KithKeep Privacy Policy

KithKeep is a private stay-in-touch companion. Privacy isn’t an add-on — it’s the core of the product. This policy explains what we collect, how we use it, and why we deliberately keep your data close to you.

1. What KithKeep stores

• The people you add by hand, your notes, logged interactions, important dates, and your cadence settings — your private relationship memory.
• KithKeep never imports your contacts and requests no contacts permission. Every person in your circle is one you add manually, one at a time.
• The identifier used to sign you in (your email or Apple sign-in identity) is used only to log you in and bind your data to your account. It is not used for advertising or cross-app tracking.

2. Where your data lives

Your people and notes are stored on your device by default. When you enable account sync, that data lives behind your account with Row-Level Security: only you, signed in, can read or change it. We never browse, mine, or repurpose your relationship data.

3. How the AI reconnect brief handles data

AI is involved only when you actively request a brief for a specific person:

• Only that one person’s notes and interactions are sent, via the developer’s self-hosted ai-proxy gateway, to a third-party large-language-model text service.
• The data is processed ephemerally and discarded after use — the AI service does not retain it and never uses it to train models.
• The brief only retells what you wrote; when memory is thin it tells you honestly rather than inventing details.
• The client holds no AI keys; all AI requests go through the server-side proxy.

4. What we don’t do

• We never sell or share your relationship data.
• No IDFA, no ad network, no third-party tracking SDK.
• No behavioral profiling, no tracking for monetization.

5. Third-party services

To provide the service, we use the following carefully chosen infrastructure:

• Supabase — account authentication and (when sync is on) data storage, protected by Row-Level Security.
• Self-hosted AI gateway (ai-proxy) + LLM text service — generates the reconnect brief only when you request it, processed ephemerally and not retained.
• RevenueCat — manages subscription status (never touches your relationship content).

6. Data retention and deletion

You can permanently delete your account at any time in Settings → Account → Delete account. We then erase the server-side data tied to your account; data stored on your device is removed when you uninstall the app. You can also export a copy of your data at any time.

7. Children’s privacy

KithKeep is not directed at children under 13, and we do not knowingly collect personal information from children under 13.

8. Changes to this policy

We may update this policy from time to time. When there are material changes, we will update the “Last updated” date on this page and notify you in the app. Continued use means you accept the updated policy.

9. Contact us

For privacy questions, contact support@sanva.tk.