Privacy policy

What Kanoon Kaka collects, why, who else sees it, and when it is deleted. Written from what the code actually does.

Who holds your data

Aditya Prakash Kaithvas, who runs Kanoon Kaka as an individual. Write to support@kanoonkaka.in about anything on this page.

What we collect

• Your question, exactly as you typed it, and the answer we gave. This is the sensitive one, and everything else on this page exists because of it.
• An approximate city and State — read from the network at the edge, used to work out which State’s laws apply to you, and stored alongside the answer. This is the part nobody would guess is there, so it is said plainly: your answer has an approximate location saved with it.
• Your email address — only if you sign in. That is the whole of what an account holds: no name, no phone number, no password. There is no password to steal, because the code sent to your mailbox is the credential.
• A random identifier in a cookie, so that your own consultations come back to you and nobody else’s do. It is not derived from anything you typed.
• Timestamps and a few technical facts — when a question was asked, how long it took, which model answered, and the Act sections that were retrieved.

What we do not collect

• No IP addresses are stored by us, and there is no device fingerprinting of any kind.
• No audio. If you speak your question instead of typing it, the speech recognition runs inside your own browser and we receive only the words you choose to send. Nothing is recorded or uploaded.
• No advertising, no advertising trackers and no third-party analytics.
• No copy of your question is kept as a search index or an embedding. The question is turned into a vector at the moment it is asked, used to search the statutes, and discarded — so deleting a conversation really does delete everything derived from it.

Why we collect it

• To answer your question, which is the whole purpose.
• To work out which State’s Acts apply, so you are not shown another State’s law.
• To show your consultation in the sidebar so you can come back to it within the seven days it is kept.
• To cap how many questions one reader may ask in a day, and to keep the site from being abused. The counting is done against the identifier above and holds no words of your question.

It is deleted after seven days

A conversation is kept for 7 days from the moment it was created and is then deleted by a job that runs every day: the questions, the answers, and the approximate location stored with them. The clock runs from when the conversation started, so a long thread cannot keep extending it.

You can delete sooner, yourself, at any time: one consultation from its own delete control, or Delete all my consultations at the foot of the sidebar. It happens immediately and cannot be undone. You can also write to us and ask.

Sign-in codes and sessions expire on their own and are swept daily.

You can delete your whole account yourself

Delete my account is in the account menu, and it is permanent. Your account, every consultation on it and your subscription are deleted straight away, and nothing can be recovered — not by you and not by us. If you are on a paid plan it ends immediately, and there is no refund for the rest of the period you have paid for. Signing in again with the same address starts a new, empty account rather than reopening the old one.

Two records are deliberately kept, and neither names you. Your payment receipts stay, because Indian law requires financial records to be kept for years — they hold an amount, a date and our own reference, and never your email address or your name. And the fact that an account was deleted is written in our own action log with your address masked, so what was done can be answered for without the log becoming the one place a deleted reader is still named.

You can still write to support@kanoonkaka.in and ask us to do it instead.

Who else processes it

• Google (Gemini) — your question is sent to the Gemini API to be restated, to be turned into a search vector, and to have the answer written. Every consultation involves this. It is the one place your own words leave our deployment.
• Netlify — the site and its functions run there, so it carries every request.
• Neon — the Postgres database, where the conversations and the statutes are stored.
• An email provider (Resend or ZeptoMail, whichever is configured) — it receives an email address and a six-digit sign-in code, and never a question, an answer or a location.
• Google Fonts — the typefaces are loaded from Google’s servers, so your browser discloses its IP address and user agent to them on every page load. Not your question.

Some of these process data outside India. Nothing goes to anybody not on this list.

Nothing is sold

We do not sell, rent, licence or trade your data, and we do not share it for anybody’s advertising or marketing. The list above is the whole of who sees it, and each of them sees it in order to run the site.

Our own logs and alerts

No log line, no response body and no alert we send ourselves carries your words. Section numbers, Act names, States, counts and timings are kept; the question, the answer and the trouble behind them are not. The same is true of the six-hourly security watch and the summary of activity we mail ourselves: counts and check names, never a question, an address or a conversation.

Your rights, and how to use them

Write to support@kanoonkaka.in to ask what we hold about you, to have it corrected, or to have it deleted. Deleting your consultations is also a control in the sidebar, and deleting your whole account is one in the account menu — both are faster than writing to us.

If you have found a security or privacy problem in the site itself, the disclosure address and policy are published at /.well-known/security.txt.

Please do not type what you cannot afford to share

Your question is a real account of a real problem, and it is sent to Google to be answered. Tell us enough to get a useful answer, and no more — you do not need to name anybody, and you do not need to give us a document.