Privacy

Last updated October 26, 2026

This page explains, in plain language, what information Kemy (by Lone Keem Studios) and the Lone Keem Studios community use and why. Using Kemy is also covered by the Terms of Service.

What we collect

• Account info: your email address and password (or your Google sign-in), handled by Google Firebase Authentication. We never see your password.
• Profile info: your display name, @username (a handle, not asked as a legal name), bio, pronouns, website, avatar color and avatar photo. For players 13 and older these can be public. Players under 13, and accounts with no birthday yet, pick a display name from a list. They do not get a bio, pronouns, website, or profile photo, and other players cannot open their profile. Kemy does not ask for a real name, a street address, a school, or a GPS location.
• Activity: your posts, captions, hashtags, comments (which can include emoji, a photo stored on Cloudinary, a GIF from GIPHY or a sticker of your Pal), gold stars (likes), follows, and the views and plays you add to posts. These are public or shown as counts.
• GIFs: GIF search and GIFs in comments load straight from GIPHY, so GIPHY receives your search words, IP address and browser details under GIPHY's privacy policy.
• Photos and videos: photo and video posts, stories, snaps and your avatar photo, uploaded to our media host, Cloudinary.
• Community Movies and Songs: movie files, audio files, posters and cover art you upload are stored with Cloudinary. Titles, descriptions, lyrics, genres, ratings, “AI tools used” and YouTube links are stored in Cloud Firestore and are public.
• Games: game records, scores, wins, leaderboards and online match moves are stored in Cloud Firestore. Kemy’s Bubble Quest keeps your best times on your device, and in Firestore (for the leaderboard) when you’re signed in.
• Kemy Pals: your Pal’s name, species, look, care stats, XP and visits are stored in Cloud Firestore and shown on your profile.
• Birth month and year: asked when you sign up, typed by you, and saved on your profile record in Cloud Firestore with the time you confirmed it was honest. Kemy does not ask for the day you were born. The app does not show your birthday to other players. Once saved, only the studio owner or a human moderator can change it. Kemy uses it as an age signal: to turn the under-13 limits on or off, and to work out whether you are old enough for posts a creator marked 13+ or 17+ (see “Age ratings on posts” below).
• Age ratings on posts: when you make a post you can mark it All ages, 13+ or 17+. That rating is saved on the post and is public, and a 13+ or 17+ badge is shown on it.
• Saved posts and your block list: private to you.
• Chat: players cannot privately message each other. Public chat in games, lives, and Pal Park is visible to people in that place. If you are under 13, or we don’t have your age, that chat is a list of friendly phrases. Links, phone numbers, emails, and other-app invites are not allowed. Messages that ask for age, an address, a school, a picture, whether someone is alone, or that say to keep a secret from parents are blocked, and a report is sent to the moderators. Anyone can block or report a player from their name or a chat line. A message is hidden after three different people report it. A note to the Kemy team (feedback or a bug) is stored so only the studio owner can read it.
• What's New: Opening What's New remembers the latest entry you have seen, on this device and on your account when you are signed in, so the gold dot can go away. That note is deleted with your account.
• New members: when you join, Kemy keeps your display name, @username, avatar, join time and how you signed up (email or Google) in a private list only the studio owner can open. Your email is stored there too, hidden until the owner taps to show it. The owner can also open your row to see your Pal, coins, diamonds, game records, Kemy Street house and cars, friend count, and the last time you opened Kemy (from the device list already used for sign-in alerts). The owner sees how many members have joined in all, today, this week, and this month, how many are in Pal Park right now, and who has not opened Kemy for 30 days. The owner also keeps a live tally of how many accounts exist, how many visited in the last 30 days, and how many left. That tally is numbers only. Other players cannot open this list or someone else’s devices. When you delete your account, the email and the rest of that record are removed. The owner keeps a short note that you left: your display name, @username, the day you joined, and the day you left. No email is kept on that note.
• Optional notifications: Kemy never asks on your first visit. If you tap Turn on notifications, we store a push token for that device, which kinds of pings you want (friend invites and game challenges, your turn, someone at your Kemy Street home, daily Star Coins, and update notes), and your time zone so quiet hours match your evening. That is not your GPS location. You can switch each kind off, or turn them all off, in Settings. Quiet hours are 9pm to 8am, and non-game pings stay under about 3 a day. The token is deleted with your account. The chime can be muted there, and the notification sound you pick is saved on this device and, when you are signed in, with your account. It is deleted with your account. Graphics, sound, screen-size and control choices are saved on this device and, when you are signed in, on your profile. Only you can read that copy, and it is deleted with your account.
• Reports: if you report something, the studio owner sees the report and who sent it.
• Search history: your recent searches are kept in your browser and, when you are signed in, in a private part of your account that only you can read (up to 20 searches), so they follow you to other devices. Remove one with ✕ or tap Clear all in Search to delete them, including the copy in your account. They are deleted with your account.
• Trending searches: when you are signed in, a family-friendly search you submit may add one to a shared, anonymous daily counter for that search phrase (for example “kidz bop: 5 today”). It does not record who searched. Searches with blocked words are never counted.
• Optional YouTube search: if the site owner turns on the “More from YouTube” row, your search words are sent to YouTube (Google) to find videos, under Google's privacy policy. It is off by default.

