1. CSAM detection
Images on server-readable surfaces — KENI Moments, group chats, and the media you send in 1:1 chats (which are not yet end-to-end encrypted) — are hashed and matched against Microsoft PhotoDNA's set of known CSAM. End-to-end encrypted content we cannot decrypt is never scanned. PhotoDNA returns a match score; above the operator-defined threshold the upload is blocked and the matching media is preserved per 18 U.S.C. § 2258A.
- Hashing happens on our server, never on the original device.
- Hashes alone are sent to Microsoft; original image bytes are not.
- Match rate, false-positive rate, and operator response times are reviewed weekly.
2. NCMEC reporting
Once our NCMEC ESP registration is live, confirmed CSAM matches trigger an automated CyberTipline report to the National Center for Missing & Exploited Children (NCMEC) within 24 hours, with the preserved media bytes, hash, uploader account identifiers, and timestamp. Until that registration completes, confirmed matches are still blocked and the evidence is preserved and queued for reporting.
The reporting account, user agent, IP, and account history are included so NCMEC can route to the appropriate law enforcement agency.
3. Other illegal content
Beyond CSAM, KENI's moderation pipeline screens for:
- Violence / gore (Google SafeSearch)
- Doxxing / personally identifying info shared without consent
- Phishing / scam URLs (URL reputation lookup)
- Coordinated harassment patterns (cross-account signals)
4. User reporting
Every chat, moment, and profile in the KENI app has a "report" action. Reports route to safety@hikeni.com with target ID, reason category, and reporter context.
5. Law enforcement
Valid subpoenas / search warrants from law enforcement agencies are acknowledged within 5 business days. Emergency requests (life-threatening situations) are reviewed within 4 hours. Contact: legal@hikeni.com.
6. Transparency
We will publish an annual transparency report covering: total CSAM matches, NCMEC reports filed, law enforcement requests received and response rate, accounts suspended for safety violations.