends reading the third party’s policies.
when you access third-party products and services through our products and services, or actually use integrated third-party products and services, the processing of your personal information and privacy will be managed by that third party in accordance with its relevant policies. We cannot be responsible for the processing activities of third parties.
Use & Processing · Company commitment
Kimi says that when it processes personal information it will strictly follow the principles of lawfulness, legitimacy, necessity and good faith, process openly, transparently and accurately, and continue to work toward industry best practices.
When processing your personal information, we will strictly follow the principles of lawfulness, legitimacy, necessity, and good faith, process it openly, transparently, and accurately, and continue to work toward industry best practices.
Data Access & Collection · Company practice
Kimi collects information you actively provide: basic information such as your mobile phone number when registering or using the services; content you voluntarily upload such as text, images, audio, video or other files; personal information you provide when giving feedback, suggestions, complaints or support requests; and information required for a specific feature when you use it.
When you register an account with us or use our products and services, you may need to provide some basic information, such as your mobile phone number.
During use, you may voluntarily upload content such as text, images, audio, video, or other files.
When you give us feedback, make suggestions, file complaints, or request customer support, you may provide relevant personal information.
When you use certain features, you may provide the relevant personal information required to implement that specific feature.
Charges & Financial Obligations · Company practice
When you subscribe to or renew Kimi paid membership services, you may provide payment- and order-related information, and Kimi says it may collect payment- and order-related information in that context.
When you subscribe to or renew Kimi paid membership services, you may provide information related to payment and orders.
When you subscribe to or renew Kimi paid membership services, we may collect information related to payment and orders.
Data Access & Collection · Company practice
Kimi automatically collects device, operating system and network information through technical means, such as device model, operating system version and unique device identifiers, and its servers automatically record usage data including access times and IP addresses.
We automatically collect, through technical means, your device information, operating system information, network information, and the like, such as device model, operating system version, and unique device identifiers.
Our servers automatically record your usage, including access times, IP addresses, and the like.
Data Access & Collection · Company practice
Kimi may use cookies and similar technologies to understand your usage habits in order to provide more personalized services.
We may use cookies and similar technologies to understand your usage habits in order to provide more personalized services.
Data Access & Collection · Company practice
Based on cooperation with third parties, Kimi may obtain certain information related to cooperative services from those third parties, and points to the sharing provisions in Section 4 for details.
Based on cooperation with third parties, we may obtain certain information related to cooperative services from third parties. For details, please see the sharing section in Section 4.
Data Access & Collection · User right or choice
Kimi requests microphone permission when you send voice messages or use your voice as the reply or call voice. If you refuse, you cannot use voice-related functions, but other functions are unaffected.
Microphone permission: When you send voice messages or use your voice as the reply voice or call voice corresponding to our services, we will request permission to use your microphone. If you refuse authorization, you will be unable to use voice-related functions, but this will not affect your use of other functions.
Data Access & Collection · User right or choice
Kimi requests camera and gallery permissions when you voluntarily take photos, upload images or scan a code to log in. If you refuse, you cannot take photos or upload images, but other functions are unaffected.
Camera and gallery access permissions: When you voluntarily take photos, upload images, or scan a code to log in, we will request your authorization for camera and gallery permissions. If you refuse authorization, you will be unable to take photos or upload images, but this will not affect your use of other functions.
Data Access & Collection · User right or choice
Kimi collects your location information if you use location-based services, and requests precise location permission for services based on precise location, such as location-based inquiries. If you refuse the permission, you cannot obtain the more accurate services, but other functions are unaffected.
If you use location-based services, we will collect your location information.
Precise location information permission: When you use services based on precise location, including but not limited to making inquiries based on precise location information, we will request that you grant precise location information permission. If you refuse authorization, you will be unable to obtain more accurate services, but this will not affect your use of other functions.
Data Access & Collection · Company commitment
Depending on the device and services used, Kimi may request permissions such as storage and notifications, and for feature use it collects the required personal information based on your authorization. Kimi commits to explain a permission’s purpose before invoking it and not to collect information in unrelated scenarios or when the relevant feature is not running. Refusing a permission disables the relevant services only. The text notes that deploying the Kimi Claw feature locally may require system permissions such as notifications, ignoring battery optimization, storage, background running and accessibility services.
When you use certain features, we will, based on your authorization, collect the relevant personal information required to implement that specific feature.
We will explain the purpose of a permission before invoking it, and even if you grant the relevant permission, we will not collect your information in unrelated scenarios or when the relevant feature is not running. If you refuse authorization, you will be unable to use the relevant services, but this will not affect your use of other features.
deploying the Kimi Claw feature locally may require enabling necessary system permissions such as system notifications, ignoring battery optimization, storage, background running, and accessibility services.
Account & Service Control · Company practice
Kimi collects account information you provide when registering and using the services, such as your mobile phone number and profile picture; what is collected depends on what you actually provide. When you register or log in via a third party, Kimi obtains the information necessary for that third-party registration or login based on your authorization. The information is used to create and manage your account and ensure access to the services.
Account information: Personal information you provide when registering for and using our products and services, such as your mobile phone number and profile picture. The specific information collected is subject to what you actually provide during registration and login.
When you register or log in via a third party, we will, based on your authorization, obtain the information necessary for third-party registration or login. This information is used to create and manage your account
Use & Processing · Company practice
Kimi collects conversation information and usage records: the content you input and output while using the products and services, such as text, voice or audio, images and video, as well as quota usage. Kimi says this information helps it provide services, optimize its models, and understand your needs and preferences to offer more precise services and support. The block also points to a public notice of algorithm and model filings for the basic principles, purposes and main operating mechanisms of the model technology.
Conversation information and usage records: The various types of content you input and output during your use of our products and services, such as text, voice/audio, images, and video, as well as quota usage. This information helps us provide services to you, optimize our models, and understand your needs and preferences so that we can offer you more precise services and support.