Age ratings on posts

Posts can be marked All ages, 13+ only or 17+ only by their creator. When you are signed in with a birthday saved, Kemy works out your age in whole years from your birth month and year, right in the app, and hides posts rated above your age everywhere (feed, For You, Explore, search, hashtags, profile grids, comments and post links). Accounts a moderator has marked as possibly under 13 are treated as under 13. Your age itself isn’t shared with the creator or other players.

If you are signed out, or your account has no birthday yet, a 13+ or 17+ post asks “I’m 13+” or “I’m 17+” first. That is on the honor system. Your answer is saved only in this browser’s local storage on this device (confirming 17+ also covers 13+), is not sent to Kemy, and is not linked to an account. Clear your browser’s site data to remove it. Community movies rated 18+ are blurred until you confirm you are 18 or older, and that choice is kept only for the current browser session. Because ages are self-reported, these filters reduce the chance a younger player sees a rated post, but they can’t guarantee it.

Safety scanning on your device

Before a photo, video, caption or comment is posted, Kemy checks it for unsafe content (like nudity or blocked words) right on your device. The scan itself doesn't send your media anywhere; only what you choose to post is uploaded.

Camera and microphone

Kemy uses your camera and microphone only while you film a photo or video, add a story or snap, or go live, and only after your browser asks you for permission. Filters and face effects run on your device. Nothing from your camera is saved unless you choose to post it.

Live streams

Kemy lives are sent peer-to-peer (WebRTC, always encrypted) straight from the host to viewers. Live video and audio are not recorded or stored on any server. Only the live’s title, viewer count, gold stars, chat messages and reports are stored in Cloud Firestore. If a host links a YouTube live, it plays in an embedded YouTube player, and YouTube’s own privacy policy applies to it.

Kemy Pals and Talk to your Pal

Your Pals, their outfits, Star Coins, items and Pal Games results are stored in Cloud Firestore. Star Coins are free in-app points: they can’t be bought or cashed out. In Pal Park, other players in your room see your display name, @handle, your Pal and where you walk, plus any emotes or chat bubbles you send; your position is removed when you leave.

Talk to your Pal is an AI chat. When you send a message, the message, a short recent chat history (about the last 10 messages), your Pal’s name, species, level and stats, your @handle and any small facts you told your Pal are sent to Pollinations.AI (text.pollinations.ai), a free third-party AI service, to write the reply; their own privacy policy applies to that request. No account details, email or location are sent. Messages that look unsafe (for example sexual, violent, self-harm or personal-info topics) are not sent at all and get a safe built-in reply instead. Your recent Pal chat is saved in your account (only you can read it) and you can erase it any time with “Forget our chat”. If you tap the mic, your browser’s speech recognition turns your voice into text (on some browsers, such as Chrome, this uses the browser maker’s speech service); Kemy doesn’t record or store audio. Pal voices are made on your device. AI can make mistakes, so please don’t share personal information with your Pal.

Feed ranking, YouTube videos and news headlines

For You ranking happens on your device. To pick what to show you, Kemy keeps simple interest scores (for example “likes Funny and Dance, watches this creator to the end”) based on what you watch, skip, star, comment on, share and save, the topics you pick, and what you search for and tap in search results. You can see, remove or reset them in Settings › Your interests. They are stored in your browser and, when you are signed in, in a private part of your account that only you can read. They are never shown to anyone else or used for ads, and they are deleted with your account. Shares are counted once per account.

