DRAFT — not approved. This is a working draft for Kinverie's invited test. The operator has not approved it and it has not had legal review. Items marked
[[OWNER: ...]]are still to be decided.
Kinverie Privacy Notice
Version 0.2.0 · Draft, not approved
Summary
- Kinverie is a text chat app for adults aged 18 and over, with fictional characters operated by AI. It is in an invited test in the United States, Canada, Australia and New Zealand, and it is free.
- You sign in with a one-time code sent to your email address. We ask for your date of birth once to check that you are an adult, and we do not keep it.
- Your conversations are stored on our servers so that you can return to them. They are not stored on your phone.
- To produce replies and to check content, what you write is sent to OpenAI, our AI provider, after you give a separate permission. We ask OpenAI not to store it where it offers that option, but OpenAI can still keep content for a limited time to monitor for abuse.
- There are no ads, no third-party analytics or advertising tools, and no payments.
- You can export your data and delete your account in the app, and delete your account at kinverie.com/delete-account.
- During the test the Kinverie database is not backed up, so a failure could lose your conversations.
1. Who we are
Kinverie is operated by [[OWNER: operator's legal name]], [[OWNER: operator's registered address]] ("we", "us").
For privacy questions and requests, and for legal contact, write to [email protected].
This notice covers the Kinverie app for Android and the website kinverie.com. Kinverie is only for adults aged 18 and over in the United States, Canada, Australia and New Zealand.
2. What we collect and why
To give you an account
- Your email address, to send you sign-in codes, to recognize your account, and to confirm that it is you before an export or a deletion.
- Your country and the result of the adult check. You enter your date of birth once; our server checks it and does not store it or write it to logs. This is your own declaration, not an independent age check.
- Your display name.
- Which versions of the Terms, this notice and the AI Processing Notice you accepted, and whether the AI-processing permission is currently given.
If the check shows that you are not eligible, we keep only that result against the sign-in record, never the date of birth, and the app keeps a marker on the device that holds no personal details so that it does not ask again.
To run your conversations
- The messages you send and the replies you receive, an opening you have edited, and whether you have hidden a message from future replies.
- The details you save for a character (up to ten for each character) and whether you have switched them on.
To keep the service safe and within its limits
- Reports you send: the message you select, your note if you write one, and surrounding messages only if you choose to include them.
- A record of each reply request: its time, its outcome, the AI model used and its cost, and daily counts of replies and attempts for your account. These records hold no message text.
- Records of your export and deletion requests.
- Diagnostics: a request reference, an error code, how long a request took and whether a provider answered. We do not log sign-in codes, dates of birth or message text.
When you write to us
- Email you send to [email protected], and our reply. [[OWNER: how long support email is kept]]
To learn from the test
We measure the test from the account and usage records above: for example whether an account reached five replies in its first day, whether it came back on later days, whether an opening was edited or a detail saved, how many replies were sent and what they cost. We look at these as totals. Conversation text is not used for measurement. [[OWNER: how tester ratings and the closing interview are collected and how long they are kept]]
When you use the website
The website kinverie.com sets no cookies and has no analytics, advertising or tracking tools. Cloudflare, which hosts it, processes your IP address and the details of each request in order to serve the pages and protect them from abuse. [[OWNER: how long Cloudflare keeps request logs for the kinverie.com zone, from the account's settings]]
On the deletion page, the email address and the code you enter go from your browser straight to our sign-in service (Supabase) and the deletion request goes straight to our server; the page keeps them only while it is open and stores nothing on your device. The status reference you receive stays in the page's address in your browser, after the # sign, which browsers do not send to the website.
What we do not collect
Kinverie has no ads and no third-party analytics or advertising tools. It takes no payments. The app does not ask you for access to your location, contacts, camera or microphone.
3. How AI processing works
Kinverie uses OpenAI to produce character replies and to check content.
- For a reply, we send OpenAI your message, a recent part of the conversation (leaving out messages you have hidden from future replies), your display name, the saved details for that character if you have switched them on, and the character's own instructions.
- For content checks, the text you write (messages, an edited opening, saved details and your display name) and each AI reply are sent to OpenAI's moderation service.
- We do not attach your email address or an account identifier to these requests.
What "not stored" does and does not mean:
- Where OpenAI offers an option not to store a request, we use it.
- OpenAI can still keep content for a limited time to monitor for abuse, under its own policies. We therefore do not say that OpenAI keeps nothing. [[OWNER: OpenAI's current abuse-monitoring retention period, checked against OpenAI's data-controls documentation]]
- [[OWNER: state, from OpenAI's current API terms, whether content sent through the API is used to train its models]]
- Deleting or hiding a message, deleting a saved detail, resetting a conversation or deleting your account in Kinverie does not remove text that was already sent to OpenAI.