Data Access & Collection · Company practice
Kimi collects device, operating system, network and log data when you use the products and services: device model, OS version, unique device identifiers, sensors and sensor lists, MAC address, user ID, conversation ID and conversation content, as well as IP address, browser type, telecommunications carrier, language and access date and time. The stated purpose is lawful and secure operation of the software and services and safeguarding and improving operational quality and efficiency.
Data related to the device you use when using our products and services, such as device model, operating system version, unique device identifiers, sensors and sensor lists, MAC address, user ID, conversation ID, and conversation content, as well as IP address, browser type, telecommunications carrier, language used, and the date and time of access. This information is collected for the lawful and secure operation of the software and services, and to safeguard and improve the quality and efficiency of operations.
Charges & Financial Obligations · Company practice
When you subscribe to or renew Kimi paid membership services, Kimi may collect order information, payment information, invoice information and similar information.
Payment and order information: When you subscribe to or renew Kimi paid membership services, we may collect information related to payment and orders, including order information, payment information, invoice information, and similar information.
Data Access & Collection · Company practice
When you file a complaint, or in other scenarios where verifying your identity is required, Kimi may collect your identity information.
Identity information: When you file a complaint, or in other scenarios where verifying your identity is required, we may collect your identity information.
Data Access & Collection · Company practice
To help you use some product functions, Kimi may collect other information such as precise location information, clipboard information and voiceprint information. The specific rules for precise location, clipboard and voiceprint are stated where those features are described.
Other information: To help you better use some of our product functions, we may collect other information such as your precise location information, clipboard information, and voiceprint information.
Data Access & Collection · Context
Kimi says it has prepared a personal information collection list to explain the types, names, purposes, scenarios and circumstances of information collection, and links to the Kimi Personal Information Collection List for details.
we have specially prepared a personal information collection list. Please refer to the Kimi Personal Information Collection List for details
Use & Processing · Company commitment
Kimi says that when using your personal information its goal is to do its utmost to provide the best service experience, subject to compliance with all relevant laws and regulations.
When using your personal information, our goal is to do our utmost to provide you with the best service experience, subject to compliance with all relevant laws and regulations.
Account & Service Control · Company practice
To register for and log in to the products and services you need to provide your mobile phone number and verify it with a verification code. The phone number you provide serves as one of the means by which Kimi contacts you, including for notifications such as policy updates, service changes, customer service communications and marketing activities.
To register for and log in to our products and services, you need to provide your mobile phone number and verify it via a verification code in order to complete account registration and login. The mobile phone number you provide will serve as one of the means by which we contact you, including but not limited to receiving notifications (such as policy updates, service changes, customer service communications, and marketing activities).
Account & Service Control · User right or choice
At registration and login you may choose “one-click login”: subject to your consent, Kimi uses the mobile phone number on your device as the number bound to your account, waiving password or dynamic verification-code verification. You may also log in by scanning a QR code with the Kimi app’s Scan button.
When you choose this method, we will, subject to your consent, use the mobile phone number on your device as the number bound to your account, waiving password or dynamic verification code verification. You may also log in by using the "Scan" button in the Kimi APP to scan a QR code.
Account & Service Control · User right or choice
You may register and log in using a third-party account such as WeChat. Subject to your consent, Kimi obtains the public information you use on the third-party platform (profile picture, nickname and other information you authorize) and the associated ID, to bind to your Kimi account so you can log in directly. If information required for registration is missing, Kimi will collect supplementary information from you.
You may also register and log in using a third-party account (such as WeChat). Subject to your consent, we will obtain the public information you use on the third-party platform (profile picture, nickname, and other information you authorize) and the associated ID, for the purpose of binding to your account with our products and services so that you can log in directly. If some of the information required for registration is missing, we will collect supplementary information from you.
Use & Processing · Company practice
Kimi says the normal use of its products and services depends on the content you input and output, so it needs to collect and use the text, voice or audio, images, or files in other formats that you input and output in order to provide conversation services. It notes that functions such as text selection in its official browser plugin are also essentially input operations.
The normal use of our products and services depends on the content you input and output, so we need to collect and use the text, voice/audio, images, or files in other formats that you input and output to provide you with conversation services. Please note that functions such as text selection in our official browser plugin are also essentially input operations.
Data Access & Collection · Company practice
When you paste content from the system clipboard into the conversation input box, or when clipboard content is used for other business needs, Kimi says it needs to collect and use your clipboard information.
When you paste content from the system clipboard into the conversation input box, or when clipboard content is used for other business needs, we need to collect and use your clipboard information.
Retention & Deletion · User right or choice
To achieve and ensure continuity of experience, Kimi says it needs to collect and use chat history. You may delete your historical conversation information.
To achieve and ensure continuity of experience, we need to collect and use chat history. You may delete your historical conversation information.
Use & Processing · Company practice
To ensure normal provision of the products and services and to optimize services, Kimi may collect and use non-communication content data, including log data, network, device and operating-system information, application information and cookies, such as IMEI, Android ID, Android OAID, IDFA, OAID and ODID (HarmonyOS), AAID, language settings, operating system version, IP address and product version number.
To ensure the normal provision of products and services and optimize services, we may collect and use non-communication content data (including log data, network information, device information, operating system information, information about this product application, cookies and similar technology information, such as: IMEI, Android ID, Android OAID, IDFA, OAID(HarmonyOS), ODID(HarmonyOS), AAID, language settings, operating system version, IP address, product version number)
Data Access & Collection · User right or choice
When you use your voice as the reply voice or call voice, Kimi collects your voiceprint information to provide personalized, customized voice services. Kimi states that voiceprint information is your sensitive personal information; if you do not agree to its collection, do not record your voice or use the feature, and if you have already recorded it you can delete your voiceprint information on the relevant page.
Under this feature, we will collect your voiceprint information to provide you with personalized, customized voice services. Voiceprint information is your sensitive personal information. If you do not agree to our collection of it, please do not record your voice or use this feature. If you have already recorded it, you can delete your voiceprint information on the relevant page.