YouTube videos in the Funny, News and Dance tabs come from a short, hand-picked list of public, family-friendly channels and are labelled “From YouTube”. We don’t copy or re-upload them. Until you tap Watch, only the video’s thumbnail image is loaded from YouTube (i.ytimg.com). When you tap Watch, the video plays in YouTube’s own player from youtube-nocookie.com (YouTube’s privacy-enhanced mode), and YouTube/Google’s privacy policy applies to that player. YouTube’s own safety systems apply to the videos; we also skip titles with mature words.

News headlines come from the public RSS feeds of reputable outlets (such as BBC Newsround, Science News Explores and NASA), are labelled with the source name and open the original story on that outlet’s website, where its own privacy policy applies. The list is refreshed every few hours by an automatic job; no information about you is sent to these sources by Kemy.

Payments

Kemy has no real-money purchases today. The shop can show Star Coin and Diamond packs marked “Coming soon”, but they can’t be bought. If paid packs are ever turned on, this policy will be updated first.

How it's used

Only to run the app: show your profile, posts, movies, songs and games, deliver messages and notifications, apply age limits and age ratings, keep the community safe, and send account emails like email verification or password reset. We may also keep and share information when we believe in good faith that the law requires it, or to protect someone from harm.

What we don't do

We don't sell your information, we don't share it with advertisers, and we don't show ads. Kemy has no ad IDs, ad trackers, analytics, or crash-reporting tools, and doesn't collect your location, contacts, or real name.

Where it's stored

Account data, posts, messages, game data and Pals are stored with Google Firebase (Authentication and Cloud Firestore). Photos, videos and audio are stored with Cloudinary. Both act as service providers for us. The site is hosted on GitHub Pages, and everything is sent over HTTPS. The Kemy Android app opens this same site and collects nothing extra. Embedded YouTube or TikTok players load from those services only when you play them.

Your choices

• You can edit your profile, delete your posts, movies, songs and comments, unsave posts, unfollow and block people at any time.
• Delete my account and data any time in the app from Settings or Edit profile. This permanently removes your profile and @handle, your posts, movies, songs and stories (with their comments, stars and views), your comments on other posts, your follows and followers, saved posts, blocks, notifications, push tokens, live sessions, your Kemy Pals, your message threads and your login from Firestore.
• A few small things can stay: the star and view counts you added to other people's posts (they no longer link to a profile), reports you sent, which we keep for safety, a short note that you left (display name, @username, and the dates you joined and left, with no email), and your past game matches, game stats and Bubble Quest leaderboard times. Use Message the Kemy team and ask for those to be removed too.
• Media files: photos, videos and audio you uploaded can stay on Cloudinary after you delete your account, but they no longer appear anywhere in the app. The app cannot erase those files by itself. Use Message the Kemy team with your @handle to ask for them to be removed.

Parental Controls

A parent can turn on Parental Controls in Settings with a 4-digit parent PIN. The PIN itself is never stored: we keep only a salted SHA-256 hash in a private record that only the account can read. The choices (chat, messages, going live, comments, purchases, daily time limit, profile visibility and restricted mode) are saved with the profile so our security rules can block chat, messages, comments and going live when they are off. Daily screen time is counted only on the device. A forgotten PIN can be reset by signing in to the account again. This PIN is not a verifiable parent-consent check. It cannot turn off the under-13 limits.

Age

Kemy asks for a birthday month and year, and asks the player to enter it honestly. That birthday is typed by the player. It is not checked against an ID, and it is not a parent-consent form. It is the age signal Kemy uses for the under-13 limits and for posts rated 13+ or 17+. Players under 13, and accounts with no birthday yet, can watch and play, and they use phrase chat. Players under 13 never see posts rated 13+ or 17+, and players 13 to 16 never see posts rated 17+. They cannot post to the public feed, upload photos, videos, or voice, use a free-text display name or bio, send friend requests, or keep a public profile. See Kids safety and parents. Kemy is not certified by a kids-privacy seal. If you believe a birthday was entered wrong, use Message the Kemy team.

Contact

Questions or problems? Sign in and use Message the Kemy team in Settings or Help. Only the studio owner can read those notes. You can also use Report or Block on a player, a chat line, a post, or a comment, including to ask for your account or data to be deleted.