Privacy Policy

Last Updated: February, 2026

Kimi-AI.chat (“we”, “us”, or “our”) is an unofficial, third-party front-end platform that allows users to interact with Kimi AI models via the Fireworks AI API. We are not affiliated with Moonshot AI, Kimi.com, or the official Kimi AI brand. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our website.

We are committed to protecting your privacy and being transparent about our data practices. We adhere to applicable data protection laws, including the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). Importantly, we do not store or process your chat messages on our own servers. When you interact with the Kimi AI through our site, your chat content is sent directly to Fireworks AI (our backend provider) for processing. Fireworks AI may handle that data under its own terms (please refer to their privacy policy linked below). We do not require you to create an account or log in to use our service. By using Kimi-AI.chat, you agree to the collection and use of information in accordance with this Privacy Policy.

What Information We Collect

We minimize the personal information we collect. Here are the types of information that may be collected when you use our site:

No Account Information: We do not require any account creation or login. We will not ask for usernames, passwords, or profile information to use the chat service.
Chat Inputs (User Messages): When you enter prompts or messages to interact with the AI, those inputs (and the AI’s responses) are not stored on our servers. They are transmitted to the Fireworks AI API to generate a response. We do not retain copies of your chat content. Please note: any personal data you choose to include in your chat messages will be forwarded to Fireworks AI for processing, and its use of that data is governed by Fireworks AI’s policies.
Contact Information: If you choose to reach out to us (for example, via a contact form or email), we may collect the personal information you provide, such as your name, email address, and the content of your message. We will use this information only to communicate with you and address your inquiries or feedback.
Usage Data: Like most websites, we automatically collect certain information about your visit through server logs and analytics tools. This may include data such as your IP address, browser type, device type, operating system, referring URLs, pages viewed, date and time of access, and other technical information. This data helps us administer the site, ensure security, and analyze how users interact with our website.
Cookies and Tracking Technologies: We and our third-party partners use cookies and similar tracking technologies to improve functionality, analyze traffic, and serve advertisements. Cookies are small text files placed on your device that help the site function or provide analytics information. For details on how we use cookies and your choices, see the Cookies and Tracking Technologies section below.

How We Use Your Information

We use the limited information we collect for the following purposes:

To Provide the Service: We use your input messages to retrieve AI-generated responses from the Fireworks AI backend. Your chat content is processed solely to return an answer to you.
To Operate and Improve the Site: Usage data and analytics help us debug issues, monitor performance, and understand how users engage with our site. This information guides us in improving features, user experience, and content.
To Communicate with You: If you contact us with questions or feedback, we will use your email and name to respond to you. We may also use your contact information to send important updates about the site or this policy, but we will not send you marketing emails.
To Serve Advertisements: We use advertising partners (such as Google AdSense) to display ads in order to support our website. Information (including cookies and browsing data) is used to show relevant ads. For example, Google may use data about your visits to this site and other sites to provide personalized advertisements, as described below.
To Ensure Security and Prevent Fraud: We may use IP addresses and other technical data to protect the site, prevent malicious activity, and enforce our terms of service. This helps us keep the website safe and secure for all users.
To Comply with Legal Obligations: If we are legally required to retain or disclose certain information (for example, in response to a lawful request by authorities or for financial record-keeping), we will do so in accordance with applicable laws.

We do not use your personal data for any purposes other than those described above. In particular, we do not sell your personal information to third parties.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our site. When you visit Kimi-AI.chat, small data files called cookies may be stored on your browser. Here is how we use them:

Essential Cookies: These cookies are necessary for the website to function properly. For example, we may use cookies to enable core features like security (such as distinguishing legitimate users from bots via Cloudflare) or to remember your preferences (like interface settings). Without these cookies, certain functionalities may not work. These cookies do not collect personal information for marketing purposes.
Analytics Cookies: We use Google Analytics (a web analytics service provided by Google) to collect anonymized statistics about how visitors use our site. Google Analytics cookies track information such as how long you stay on a page, pages you visit, and interactions on the site. This data helps us understand website traffic and usage patterns so we can improve our content and user experience. The information collected is aggregated and does not directly identify individuals. (For more details, you can review Google’s Privacy Policy.)
Advertising Cookies: Our site displays advertisements through Google AdSense and possibly other advertising networks. For example, Google and other third-party vendors use cookies to display ads based on your previous visits to this site and other websites. By using advertising cookies (such as the Google DoubleClick cookie), Google and its partners can deliver ads that are more relevant to you based on your browsing activity and interests.