Data Access & Collection · User right or choice
For services based on location information, such as asking about nearby weather, surroundings or route planning, you can enable location permission so Kimi can give more precise answers; based on your authorization Kimi will access and collect your precise location information. If you do not enable the permission, Kimi says it will only provide answers based on lawfully collected historical information and the like. Kimi states that precise location information is your sensitive personal information, and if you do not agree to its collection you should disable the corresponding location permission.
We will, based on your authorization, access and collect your precise location information. If you do not enable the corresponding permission, we will only provide answers that better meet your needs based on lawfully collected historical information and the like. Precise location information is your sensitive personal information. If you do not agree to our collection of it, please disable the corresponding location permission.
Charges & Financial Obligations · Company practice
When you subscribe to or renew Kimi paid membership, Kimi may collect order information (order number, membership type, amount, payment time, validity period), payment information (payment channel, payment status, transaction number) and invoice information (company name, tax identification number, invoice email address). Stated purposes include processing the purchase, automatic renewal or refund, verifying payment status, issuing invoices, customer service, dispute handling, compliance audits, and tax, regulatory and anti-money-laundering obligations required by law. Kimi states it does not collect or store sensitive financial account information that you provide directly to payment channels during payment.
we may collect order information (such as order number, purchased membership type, amount, payment time, and validity period), payment information (such as payment channel, payment status, and transaction number), and invoice information (such as the company name, tax identification number, invoice email address, and similar information you provide when applying for an invoice), to process your membership purchase, automatic renewal, or refund; verify payment status; issue invoices; provide customer service; handle disputes; conduct compliance audits; and perform tax, regulatory, and anti-money laundering obligations required by laws and regulations.
we do not collect or store any sensitive financial account information that you provide directly to payment channels during the payment process.
Use & Processing · Company practice
When you use the products and services you can perform operations such as liking, disliking, giving feedback and sharing, and Kimi collects your operations and evaluation content in order to improve the service experience.
When you use our products and services, you can perform operations such as liking, disliking, giving feedback, and sharing. We will collect your operations and evaluation content in order to improve our service experience.
Inference & Profiling · Company practice
Kimi says it will use the content you input and output to optimize its models, and use your access to and use of its products for data analysis, on the stated premise that the information has been processed with secure encryption technology, strictly de-identified, and cannot be used to re-identify any specific individual, in order to enhance the service experience.
On the premise that the information has been processed with secure encryption technology, strictly de-identified, and cannot be used to re-identify any specific individual, we will use the content you input and output to optimize our models, or use your access to and use of our products for data analysis, so as to enhance your service experience.
Inference & Profiling · User right or choice
If you do not want your content used for model training, you may contact Kimi customer service through the contact details in Section 11 of this policy and make a request; after verifying your identity, Kimi will stop using your content for model training.
If you do not want your content to be used for model training, you may contact our customer service through the contact details set out in Section 11 of this Policy and make a request. After verifying your identity, we will stop using your content for model training.
Inference & Profiling · User right or choice
To provide smarter replies that fit your needs, Kimi may remember, organize or summarize information you mention in conversations and use it as background reference when generating subsequent replies. You can disable or re-enable the feature on the product settings page, and can view and manage the saved content.
In order to provide you with smarter replies that better fit your needs, we may remember, organize, or summarize information you mention in conversations, using it as background reference for generating subsequent replies. You can disable or re-enable the relevant feature through the product settings page, and can also view and manage the saved content.
Data Access & Collection · Company practice
When you file a complaint with Kimi, you need to proactively provide your identity information and contact information as required by law so that Kimi can effectively handle the complaint.
When you file a complaint with us, you need to proactively provide your identity information and contact information as required by law so that we can effectively handle the complaint.
Legal Rights & Agreement Rules · Context
The policy states that information which cannot, on its own or in combination with other information, identify your personal identity does not constitute your personal information in the legal sense. When information can identify you, or when Kimi combines data that cannot be linked to any specific individual with your personal information, Kimi will process such information strictly in accordance with this policy.
If information cannot, on its own or in combination with other information, identify your personal identity, it does not constitute your personal information in the legal sense. When your information can, on its own or in combination with other information, identify your personal identity, or when we combine data that cannot be linked to any other specific individual with your personal information, we will process such information strictly in accordance with this Policy.
Legal Rights & Agreement Rules · Restriction or exception
Kimi asks you to exercise caution when uploading personal information, especially sensitive personal information. When you upload any content (including text, voice or audio, images, or files provided during normal input, feedback or contact), you should check whether it contains any third party's personal information, confidential information or other inappropriate information, and before submitting you are responsible for ensuring you have obtained all necessary lawful authorizations, to avoid disclosing others' privacy or infringing their rights.
Please exercise caution when uploading your personal information, especially sensitive personal information.
Before submitting such information, you are responsible for ensuring that you have obtained all necessary lawful authorizations to avoid inadvertently disclosing others' privacy or infringing their lawful rights and interests.
Legal Rights & Agreement Rules · Restriction or exception
The policy states that under the Personal Information Protection Law the following circumstances do not require your prior consent: (a) processing necessary to conclude or perform a contract with you, for example completing a transaction or providing services; (b) processing necessary to perform statutory duties or obligations, for example in relation to national security, criminal investigation, trial and enforcement, or government instructions; (c) responding to public health emergencies or emergencies protecting life, health and property; (d) processing within a reasonable scope for news reporting, public-opinion supervision and similar public-interest activities; (e) processing within a reasonable scope of personal information you disclosed or that was otherwise lawfully disclosed; and (f) other circumstances provided by laws and administrative regulations.
