Privacy Policy

1. Who we are and what this policy covers

Kemetra (Kemetra.ai) is owned, developed and operated by Techstation Egypt (techstation.eg), registered in the Arab Republic of Egypt under commercial registration 82770 ("Kemetra", "we"). We are the controller of your personal data under Egypt's Personal Data Protection Law No. 151 of 2020 and its executive regulations.

This policy covers everything Kemetra offers: kemetra.ai, the console, the mobile apps, the community, the kids' space, business pages and their AI agents, Kemetra's own agents (Kemetra, Khair, Mafqodin, Seshat), the wallet and plans, and any service we add later.

2. The principle Kemetra stands on

Kemetra is a verified community: everyone here is who they say they are. So we require everyone who opens an account to verify their identity with real data, and we keep what proves it. This is not an extra: it is what protects every user from impersonation, fraud and fake accounts, and what makes speaking and dealing here trustworthy.

3. The data we collect

4. Face prints and sensitive data

Identity data, face prints and children's data are sensitive data under the law. We process them with the explicit consent you give when verifying, and only to:

• make sure you are the document's holder, and a real person present, not a picture or a recording;
• stop one person from holding more than one account, or one document from serving more than one account;
• check that a male user's profile photo is his real photo (section 5);
• protect users from impersonation and fraud, and protect children;
• in Mafqodin and family cards: match faces to find missing people.

How we protect them:

• Face prints are made and matched on Kemetra's servers, by models running there; they are never sent to anyone else for matching.
• Document pictures, verification videos and face prints are stored encrypted with keys of their own; only a few members of our team see them, when a review needs it, and every look is recorded.
• We never sell them, never use them for advertising, and never use them to train AI models.
• No other user ever sees your document's number or picture. People see your name, your verification seal, and your Kemetra ID.

5. Profile photos

• Men: a profile photo in the community is required, and it must show your own real face alone, as verified. We check automatically that it matches your verified face, and refuse a photo that does not, or that shows others.
• Women: the profile photo is your choice: your photo, with a headscarf, a child's photo, a drawing, an icon, or none. The one photo we do not accept shows a grown man's face: we estimate this automatically on our own servers, without comparing your photo with your identity or keeping anything of it, and refuse only when the estimate is sure. Your identity stays verified with us like any user's.
• This follows the sex stated on the identity document.

6. Picture checks

Every picture uploaded to the community (posts, comments, messages, profiles and pages) is checked automatically on our servers before it is kept, to stop pornographic content. A refused picture is not kept; we record only what kind of thing was found, never the picture.

7. Children and the guardian's responsibility

• No one under 18 may open a Kemetra account.
• A child joins only through their verified guardian, who adds them from their own account and chooses what of the child's name and picture is shown.
• The guardian alone is fully responsible for the child's data being 100% accurate, for being the child's legal guardian, for consenting on the child's behalf to this policy and the terms of use, and for following the child's use.
• The kids' space is separate from the adults' community: a child's session works only inside it, and adults' sessions never enter it.
• We collect the least about a child that the service needs, and show children no targeted advertising.
• The guardian may see, correct and deactivate their child's account at any time.
• If we find a child's data untrue, or that the person who added them is not their guardian, we deactivate the account at once and act as needed.

8. Why we use your data (and the legal basis)

9. Artificial intelligence

• Kemetra's mind is Techstation's engineering: how your message is understood, the rules an agent keeps, its memory, the tools it acts through, and the check of every answer before it reaches you. All of it is designed by Techstation Egypt and runs inside Kemetra's own system and under its management; Kemetra's agents and pages' agents are built on it.
• The agent proposes; Kemetra's system acts: no order, booking or commitment of yours happens without your own confirmation.
• Your face and your document never leave Kemetra: reading the document, the live check, the face print and image screening all run on Kemetra's servers and are sent to no one.
• To answer at the speed a conversation needs, Kemetra draws on advanced computing from contracted providers, who process the conversation's text only, on our instructions, and never for their own purposes.
• Your identity data, document pictures, face print and national ID number never enter any conversation.
• A page's owner keeps the conversations visitors have with its agent.
• We do not use your conversations to train models for anyone else.
• AI answers can be wrong, and they are not medical, legal or financial advice.

