Privacy Policy

1. Who We Are and What This Policy Covers

Kin Mind (the "Service") is a voice and text assistant for the home and family. It consists of apps for iPhone, Apple Watch and Mac; the hub (software that holds memory, the voice pipeline and connections, and runs either on your device or in our cloud); cloud services for your account and subscription; the kinmind.si website; and Kin Mind physical devices, if you use them.

Kin Mind is a product of VibeTrip, Inc., a Delaware public benefit corporation, 640 N San Antonio Road, Los Altos, CA 94022, USA ("we," "us"). The Kin Mind brand is not a separate legal entity: VibeTrip, Inc. is the data controller and the contracting party.

For questions about privacy, access to your data and deletion, contact [email protected].

This Policy describes what data we process, why, whom we share it with, how long we keep it, and how you can control it. Section 6 covers Google connections: additional restrictions apply to Google data. Section 13 is for California residents.

2. Definitions

• Account — your Kin Mind account, created by signing in with Apple or Google (in some regions, also with a phone number).
• Household — a group of accounts that share one hub. A household has a household owner and members.
• Member context card — information about a household member that the household owner or an administrator sets so the assistant can adjust its tone and restrictions.
• Voiceprint — a numerical representation of a voice that the hub uses to recognize who is speaking. No audio is stored for this.
• Memory — facts the assistant saves at your request or from a conversation.
• Connection — an external service (Google, smart home, media and others) that you have given the assistant access to.

3. What Data We Process

3.1 Account and Sign-In

• the identifier, email address and name provided by your sign-in provider (Apple or Google); your password is not shared with us. Apple may provide a private relay address instead of your email;
• your phone number and messaging app identifier, if you verified or linked them in the app;
• your selected region, language, time zone and app settings;
• device and session identifiers, sign-in times and hub activation codes.

3.2 Voice and Speech

• Wake word detection and speech recognition run as a stream; audio is not stored after recognition, except for voice messages you send yourself as attachments.
• A voiceprint is created only at your command ("remember my voice") and is stored on the hub as numbers, not recordings. It may be refined using utterances recognized with high confidence; no audio is stored for this. You can delete your voiceprint with a single action in your profile; another person's voiceprint can be deleted only by that person or by the household owner.
• The text of recognized speech goes into your conversation history just like typed text.

3.3 Conversations, Memory and Attachments

• your conversation history with the assistant: your messages, its replies, tool results and cards shown;
• memory: facts, preferences, reminders, timers, routines and automations;
• attachments you add to a chat;
• background tasks and their reports.

History and memory live on your household's hub: in our cloud for a cloud hub, or on your device for a local hub. The apps keep a cache for display.

Onboarding conversation. Before your hub is activated, you can talk with the onboarding assistant in the app. This conversation is stored in the cloud for a limited time, transferred to your hub on activation, and deleted from the cloud after the transfer; if the hub is not activated, it is deleted after a period of inactivity.

3.4 Household, Members and Context Cards

• household composition, member roles and device access permissions;
• context cards: preferred tone, restrictions and notes. The text of a card is sent to the model along with the member's message so the assistant follows the restrictions. A member can see their own card; the household owner or an administrator can change it.

3.5 Connections and Smart Home

• Google (Gmail, Calendar, Drive, Docs, Sheets) — see Section 6;
• smart home: the list of devices, their state and your commands;
• media players: what is currently playing and playback commands;
• reference services: weather for a city you specify, web search and reading web pages at your request, and reference information about travel and lifestyle (read-only, with no booking or payment through the assistant).

Access tokens for connections are stored on the hub and are not shown in the app.

3.6 Devices and Diagnostics

• device model and OS version, app and hub versions, and push notification identifier;
• technical logs: status, errors, latency and resource usage. Diagnostic traces contain identifiers, timestamps and statuses, but not the content of your messages;
• app crash reports, without conversation content;
• support requests you send yourself and any diagnostic data you attach.

3.7 Subscription and Payment

Subscription tier, billing period, payment status, and history of charges and refunds. Payments are processed by a payment provider or an app store; your card number is not shared with us. We receive only the payment status and, if the provider shares them, the card type and last digits.

3.8 Physical Devices

Kin Mind devices exchange commands, status, indicator signals and audio for the voice pipeline (Section 3.2) with the hub. They have no health sensors or location tracking.

3.9 Remote Support

To troubleshoot a local hub, we may connect to it over an encrypted channel only after you explicitly request it in the app; the connection ends when you revoke it, and every session is logged.

4. Why We Process Data and on What Legal Basis

We do not sell personal data, do not share it with advertising networks, and do not use your conversations, memory, voice or connection data to train general-purpose models.

5. Processing by Language Models

To respond, the assistant sends your request and the necessary context to a cloud language model: part of your history, memory, the member context card, and data read from connections. Providers' models run outside your device; the content of requests is not stored in our logs. Where available, we use agreements and settings under which the provider does not train models on our data. You can request the current list of providers for your account at our contact address.

The model can make mistakes. Replies that include information from your emails, files and conversations stay in your history; keep this in mind before connecting work accounts.

6. Google Connections

A connection is made with your permission through Google OAuth; the OAuth app is named Companion Workspace USA. Your Google password is not shared with the Service. You see the requested permissions on Google's consent screen and may choose not to grant write permissions.

Full permission names begin with https://www.googleapis.com/auth/.