We hope you understand that, under the Personal Information Protection Law, the following circumstances do not require your prior consent:
a. Necessary for concluding or performing a contract: When you conclude or perform a contract with us, it may be necessary to process your personal information, for example to complete a transaction or provide services.
b. Necessary for performing statutory duties or statutory obligations: When we need to comply with laws and regulations and perform statutory duties or obligations, it may be necessary to process your personal information, for example where necessary in relation to national security, criminal investigation, trial and enforcement, or in response to instructions from government authorities.
c. Necessary for responding to public health emergencies, or in emergencies to protect the life, health, and property safety of natural persons: In emergencies, it may be necessary to process your personal information to protect your or others' life, health, and property safety.
d. Processing personal information within a reasonable scope for news reporting, public opinion supervision, and similar activities carried out in the public interest: For the public interest, such as news reporting and public opinion supervision, your personal information may be processed within a reasonable scope.
e. Processing, within a reasonable scope, personal information that has been disclosed by the individual or otherwise lawfully disclosed: If you have disclosed certain personal information, or such information has otherwise been lawfully disclosed, we may process such information within a reasonable scope.
f. Other circumstances provided by laws and administrative regulations: Other circumstances provided by laws and regulations.
Use & Processing · Company practice
Kimi says it uses cookies and similar technologies to enhance user experience, optimize service performance and provide more personalized services, including remembering your preferences such as language settings and interface theme, analyzing website traffic and user behavior by collecting anonymous data to improve website functions and service quality, and enhancing security by identifying and preventing potential security threats and unauthorized access.
We use cookies and similar technologies to enhance your user experience, optimize the performance of our services, and provide you with more personalized services.
Remembering your preferences: such as language settings and interface theme, so that you do not need to reset them the next time you visit.
Analyzing website traffic and user behavior: helping us understand user behavior patterns by collecting anonymous data, so as to improve website functions and service quality.
Enhancing security: used to identify and prevent potential security threats and protect your account and personal information from unauthorized access.
Use & Processing · Company commitment
Kimi commits that it will not use cookies and similar technologies for any purpose other than those stated in this policy.
3.2 We will not use cookies and similar technologies for any purpose other than those stated in this Policy.
Use & Processing · User right or choice
You may manage or disable cookies according to your needs: most browsers let you accept all cookies, accept only certain types, or reject all cookies, and you can delete stored cookies through browser settings. Kimi notes that disabling certain cookies may seriously affect your user experience.
You may manage or disable cookies according to your needs. Most browsers allow you to manage cookies directly in settings. You may choose to accept all cookies, accept only certain types of cookies, or completely reject all cookies. If you wish to delete stored cookies, you may also do so through your browser's settings options. Please note that disabling certain cookies may seriously affect your user experience.
Sharing & Disclosure · Company practice
Kimi may entrust third-party service providers (such as authorized partners including its technical service providers) to process your personal information so they can provide technical support, data analysis and other services. Kimi says it entrusts processing only on the basis of lawful, legitimate, necessary, specific and explicit purposes and only where industry-standard security technologies are adopted; entrusted parties may access only the personal information necessary to perform their duties, must comply with Kimi’s instructions and this policy, and must not use the information beyond the agreed purpose scope.
We may entrust third-party service providers (such as authorized partners including our technical service providers) to process your personal information so that they can provide us with technical support, data analysis, and other services.
The entrusted parties may access only the personal information necessary to perform their duties, and must comply with our instructions and the provisions of this Policy, and must not use such information beyond the agreed purpose scope.
Sharing & Disclosure · Company practice
Section 4.2 states: “Except where we have obtained your explicit consent or where your consent is not required under laws, we may share your personal information with partners (including our affiliates and other third parties) to enable the normal use of functions such as API interfaces and software development kits (SDKs).” Read as written, the sentence permits Kimi to share personal information with partners for these functions and presents consent-based sharing and legally exempt sharing as alternatives; it does not plainly condition partner sharing on your consent. The neighbouring clauses share the same preamble with a different main clause: Section 4.3 permits merger-type transfers subject to protective conditions, and Section 4.4 states Kimi will not publicly disclose personal information except with explicit consent or a legal exemption. Section 10 says the Chinese version prevails on any discrepancy or ambiguity, so the saved English wording does not by itself settle how this exception is applied.
Except where we have obtained your explicit consent or where your consent is not required under laws, we may share your personal information with partners (including our affiliates and other third parties) to enable the normal use of functions such as API interfaces and software development kits (SDKs).
Except where we have obtained your explicit consent or where your consent is not required under laws, we will not publicly disclose your personal information.
In case of any discrepancy, ambiguity or conflict between the two language versions, the Chinese version shall prevail.
Sharing & Disclosure · Company practice
To process transactions, refunds and other functions for paid services, Kimi may disclose necessary transaction information (such as order information, payment status, credits usage and similar information) to payment and transaction processors such as Apple Pay, including but not limited to payment channel service providers. Kimi says it shares such information only to the extent necessary and that these entities will access, process or store it only in the course of performing their duties for Kimi.
To assist us in processing transactions, refunds, and other functions for paid services, we may disclose necessary transaction information (such as order information, payment status, credits usage, and similar information) to payment and transaction processors (such as Apple Pay).
We will share such information with payment and transaction processors only to the extent necessary, and such entities will access, process, or store the relevant information only in the course of performing their duties for us.
Sharing & Disclosure · Company practice
To display advertisements for Kimi products and services on third-party websites, applications and other platforms and to measure advertising effectiveness, Kimi may cooperate with advertising partners such as advertising publishing platforms, agencies and service providers and provide them with anonymized personal information. Kimi says it will not provide advertising partners with your conversation content, the files you input and output, or other information that could reflect your specific usage, and that it will contractually require advertising partners to process personal information only for the agreed purposes and to adopt corresponding security protection measures.
we may cooperate with advertising partners such as advertising publishing platforms, advertising agencies, and service providers, and provide them with anonymized personal information. We will not provide advertising partners with your conversation content, the files you input and output, or other information that could reflect your specific usage. We will require by contractual agreement that advertising partners process your personal information only for the foregoing agreed purposes and adopt corresponding security protection measures.
Sharing & Disclosure · Context
Kimi points readers who want to know which third parties share their information, for what purposes and by what methods to its Third-Party Information Sharing List.