10. Who we share your data with

We do not sell your data. We share it only as follows, and only as much as needed:

• What you choose to make public: your posts, comments, name, photo and seal are seen by those the community lets see them.
• Those who run Techstation's infrastructure with us: the computing and storage infrastructure we contract, the computing conversations run on, Google sign-in, maps, WhatsApp (Meta), payment gateways, email, and phone notifications. They may use the data only to run Kemetra, on our instructions.
• Charities in Khair: what you choose to share with them when you help with a case.
• Competent authorities: under a court order or binding legal request, or when someone's life or safety is at risk, including searching for missing people.
• If Kemetra changes hands: the data passes to whoever takes our place, under this same policy's obligations.

11. Your Google account data

When you sign in with Google, or link your Google Calendar to a page you manage, Kemetra receives only what you approve on Google's consent screen, and uses it only for that feature:

• Sign in with Google: your name, email address and profile picture (the openid, email and profile permissions), used only to create your Kemetra account and sign you in.
• Google Calendar (page owners and their team, only if they choose to link it):
  • When you are busy (calendar.freebusy): only the start and end of busy times, never what is in your calendar, so the page's agent never offers a visitor a time you are not free;
  • A calendar Kemetra creates in your account (calendar.app.created): Kemetra writes the bookings visitors confirm into it, and can see or change only that one calendar, never your other calendars.

How we handle Google user data:

• We use it only to provide the features above. We do not sell it, use it for advertising, or use it to train AI models, ours or anyone else's.
• We do not share it with anyone, except as needed to run these features, to comply with the law, or with your consent.
• The calendar access key Google gives us is stored encrypted on our servers. We keep only the start and end of busy times for the coming period, refreshed regularly, so bookings stay quick.
• You can unlink your calendar at any time from the console; unlinking revokes Kemetra's access with Google and deletes the key and the busy times we hold. You can also remove Kemetra's access from your Google Account at myaccount.google.com/permissions.

Kemetra's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

12. Transfers outside Egypt

Parts of Techstation's infrastructure that runs Kemetra (computing, storage and AI) may run on servers outside Egypt. We do so under the controls of the Personal Data Protection Law and its regulations, with contractual and technical safeguards that protect your data no less than this policy does. Document pictures, verification videos, family cards and missing people's photos stay on our servers.

13. How we protect your data

Encryption in transit and at rest, separate keys for sensitive data, two-step verification for our team, least-needed access, a log of every look and change by our team, files checked before they are kept, and continuous monitoring. No system is perfectly secure; if a breach affects your data, we notify you and the competent authority as the law requires.

14. How long we keep data

• Identity data and face prints: while your account exists, then as long as the law or the prevention of fraud and duplicate accounts requires. We keep the least needed to know that a document has been used before.
• Content and messages: while your account exists, unless you delete them.
• Where you are now: for the conversation it was taken in only, forgotten within a day.
• Security location record: two years, then erased.
• Suggestion drafts: erased after a day.
• Invoices and financial records: as long as tax and accounting laws require.
• Security logs: as long as needed to protect the platform and investigate abuse.

15. Your rights

Under the Personal Data Protection Law, you may:

• know what we hold about you, and get a copy;
• correct what is inaccurate;
• ask us to erase your data; we do so unless a legal obligation, the prevention of fraud or someone's safety prevents it;
• object to, or restrict, a particular processing;
• withdraw your consent at any time. Withdrawing consent to verification and face prints means you can no longer use the services that need them, since verification is a condition of the platform;
• complain to the Personal Data Protection Center.

To exercise any right, write to privacy@kemetra.ai. We answer within the time the law sets, and may ask for proof that the account is yours.

16. Deactivating your account

You can deactivate your account from your settings. Deactivation signs you out everywhere and hides your account, without erasing your data by itself. To have it erased, make a request under section 15.

17. Cookies

We use only necessary cookies: to keep you signed in, remember your language and appearance, and protect your account. We do not use them for advertising or to track you outside Kemetra.

18. Changes to this policy

We may change this policy. We announce material changes on the platform before they take effect, and ask for new consent where a change needs it.

19. Contact

Techstation Egypt, Kemetra's owner and developer · techstation.eg · privacy@kemetra.ai