The assistant writes to Google only at your request. Actions that other people can see or that delete data (sending an email, inviting guests, deleting an event, trash, writing to other people's files and shared folders) are performed only after your explicit confirmation; before writing, the assistant names the file, folder or calendar, its owner, and the values to be written.

Use of data obtained through Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements:

• data is used only to provide and improve Kin Mind features available to you;
• data is shared only to provide those features with your consent, for security, or as required by law;
• selling data, sharing it with advertising platforms, and using it for advertising, creditworthiness assessments or training general-purpose models are prohibited;
• human access to content is limited to cases with your explicit consent, security incident investigations, or legal requirements.

These restrictions also apply to information derived from Google data. They are not a statement that the Service has passed Google's verification.

Disconnecting Google in the app deletes the connection record and tokens from the hub, but does not delete earlier messages and does not revoke the permission on Google's side: you revoke it in your Google Account settings.

7. Whom We Share Data With

• Language model providers — your request and context (Section 5).
• Sign-in providers — Apple, Google: only to verify sign-in.
• Payment providers and app stores — data needed for charges and refunds.
• Infrastructure providers — hosting, networking, push notifications, crash reports, diagnostics, and remote support at your request.
• Connected services — Google, smart home, media and reference services: only the data needed for your request.
• Members of your household — within their roles: the household owner and administrators see the household composition and cards; members see their own data; shared household conversations are visible to those they are shared with.
• Government authorities — in response to a lawful request; we notify you if the law permits.
• Successors — in a reorganization or sale of the business, with the commitments of this Policy preserved.

Providers are bound by confidentiality agreements and process data according to our instructions. The current list of categories and providers is available on request.

8. Where Data Is Processed

We are a US company; cloud infrastructure, model providers and other providers may process data in the United States and other countries, including outside your country of residence. Transfers are based on our contract with you and on contractual safeguards with providers, including standard contractual clauses where required.

With a local installation, history, memory, voiceprints and connection tokens are stored on your device; requests to models, connections and the account cloud remain external.

9. How Long We Keep Data

• account, household and settings — as long as the account exists; after a deletion request, there is a short grace period during which you can cancel the deletion, after which the data is erased;
• history, memory and attachments on the hub — until you delete them or delete your account; a cloud hub is deleted together with the household owner's account;
• onboarding conversation — until it is transferred to the hub or the inactivity period expires (Section 3.3);
• voiceprint — until you delete it in your profile or delete your account;
• connection tokens — until the connection is disconnected;
• technical logs, traces, crash reports and backups — for a limited period, after which deleted data drops out of them as well;
• payment records — for the period required by tax and accounting laws.

Data held by external providers is subject to their own rules; when you delete your account, we send them deletion requests where applicable.

10. Age and Children

Kin Mind is intended for adults only. The Service may be used by people 18 or older; it is not intended for children or teenagers. We do not knowingly collect personal data from anyone under 18. If you believe we have received a child's data, write to [email protected].

11. Your Rights

Depending on applicable law, you have the right to:

• access your data and receive a copy in a machine-readable format;
• correct inaccurate data;
• delete your data or your account;
• restrict processing or object to processing based on legitimate interest;
• withdraw consent (for example, delete your voiceprint or disconnect a connection); this does not affect the lawfulness of processing before withdrawal;
• file a complaint with the supervisory authority in your country.

The Service does not make automated decisions that have legal effects on you.

How to exercise your rights: use the app's features (deleting history, a voiceprint, a connection or your account) or email [email protected] from the address linked to your account. We will respond within 30 days; to protect your account, we may ask you to verify that it is yours. Do not send passwords, sign-in codes or tokens. We do not restrict access to the Service for exercising your rights.

Account deletion is started in the app's settings. If you own a shared household, first transfer ownership to another member; otherwise, the household and the cloud hub will be deleted together with your account. Payment records are kept for the period required by law. A local hub stays with you after account deletion; you delete its data yourself.

12. Security

Traffic is encrypted; the hub's access to the cloud is protected by a device token; secrets and tokens do not appear in logs or the interface; the hub's local interface is accessible only from the device itself. For actions with consequences (sending emails, invitations, deletion, purchases, settings), the assistant asks for explicit confirmation. Employee access to data is role-based and logged; access to conversation content happens only with your consent, during a security incident investigation, or as required by law. We notify you and the supervisory authority of incidents affecting your data within the time limits set by law.

13. California Residents

This section supplements this Policy for California residents under the CCPA/CPRA.

We do not sell or "share" personal information as those terms are defined in the CPRA, and we do not use sensitive personal information to infer characteristics about you beyond what is necessary to operate the Service. You have the right to know, delete, correct, limit the use of sensitive personal information, and not be discriminated against. Submit requests to our contact address or through an authorized agent with proof of authority; we will match the address against your account data.

14. Cookies and Website

The informational pages of kinmind.si do not load analytics scripts, third-party fonts or external resources. When you open them, our infrastructure processes a standard web request, including your IP address and browser information, to protect against abuse.

15. Languages and Changes

This Policy is published in English and Russian; in case of discrepancy, the English version prevails. When we change how we process data, we update this Policy and its date; we notify you of material changes in the app or by email at least 14 days in advance.

16. Contact

VibeTrip, Inc., 640 N San Antonio Road, Los Altos, CA 94022, USA. Data questions and access and deletion requests: [email protected].