If you would like to know which third parties share your information, for what purposes, and by what methods, you may refer to the Third-Party Information Sharing List
Sharing & Disclosure · Company practice
Except for transfers based on your request, or transfers that do not require obtaining your consent under the law, Kimi may undergo a merger, acquisition, asset transfer or similar transaction. If such a transaction involves the transfer of your personal information, Kimi will require the company, organization or individual that newly holds it to continue to be bound by this policy; otherwise Kimi will require them to re-obtain your authorization and consent.
Except for transfers based on your request, or transfers that do not require obtaining your consent under the law, we may undergo a merger, acquisition, asset transfer, or other similar transaction. If such a transaction involves the transfer of your personal information, we will require the company, organization, or individual that newly holds your personal information to continue to be bound by this Policy; otherwise, we will require that company, organization, or individual to re-obtain your authorization and consent.
Sharing & Disclosure · Company commitment
Kimi states that except where it has obtained your explicit consent or where your consent is not required under laws, it will not publicly disclose your personal information.
Except where we have obtained your explicit consent or where your consent is not required under laws, we will not publicly disclose your personal information.
Retention & Deletion · Company commitment
Kimi stores your personal information within the territory of the People’s Republic of China, and states that unless it obtains your separate consent and complies with relevant national laws and regulations, it will not provide any of your personal information outside China.
We store your personal information within the territory of the People's Republic of China. Unless we obtain your separate consent and comply with relevant national laws and regulations, we will not provide any of your personal information outside China.
Retention & Deletion · Company practice
Unless otherwise provided by national laws and regulations, Kimi retains your personal information only for the period necessary to achieve the service purposes. When the products and services cease operations, Kimi will notify you by SMS, announcement or other means, and anonymize or completely delete your personal information within a reasonable period, unless otherwise provided by laws and regulations.
Unless otherwise provided by national laws and regulations, we retain your personal information only for the period necessary to achieve the service purposes. When our products and services cease operations, we will notify you by SMS, announcement, or other means, and anonymize or completely delete your personal information within a reasonable period, unless otherwise provided by laws and regulations.
Security & Safeguards · Company commitment
Section 6.1 states: “We fully understand that the security and confidentiality of personal information is of the utmost importance to you. We will do our best to avoid collecting irrelevant user information, and adopt technical and organizational measures no lower than general industry standards to protect your personal information from unauthorized access, public disclosure, use, modification, damage, or loss, including but not limited to:” The commitment is expressed as doing Kimi’s best and as measures no lower than general industry standards; the following items in 6.1 spell out encryption, transmission security, system protection, institutional safeguards, backups and breach monitoring.
6.1 We fully understand that the security and confidentiality of personal information is of the utmost importance to you. We will do our best to avoid collecting irrelevant user information, and adopt technical and organizational measures no lower than general industry standards to protect your personal information from unauthorized access, public disclosure, use, modification, damage, or loss, including but not limited to:
Security & Safeguards · Company commitment
Section 6.1 lists two encryption measures. Data encryption: “We will use industry-leading encryption algorithms to encrypt users' personal information, ensuring that even if the data is obtained by an unauthorized third party, the user's actual information cannot be parsed.” Data transmission security: “We use encryption technology to provide reliable encryption protection for communications between users and servers, ensuring that data is not intercepted or tampered with during transmission.”
Data encryption: We will use industry-leading encryption algorithms to encrypt users' personal information, ensuring that even if the data is obtained by an unauthorized third party, the user's actual information cannot be parsed.
Data transmission security: We use encryption technology to provide reliable encryption protection for communications between users and servers, ensuring that data is not intercepted or tampered with during transmission.
Security & Safeguards · Company practice
Section 6.1 describes operational safeguards. System security protection: “We regularly conduct security inspections and vulnerability patching for servers and systems to prevent hacker attacks and virus intrusions.” Data backup: “We regularly back up users' personal information data and store the backup data in different physical locations, so as to reduce the risk of data loss due to accidents or disasters.” Data breach warning: “We have established a real-time monitoring system to monitor abnormal data access and breaches. Once signs of a data breach are detected, we will immediately take measures to stop the breach, decisively identify the cause, and formulate corresponding improvement measures.”
System security protection: We regularly conduct security inspections and vulnerability patching for servers and systems to prevent hacker attacks and virus intrusions.
Data backup: We regularly back up users' personal information data and store the backup data in different physical locations, so as to reduce the risk of data loss due to accidents or disasters.
Data breach warning: We have established a real-time monitoring system to monitor abnormal data access and breaches. Once signs of a data breach are detected, we will immediately take measures to stop the breach, decisively identify the cause, and formulate corresponding improvement measures.
Security & Safeguards · Company practice
Section 6.1 states: “We have established a dedicated data protection department and designated a person in charge, responsible for the protection of users' personal information. We regularly conduct training and education on personal information protection for company employees, ensuring that all employees understand and attach importance to the protection of users' personal information. We strictly limit company employees' access rights to user data, allowing specific employees to access relevant data only when business needs require. We supervise and evaluate employees who access users' personal information, and promptly handle any improper conduct upon discovery.”
Institutional safeguards: We have established a dedicated data protection department and designated a person in charge, responsible for the protection of users' personal information. We regularly conduct training and education on personal information protection for company employees, ensuring that all employees understand and attach importance to the protection of users' personal information. We strictly limit company employees' access rights to user data, allowing specific employees to access relevant data only when business needs require. We supervise and evaluate employees who access users' personal information, and promptly handle any improper conduct upon discovery.
Security & Safeguards · Company commitment
Section 6.2 states: “For sensitive personal information, we will obtain your separate consent before processing and adopt stricter security measures.” This is a consent condition for a defined category of data and a promise of stronger safeguards.
6.2 For sensitive personal information, we will obtain your separate consent before processing and adopt stricter security measures.