We respect your privacy preferences regarding cookies:

Cookie Consent: If you are in a region where consent is required (such as the EU/EEA), we will adhere to applicable laws regarding cookie usage. You may be presented with a cookie notice or options to manage your cookie preferences. By continuing to use our site, you consent to the use of cookies as described unless you disable them.
How to Manage Cookies: You can control or delete cookies through your browser settings at any time. Most browsers allow you to refuse new cookies, delete existing cookies, or alert you when new cookies are set. However, please note that if you disable certain cookies, some features of the site (such as security or personalization features) may not function correctly.
Opting Out of Personalized Ads: You can opt out of Google’s personalized advertising by visiting Google Ads Settings and adjusting your preferences. Additionally, you can opt out of many third-party advertisers’ cookies for personalized ads by visiting the Network Advertising Initiative’s opt-out page or other industry opt-out sites. Keep in mind that even if you opt out of personalized ads, you may still see non-personalized ads on our site.

Third-Party Services

We utilize several third-party services to operate and enhance Kimi-AI.chat. These third parties may have access to certain data as needed to perform their functions, and they process data according to their own privacy policies. The key third-party services we use include:

Fireworks AI (AI Backend Provider): Fireworks AI provides the infrastructure and AI models that generate responses to your chat queries. When you submit a prompt on our site, it is sent to Fireworks AI’s servers via their API, and the AI’s response is returned to you. We do not store your prompts or the AI’s replies on our servers, but Fireworks AI may process and retain your data under its own terms and privacy practices. We encourage you to review the Fireworks AI Privacy Policy to understand how they handle your information. (Fireworks AI has publicly committed, for example, that it does not use your data to train models without your consent and that it defaults to zero data retention for prompt inputs; please refer to their official policy for full details.)
Google Analytics: We use Google Analytics to gather insight into how visitors use our site. Google Analytics may set cookies and collect usage data (as described in the Cookies section) including your IP address and browsing information. This information is transmitted to and stored by Google on servers which may be in the United States or other countries. Google uses this information to evaluate site usage and compile reports for us on website activity. We have configured Google Analytics in compliance with privacy best practices (for instance, enabling IP anonymization where applicable). For more information, see Google’s Privacy Policy and Google’s documentation on how it uses data from partner sites.
Google AdSense: We display advertisements through Google AdSense on our site. AdSense is a program by Google that allows third-party ads to be shown to users. Google and its advertising partners may collect information through cookies or similar trackers when ads are displayed on our site. This includes data such as your IP address, browser type, and details about your browsing activities on this site and potentially others, in order to provide ads that are more relevant to you. We do not have direct access to the information that Google collects for advertising. Any ad content you see is provided by third parties through AdSense. To learn more about how Google uses data in its advertising networks, you can review Google’s documentation on Advertising and Privacy. If you prefer, you can opt out of personalized advertising as noted above in the Cookies section.
Cloudflare (Content Delivery and Security): We use Cloudflare to help secure our website and improve its performance. Cloudflare is a content delivery network (CDN) and security service that helps protect against malicious attacks (like DDoS) and serves our content quickly to you by using servers located around the world. When you visit our site, your requests may go through Cloudflare’s network. As a result, Cloudflare may process data such as your IP address and potentially place a security cookie on your browser to distinguish legitimate traffic from malicious traffic. Cloudflare processes any such data in accordance with its own privacy policy (see Cloudflare Privacy Policy) and acts as a service provider to us for security and infrastructure purposes.

Please note that each of these third-party services has its own privacy policy and data handling practices. We recommend you review their policies (we have provided links where available) to understand how they manage your data. While we carefully choose reputable providers and strive to partner with services that respect user privacy, we do not control their practices. However, we do not share any more information with them than is necessary for the integration of their services into our site.