We ask for your permission for this AI processing separately from the Terms. You can withdraw it in Settings. After that no new text is sent to OpenAI and characters stop replying; you can still read your conversations, report a message, export your data and delete your account. Text that was already sent cannot be recalled.
4. Providers that process data for us
| Provider | What it does for Kinverie |
|---|---|
| Supabase | Hosting, the database, sign-in, and private storage for export files |
| Resend | Sends the sign-in code emails from [email protected] and receives mail sent to [email protected]. Open and click tracking are switched off |
| Cloudflare | Hosts the public website kinverie.com and the domain's name records. It does not receive your conversations, your sign-in codes or anything you enter on the deletion page |
| OpenAI | Produces AI replies and runs content checks, as described in section 3 |
The Kinverie database and sign-in service are hosted by Supabase in the United States (the us-east-2 region, Ohio). [[OWNER: confirm where Resend, Cloudflare and OpenAI process data, and add the cross-border wording each country requires]]
Sign-in emails carry the code and nothing from your conversations. We do not email conversation text or export files.
5. How long we keep data
| Data | How long |
|---|---|
| Your account and profile (email address, display name, country, adult-check result, accepted versions) | Until you delete your account |
| Conversations and saved details | Until you reset the conversation, delete the detail or delete your account. A conversation holds at most 2,000 messages |
| A sign-in record for which account setup was never finished | Removed after seven days |
| Export files | 24 hours after the file is ready, or removed at once if you delete your account |
| Request and accounting records with no message text | 30 days. Account identifiers are removed from them when you delete your account |
| Reports and the messages you selected as evidence | 30 days after the report is closed, and up to 90 days if it is still unresolved. A documented legal hold is handled separately. If you delete your account, the report is kept for the rest of this time without any link to your account |
| Diagnostics with private details removed | Seven days |
| Records of operator actions, which hold no conversation text | 90 days |
| The status reference for a deletion request | Seven days |
If you delete your account while a report is still being kept, the report and its evidence are detached from your account.
6. Backups
During the invited test Kinverie runs on Supabase's free plan, which makes no backups, and we keep no other copy of the database. A failure could therefore lose your conversations and saved details, and we could not restore them. Export anything you want to keep.
Because there are no backups, a deleted account cannot come back from one.
7. Your choices
- Export. In the app, under Settings, Data and account, you can request a copy of your data: your profile, the versions you accepted, your edited openings and saved details, your messages, and the details of reports you made. The file is prepared for download in the app and is available for 24 hours. We do not email it.
- Delete your account. You can do this in the app, under Settings, Data and account, or without the app at kinverie.com/delete-account. On the website you confirm with a code sent to your email address; the website never creates an account. Your access ends as soon as the request is accepted. We then delete your conversations, saved details, export files, identifiers and sign-in record. We aim to finish within 24 hours and show the progress if it takes longer. You receive a status reference, shown once, that works for seven days.
- Confirm it is you. Before an export or a deletion we ask for a new email code unless you signed in with one in the last five minutes.
- Withdraw the AI-processing permission in Settings, as described in section 3.
- Change your display name in Settings.
- Reset a conversation to delete its messages. You choose whether the saved details for that character are deleted too.
- Delete a saved detail, or switch saved details off for a character. The original wording can still appear in recent messages of the conversation.
What deletion does not do: it does not immediately erase copies held in a provider's abuse-monitoring records (section 3). Request and accounting records with no message text, and reports you made, are kept for their periods in section 5 without any link to your account.
For any other request about your personal information, write to [email protected]. [[OWNER/LEGAL: the privacy rights and the regulator contact for each country, and any statement about selling or sharing personal information that a country or state requires]]
8. On your device
The app keeps your sign-in credentials in the device's secure storage, and your choice of light or dark appearance. It does not store your conversations on the device: loaded messages and unsent drafts are held in memory only and are cleared when you sign out. Closing the app can lose an unsent draft.
Signing out removes the sign-in details from the device. A sign-in that was already issued can keep working on our servers for a short time afterwards, up to about ten minutes.
9. Who can read your conversations
Each account can reach only its own conversations, saved details, reports and exports, and our server checks this on every request.
The service has to be able to read your conversations to produce replies, exports and report reviews, so they are not encrypted in a way that only you can open. When you send a report, the operator sees the message you selected and anything you chose to include with it.
10. Adults only
Kinverie is not for anyone under 18. An account whose adult check fails cannot be used.
11. Changes to this notice
When we change this notice, the app shows you the new text and asks you to accept it. If you decline, characters stop replying, and you can still read your conversations, report a message, export your data and delete your account.
12. Contact
For support, privacy requests and legal contact, write to [email protected].