Security & Safeguards · Restriction or exception
Section 6.3 states: “Please pay special attention that, due to the limitations of technical and management measures, the Internet environment is not 100% secure. Once certain information is leaked, the consequences are irreversible. Although we have taken the above measures and strive to improve the level of security, we cannot guarantee absolute security. We strongly recommend that you take more proactive security measures together with us and avoid high-risk actions such as lending out your account, disclosing verification codes, and uploading sensitive information.” The section qualifies the security commitments of 6.1-6.2 and places part of the risk on the user.
6.3 Please pay special attention that, due to the limitations of technical and management measures, the Internet environment is not 100% secure. Once certain information is leaked, the consequences are irreversible. Although we have taken the above measures and strive to improve the level of security, we cannot guarantee absolute security. We strongly recommend that you take more proactive security measures together with us and avoid high-risk actions such as lending out your account, disclosing verification codes, and uploading sensitive information.
Security & Safeguards · Company commitment
Section 6.4 states: “We have formulated a cybersecurity incident emergency response plan. If a security incident such as a personal information breach unfortunately occurs, we will immediately activate the emergency response plan and take measures to prevent the harm from expanding. We will promptly inform you of the basic situation of the security incident, its possible impact, and the remedial measures we have taken, by means such as telephone and push notifications. Where it is difficult to inform each personal information subject individually, we will adopt reasonable and effective means to issue an announcement. At the same time, we will also report the relevant situation to the regulatory authorities, cooperate with the investigation, and pursue the legal liability of the responsible parties.”
6.4 We have formulated a cybersecurity incident emergency response plan. If a security incident such as a personal information breach unfortunately occurs, we will immediately activate the emergency response plan and take measures to prevent the harm from expanding. We will promptly inform you of the basic situation of the security incident, its possible impact, and the remedial measures we have taken, by means such as telephone and push notifications. Where it is difficult to inform each personal information subject individually, we will adopt reasonable and effective means to issue an announcement. At the same time, we will also report the relevant situation to the regulatory authorities, cooperate with the investigation, and pursue the legal liability of the responsible parties.
Legal Rights & Agreement Rules · User right or choice
Section 7.1 states: “You enjoy the right to be informed of and the right to decide on the processing of your personal information, and have the right to restrict or refuse our processing of your personal information, except as otherwise provided by laws and regulations. You may withdraw your consent to our processing of your personal information at any time.” The guide adds: “You can understand our processing activities by reading this Policy and decide whether to consent. If you need explanations, you can contact us. If you do not agree to our carrying out the processing necessary to provide products and services, please do not use our products and services.”
You enjoy the right to be informed of and the right to decide on the processing of your personal information, and have the right to restrict or refuse our processing of your personal information, except as otherwise provided by laws and regulations. You may withdraw your consent to our processing of your personal information at any time. Below is a guide:
You can understand our processing activities by reading this Policy and decide whether to consent. If you need explanations, you can contact us. If you do not agree to our carrying out the processing necessary to provide products and services, please do not use our products and services.
Legal Rights & Agreement Rules · User right or choice
Section 7.1 states: “You can change or withdraw part of your authorization through the permission settings of your device's operating system or the settings options we provide within our products and services; you can also withdraw part or all of the authorization made based on consent through the contact information in Section 11. After you withdraw your consent, we will no longer process the corresponding personal information. This may affect the normal operation of some features, but will not affect our previous personal information processing activities carried out based on your authorization. If you wish to fully withdraw your consent, you can also delete your account.”
You can change or withdraw part of your authorization through the permission settings of your device's operating system or the settings options we provide within our products and services; you can also withdraw part or all of the authorization made based on consent through the contact information in Section 11. After you withdraw your consent, we will no longer process the corresponding personal information. This may affect the normal operation of some features, but will not affect our previous personal information processing activities carried out based on your authorization. If you wish to fully withdraw your consent, you can also delete your account.
Legal Rights & Agreement Rules · User right or choice
Section 7.2 states: “You enjoy the rights to access, copy, correct, supplement, and delete your personal information.”
You enjoy the rights to access, copy, correct, supplement, and delete your personal information.
Legal Rights & Agreement Rules · Procedure
Section 7.2 lists self-service routes. “For personal information you can access on your own:” “You can tap the profile picture / account area in [Settings] to access, correct, or supplement your information.” “You can, in [Chat History] or after [New Chat], tap the [Copy] button to copy conversation content.” “You may tap the [Delete Chat] button in [Chat History] to delete historical conversations.”
For personal information you can access on your own:
You can tap the profile picture / account area in [Settings] to access, correct, or supplement your information.
You can, in [Chat History] or after [New Chat], tap the [Copy] button to copy conversation content.
You may tap the [Delete Chat] button in [Chat History] to delete historical conversations.
Legal Rights & Agreement Rules · Procedure
Section 7.2 states: “For personal information you cannot access on your own, please contact us.”
For personal information you cannot access on your own, please contact us.
Linking & Identification · Company practice
Section 7.3 states: “We sometimes cooperate with third parties to link and bind accounts with your authorization. Information sharing carried out based on account binding is described in Section 4.2 "Sharing" of Chapter 4.” It adds: “You can manage account binding through the settings-interface, and cancel your authorization and unbind through the account security or binding permission management page.” The cross-reference to Section 4.2 is resolved separately; the sharing terms it names are not repeated here.
We sometimes cooperate with third parties to link and bind accounts with your authorization. Information sharing carried out based on account binding is described in Section 4.2 "Sharing" of Chapter 4.
You can manage account binding through the settings-interface, and cancel your authorization and unbind through the account security or binding permission management page.
Account & Service Control · User right or choice
Section 7.4 states: “If you no longer use our products and services, or if you wish to fully withdraw your consent to the processing of your personal information, you can apply to delete your account. You can, in [Account Security] under [Settings] in the App, select [Delete Account]; or in [Account Settings] under [Settings] in the web end, select [Delete Account]. Please note that account deletion is irreversible. Once deleted, we will stop providing services to you and will process your personal information as required by laws and regulations. If deleting or anonymizing personal information is technically difficult to achieve, we will stop processing other than storage and taking necessary security protection measures.”