Data Sharing and Disclosure

We do not sell or rent your personal information to third parties. We only share your data in the following circumstances:

Service Providers: We share information with third-party service providers and partners strictly on a need-to-know basis so they can perform services on our behalf or help operate our site (as described above: e.g., Fireworks AI for processing chat requests, Google for analytics and ads, Cloudflare for security). These parties are bound by obligations to protect personal information and only use it for the purposes we specify.
Legal Requirements: We may disclose information if required to do so by law or in response to valid requests by public authorities (e.g., a court order, subpoena, or government demand). We will only disclose what is legally necessary.
Protection of Rights and Safety: If necessary, we may share information to enforce our Terms of Service or other agreements, or to investigate potential violations thereof. We may also disclose data to protect the rights, property, and safety of our users, ourselves, or others. For example, we might exchange information with other organizations for fraud prevention or security protection.
Business Transfers: In the event that Kimi-AI.chat (or a substantial portion of its assets) undergoes a business transaction such as a merger, acquisition, reorganization, or asset sale, user information might be transferred as part of that transaction. We would ensure that the new owner continues to protect your personal data in accordance with this Privacy Policy.

Apart from the situations listed above, we will not share your personal data with any third parties unless we have your explicit consent to do so.

Data Retention

We retain personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Chat Data: Since we do not store your chat messages on our servers, we do not retain this content. Any prompt and response data is handled by Fireworks AI; according to Fireworks AI’s policies, they generally do not store prompt or generation data by default (unless you or they have opted in to data retention for improving services). Nonetheless, please refer to Fireworks AI’s documentation for their retention practices.
Contact Information: If you contact us, we may retain your correspondence (including your email address and any other info you provide) for a period necessary to address your inquiry or request. Once we have resolved your issue or question, we will only keep the information if needed for our records (for example, to demonstrate that we responded to your inquiry or as required by law).
Usage Logs: Server logs and security logs (including IP addresses) are generally retained for a short duration for the purpose of monitoring, troubleshooting, and security. Typically, these logs are automatically rotated and deleted after a period of time (for example, after a few weeks or months), unless a longer retention is required to investigate security incidents. Analytics data collected via Google Analytics may be retained by Google according to their standard retention settings. We do not individually identify users in our analytics data.
Advertising Data: Advertising-related data is largely handled by Google and its partners. We do not store advertising profiles of users on our own servers. Any data used for ad targeting is processed by Google/AdSense according to their retention and data handling policies.

When we no longer need personal information for the purposes described, we will delete or anonymize it in accordance with our data retention policies and applicable law. If deletion is not immediately possible (for example, because the data is stored in backup archives), we will securely store the data and isolate it from further use until deletion is feasible.

Data Security

We take the security of your personal information seriously and implement reasonable security measures to protect it from unauthorized access, alteration, disclosure, or destruction. These measures include:

Encryption: Our website is HTTPS-enabled, meaning data transmitted between your browser and our site (including any inputs you send) is encrypted in transit using TLS/SSL. This helps prevent eavesdropping on your communications with the site.
Access Control: Personal data that we do store (such as contact form submissions or emails) is accessible only to authorized personnel who need it to perform their duties. We restrict access to systems and data on a least-privilege, need-to-know basis.
Secure Infrastructure: We rely on trusted hosting providers and services (like Cloudflare) that employ industry-standard security practices, including firewalls, intrusion detection systems, and regular security updates, to safeguard the website’s infrastructure.
Monitoring and Updates: We keep our software and platforms updated to protect against known vulnerabilities. We also monitor for any suspicious activity on our site and take action if any potential security issues arise.

While we strive to protect your information with these measures, no method of transmission over the Internet or electronic storage is secure. Therefore, we cannot guarantee absolute security of your data. However, in the unlikely event of a data breach that compromises your personal information, we will promptly notify you as required by applicable law.

Your Rights (GDPR & CCPA)

We respect your privacy rights and provide you with choices regarding your personal information. Depending on your jurisdiction, you may have certain rights under privacy laws such as the European Union’s General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). We extend these rights to all users as applicable. These rights may include:

