LEGAL
GDPR information for Cogenity and Cogenity Pro
Effective 8 September 2026
How Cogenity handles personal data across its website, command-line tool, and Pro service, and how to exercise your data protection rights.
This page summarizes the data protection rights and processing described in our privacy policy. It reflects the current Cogenity website, command-line tool, and Cogenity Pro practices.
Who is responsible
Cogenity is provided by Kenneth Lynne AS, organization number 823 450 532, Toftes gate 43C, 0552 Oslo, Norway. Kenneth Lynne AS is the controller for the processing described in the privacy policy, unless another provider acts as an independent controller for its own service.
What we process
- Provider account credentials, prompts, project paths, and account email addresses stay on your device and are not sent to the Cogenity service.
- Cogenity Pro uses an installation ID, keyed digests, purchase identifiers, subscription state, payment amount and currency, and processed event IDs to provide and verify the service. Cogenity does not store full payment card details.
- Optional CLI telemetry reports command, duration, exit status, operating system, CPU architecture, Bun version, and Cogenity version. It does not report arguments, paths, account names, email addresses, prompts, or tokens.
- Website analytics uses the normalized route, event name, and an allowed destination name for selected page views and link clicks. Session replay, advertising, cross-site profiles, visitor sessions, and user identification are not enabled.
Why we process it
We process data to provide and verify Cogenity Pro, operate and secure the service, diagnose and improve it, answer support requests, and meet accounting, tax, fraud-prevention, and legal duties. The privacy policy describes the current legal bases as contract performance, legal obligations, legitimate interests, and consent where the law requires consent.
Your rights
Depending on the law that applies, you can ask for:
- access to your personal data;
- correction of inaccurate data;
- deletion of data where the law permits it;
- restriction of processing;
- portability of data where the right applies; and
- an objection to processing based on your circumstances.
You can withdraw consent where consent is the legal basis. You can also complain to the Norwegian Data Protection Authority or another supervisory authority with jurisdiction over you.
How to make a request
Email hello@cogenity.sh with a privacy question or request. You can also write to Kenneth Lynne AS at Toftes gate 43C, 0552 Oslo, Norway. We may need enough information to identify the relevant records before acting on a request.
The privacy policy contains the current recipients, retention descriptions, provider links, and processing details. It does not state fixed retention periods for every record, transfer locations or safeguards for every provider, or whether a data protection officer is required or appointed; those facts must be confirmed when they become applicable.