If you no longer use our products and services, or if you wish to fully withdraw your consent to the processing of your personal information, you can apply to delete your account. You can, in [Account Security] under [Settings] in the App, select [Delete Account]; or in [Account Settings] under [Settings] in the web end, select [Delete Account]. Please note that account deletion is irreversible. Once deleted, we will stop providing services to you and will process your personal information as required by laws and regulations. If deleting or anonymizing personal information is technically difficult to achieve, we will stop processing other than storage and taking necessary security protection measures.
Legal Rights & Agreement Rules · Procedure
Section 7.5 states: “While respecting user privacy and personal information protection, we also recognize that if a user unfortunately passes away, the user's close relatives may need to access or process that user's personal information. Provided that the user did not inform us of other arrangements in writing or by other reasonable means during their lifetime, the user's close relatives may assert rights to us based on their own lawful and legitimate interests.” It requires supporting materials: “valid identity documents of the close relatives; the user's death certificate; documents that can prove the close-relative relationship...; a commitment letter or guarantee...; and other materials that may be required...” It adds: “After verifying identity, we will assist close relatives in completing the exercise of relevant rights... However, if the user made other arrangements during their lifetime, we will respect the user's wishes and will not carry out the relevant operations.”
While respecting user privacy and personal information protection, we also recognize that if a user unfortunately passes away, the user's close relatives may need to access or process that user's personal information. Provided that the user did not inform us of other arrangements in writing or by other reasonable means during their lifetime, the user's close relatives may assert rights to us based on their own lawful and legitimate interests.
When close relatives exercise the above rights, they must provide us with the following supporting materials for identity verification: valid identity documents of the close relatives; the user's death certificate; documents that can prove the close-relative relationship, such as household registration book, birth certificate, marriage certificate, and similar documents; a commitment letter or guarantee stating that they will not violate the user's wishes during their lifetime or infringe others' rights; and other materials that may be required to prove the lawfulness and legitimacy of exercising the rights.
After verifying identity, we will assist close relatives in completing the exercise of relevant rights in accordance with the requirements of laws and regulations. However, if the user made other arrangements during their lifetime, we will respect the user's wishes and will not carry out the relevant operations. In addition, if we discover any abuse of close relatives' rights, we will take corresponding measures to stop it.
Legal Rights & Agreement Rules · Procedure
Section 7.6 states: “If you believe that the way we process personal information violates laws and regulations or the provisions of this Policy, please contact us.” “If you discover a situation where personal information is infringed, you have the right to file a complaint or report with us.” “Under normal circumstances, we will process your request as soon as possible after verifying your identity.”
If you believe that the way we process personal information violates laws and regulations or the provisions of this Policy, please contact us.
If you discover a situation where personal information is infringed, you have the right to file a complaint or report with us.
Under normal circumstances, we will process your request as soon as possible after verifying your identity.
Legal Rights & Agreement Rules · Restriction or exception
Section 7.7 states: “We may refuse requests for information that is not directly associated with your identity, information requested repeatedly without reasonable grounds, or requests that require excessive technical means (such as developing a new system or fundamentally changing current practices), bring risks to others' lawful rights and interests, or are impractical.”
We may refuse requests for information that is not directly associated with your identity, information requested repeatedly without reasonable grounds, or requests that require excessive technical means (such as developing a new system or fundamentally changing current practices), bring risks to others' lawful rights and interests, or are impractical.
Legal Rights & Agreement Rules · Context
Section 8.1 states: “We mainly provide products and services to adults with full capacity for civil conduct, but we attach great importance to protecting minors' personal information and privacy. For more information, please refer to our Children's Privacy Policy.”
8.1 We mainly provide products and services to adults with full capacity for civil conduct, but we attach great importance to protecting minors' personal information and privacy. For more information, please refer to our Children's Privacy Policy.
Legal Rights & Agreement Rules · Company practice
Section 8.2 states: “Due to limitations of technical means and legal provisions, we cannot accurately identify minors during registration and use. The online environment is complex and constantly changing, and minors in particular may lack sufficient judgment to identify potential risks.”
8.2 Due to limitations of technical means and legal provisions, we cannot accurately identify minors during registration and use. The online environment is complex and constantly changing, and minors in particular may lack sufficient judgment to identify potential risks.
Legal Rights & Agreement Rules · Procedure
Section 8.2 encourages guardians to participate: “We hope to work with you to create a clear cyberspace and sound online environment conducive to the healthy growth of minors. We therefore specially remind and encourage guardians to actively participate in their wards' online activities, guide them to correctly use Internet products and services, and cultivate their awareness of self-protection.” The suggestions cover educating minors about personal information (b149), correctly using AIGC tools (b150), and supervision and communication (b151): guardians should “regularly check minors' online activities and maintain open communication channels.” These are recommendations to guardians, not obligations stated for Kimi.
We hope to work with you to create a clear cyberspace and sound online environment conducive to the healthy growth of minors. We therefore specially remind and encourage guardians to actively participate in their wards' online activities, guide them to correctly use Internet products and services, and cultivate their awareness of self-protection. The following are some specific suggestions:
Educate minors about the importance of personal information: Teach minors not to casually share personal information online, including but not limited to names, addresses, and school names. At the same time, emphasize that they should be especially cautious when uploading personal photos, and in particular avoid uploading any inappropriate photos.
Correctly using AIGC (AI-generated content) technology: As AI technology develops, minors may come into contact with various forms of artificial intelligence tools. Guardians should guide minors to understand the functions of these tools and the risks they may bring, such as how improper use may lead to privacy leaks or generate undesirable content. Ensure that minors know which behaviors are appropriate and which are not allowed.
Supervision and communication: Regularly check minors' online activities and maintain open communication channels so that minors feel they can report any problems or discomfort they encounter to you at any time. This can help discover and resolve problems promptly and prevent situations from worsening.