Right to Access: You have the right to request a copy of the personal information we hold about you. We will provide you with a summary of the data we have about you (if any) and details on how it is being used.
Right to Rectification: You have the right to request that we correct or update any inaccurate or incomplete personal information that we have on file for you.
Right to Erasure: You have the right to request that we delete your personal data. If you want us to erase any information you have provided (such as correspondence emails), please contact us. We will honor such requests where required by law, provided we do not have a legitimate need or legal obligation to retain the data (for example, information needed for compliance purposes).
Right to Restrict Processing: You can request that we limit the processing of your personal information in certain circumstances (for instance, if you contest the accuracy of the data or object to our processing it). This may apply while we address your request or in situations where you have a specific concern about how your data is being used.
Right to Object: You have the right to object to our processing of your personal information when such processing is based on our legitimate interests. You also have the right to object to processing for direct marketing purposes. (In practice, we do not send marketing communications without consent. If you ever receive any communications from us that you do not wish to, you can opt out at any time.)
Right to Data Portability: If applicable, you have the right to obtain a copy of your personal data in a commonly used, machine-readable format, and to transfer that data to another service provider. (Given the limited data we hold, this typically would apply only to any contact information or correspondence you have provided, since we do not maintain user accounts or extensive personal data.)
Right to Withdraw Consent: If we are processing your information based on your consent (for example, consent for analytics or advertising cookies where required), you have the right to withdraw that consent at any time. Withdrawing consent will not affect the lawfulness of any processing we conducted prior to your withdrawal. For example, you can adjust your cookie settings or use the opt-out mechanisms for analytics/ads as described in the Cookies section.
Right to Opt-Out of “Sale” of Personal Data (CCPA): Under the CCPA, California residents have the right to opt out of the sale of personal information. We do not sell personal information. In the context of CCPA, “sale” could include certain sharing of data for advertising purposes. We only use advertising and analytics as described in this policy, and such usage may be considered a “sale” under CCPA’s broad definitions. If you are a California resident and wish to opt out of any such sharing for advertising, you may contact us to record your preference (or simply use the opt-out tools provided, such as those mentioned in the Cookies section). We will honor and respect any valid opt-out requests.
Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights. This means we will not deny you our services, provide a different level of service, or charge you a different price simply because you exercised your rights under applicable privacy laws.

To exercise any of these rights, please contact us at info@kimi-ai.chat. We may need to verify your identity to process certain requests (for instance, we might ask you to provide the email address you used to contact us, or other information, to confirm we are dealing with the correct individual). We will respond to your request within the timeframe required by law (for example, within 30 days for GDPR requests, and within 45 days for CCPA requests, with the possibility of a 45-day extension). If we cannot fulfill your request due to a specific legal exception, we will inform you of the reason.

If you are in the European Economic Area (EEA) or the United Kingdom and have concerns about our data practices, you also have the right to lodge a complaint with your local data protection supervisory authority. However, we encourage you to contact us first so we can address your concerns directly.

Children’s Privacy

Our website and services are not intended for children under the age of 13. We do not knowingly collect personal information from anyone under 13 years old. If you are under 13, please do not use Kimi-AI.chat or provide any personal information to us.

In the event that we learn we have collected personal data from a child under 13 without verified parental consent, we will take immediate steps to delete that information from our records. If you are a parent or guardian and you believe that your child under 13 may have provided personal information to us (for example, by sending a message through a contact form or email), please contact us at info@kimi-ai.chat so that we can promptly investigate and remove the information if necessary.

We also advise that minors who are 13 or older (e.g. teenagers between 13 and 18) use our service only with parental permission or guidance. However, since our site does not require account creation and is designed to minimize data collection, it is unlikely we would collect any personal data from such users unless they voluntarily provide it via a contact inquiry.

International Users and Data Transfers

Kimi-AI.chat is accessible worldwide, and the third-party services we rely on (Fireworks AI, Google, Cloudflare) may be located in or use servers in multiple countries, including the United States. This means that if you are visiting our site from outside of the United States, your data (such as your IP address or any information you provide) may be transferred to and processed in a country that may have different data protection laws than your home jurisdiction.

We are committed to ensuring an adequate level of protection for your personal data no matter where it is processed. For example:

Fireworks AI and Google are companies that participate in or use approved legal mechanisms for international data transfer (such as standard contractual clauses or compliance with relevant data protection frameworks) to lawfully transfer EU personal data to the U.S. and other countries.
We rely on Cloudflare and other providers that similarly commit to protecting personal data in line with GDPR requirements when data is transferred internationally.

By using our site or submitting information to us, you understand that your data may be transferred to servers located in other jurisdictions. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and applicable law, wherever it is processed.

Changes to This Privacy Policy

We may update or modify this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. If we make significant changes, we will post the updated Privacy Policy on this page and update the “Last Updated” date at the top. In some cases, we may also provide additional notice (such as a prominent notice on our website or an email notification, if you have provided your email for contact) to inform you of major changes.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of Kimi-AI.chat after any changes to this Privacy Policy will signify your acceptance of the updated terms.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at info@kimi-ai.chat. We will do our best to address your inquiry promptly and transparently.

By using Kimi-AI.chat, you acknowledge that you have read and understood this Privacy Policy. We value your privacy and are dedicated to safeguarding your personal information.