Legal Rights & Agreement Rules · Procedure
Section 8.2 states: “If you discover that we have output inappropriate content in our products and services, please notify us as soon as possible.”
If you discover that we have output inappropriate content in our products and services, please notify us as soon as possible.
Legal Rights & Agreement Rules · Company commitment
Section 8.3 states: “If you are a minor under the age of 18, you should obtain the consent of your parents or other guardians in advance before using our products and services.”
8.3 If you are a minor under the age of 18, you should obtain the consent of your parents or other guardians in advance before using our products and services.
Legal Rights & Agreement Rules · Company commitment
Section 8.4 states: “If you are a minor under the age of 14 (hereinafter referred to as a ‘child’), you should use our products and services with the consent and guidance of your parents or other guardians.” Section 8.5 adds: “If you are a guardian of a child, before using our products and services, you should read and agree to this Policy for your ward and help your ward complete the registration process.”
8.4 If you are a minor under the age of 14 (hereinafter referred to as a "child"), you should use our products and services with the consent and guidance of your parents or other guardians.
8.5 If you are a guardian of a child, before using our products and services, you should read and agree to this Policy for your ward and help your ward complete the registration process.
Legal Rights & Agreement Rules · Company commitment
Section 8.6 states: “We strictly comply with the provisions of relevant national laws and regulations to protect minors' personal information, and will only process such information where permitted by law, with the explicit consent of parents or other guardians, or where necessary to protect minors. If you are the guardian of a minor and discover that we are processing a minor's personal information without authorization, please contact us, and we will verify and handle it appropriately as soon as possible.”
8.6 We strictly comply with the provisions of relevant national laws and regulations to protect minors' personal information, and will only process such information where permitted by law, with the explicit consent of parents or other guardians, or where necessary to protect minors. If you are the guardian of a minor and discover that we are processing a minor's personal information without authorization, please contact us, and we will verify and handle it appropriately as soon as possible.
Legal Rights & Agreement Rules · Company practice
Section 8.7 states: “To implement the requirements of relevant laws and regulations regarding the online protection of minors, we provide a dedicated protection mode for minors (hereinafter ‘Minor Mode’). Guardians of minors, please set up Minor Mode for those under your guardianship; under Minor Mode, we will appropriately restrict certain features and apply additional filtering to output content. We may require you to provide necessary information such as age, guardian, or emergency contact, used to identify a minor's identity and provide corresponding protection. The specific features, scope of restrictions, and manner of use of Minor Mode are subject to what is displayed on the product page or the usage notice we separately publish.”
8.7 To implement the requirements of relevant laws and regulations regarding the online protection of minors, we provide a dedicated protection mode for minors (hereinafter "Minor Mode"). Guardians of minors, please set up Minor Mode for those under your guardianship; under Minor Mode, we will appropriately restrict certain features and apply additional filtering to output content. We may require you to provide necessary information such as age, guardian, or emergency contact, used to identify a minor's identity and provide corresponding protection. The specific features, scope of restrictions, and manner of use of Minor Mode are subject to what is displayed on the product page or the usage notice we separately publish.
Legal Rights & Agreement Rules · Company practice
Section 9 states: “To improve service quality and self-discipline, we will update this Policy from time to time.” “For major policy updates, we will inform you by SMS, pop-up notification, or other conspicuous means.” “If you do not understand or do not agree with the update, please suspend your use of our products and services after the update takes effect. If you continue to use our products and services, it means you have fully understood and agreed to accept this update.”
9.1 To improve service quality and self-discipline, we will update this Policy from time to time.
9.2 For major policy updates, we will inform you by SMS, pop-up notification, or other conspicuous means.
9.3 If you do not understand or do not agree with the update, please suspend your use of our products and services after the update takes effect. If you continue to use our products and services, it means you have fully understood and agreed to accept this update.
Legal Rights & Agreement Rules · Company commitment
Section 10 states: “This Policy is executed in both Chinese and English. Both language versions shall have equal legal effect. In case of any discrepancy, ambiguity or conflict between the two language versions, the Chinese version shall prevail.”
This Policy is executed in both Chinese and English. Both language versions shall have equal legal effect. In case of any discrepancy, ambiguity or conflict between the two language versions, the Chinese version shall prevail.
Legal Rights & Agreement Rules · Procedure
Section 11.1 states: “To implement the principle of minimum necessity for personal information protection, improve processing efficiency, and safeguard user experience, you may choose an appropriate way to contact us:” “If you have any suggestions about this Policy or personal information management operations, you may contact us through the feedback channels built into our products and services.”
11.1 To implement the principle of minimum necessity for personal information protection, improve processing efficiency, and safeguard user experience, you may choose an appropriate way to contact us:
If you have any suggestions about this Policy or personal information management operations, you may contact us through the feedback channels built into our products and services.
Legal Rights & Agreement Rules · Procedure
Section 11.1 states: “If you have any comments about this Policy or personal information management operations, or wish to file a complaint or report, you may send an email to [an address shown in the source].” The address itself is rendered in the saved source through an email-protection link.
If you have any comments about this Policy or personal information management operations, or wish to file a complaint or report, you may send an email to
Legal Rights & Agreement Rules · Procedure
Section 11.2 states: “When you need to file a complaint because your lawful rights and interests have been infringed, we need you to submit valid proof of identity and contact information, as well as a written request and preliminary evidence constituting the infringement. We will process your request as soon as possible after verifying your identity, and will respond within fifteen (15) working days.”
11.2 When you need to file a complaint because your lawful rights and interests have been infringed, we need you to submit valid proof of identity and contact information, as well as a written request and preliminary evidence constituting the infringement. We will process your request as soon as possible after verifying your identity, and will respond within fifteen (15) working days.
Legal Rights & Agreement Rules · Context
Section 11.3 states: “Contact address: 13/F, Building 1, JD Technology Building, No. 76 Zhichun Road, Haidian District, Beijing.”
11.3 Contact address: 13/F, Building 1, JD Technology Building, No. 76 Zhichun Road, Haidian District, Beijing.