Privacy Policy

1. Who we are

Kynspace (we, us, or our) provides a household coordination app where members of a shared "Space" (a couple, a set of roommates, or a family) talk the way they normally would, and an AI layer reads that conversation to surface commitments, decisions, lists, and ideas that would otherwise get lost. This policy covers the Kynspace app and the Kynspace website.

2. How the AI extraction works, and why it matters for your privacy

The core mechanism of Kynspace is this: when members of a Space chat, our AI reads that conversation (what we call the Space's "Stream") and identifies moments worth keeping, someone offering to do something (a commitment), an agreement being reached (a decision), an item worth tracking (a list), or a thought worth remembering (an idea). It turns those moments into structured records that members of the Space can see, act on, and refer back to.

This means chat content is not just stored, it is actively processed by artificial intelligence, including models we operate ourselves and models operated by third-party AI providers, in order to generate these records. We consider this the single most important thing to be transparent about in this policy, and it is covered in detail in Section 5.

3. Information we collect

We collect the following categories of information:

Account information. Name and email address when you create an account.

Chat and Stream content. The messages, images, and other content members of a Space share with each other inside that Space.

AI-extracted records. The commitments, decisions, lists, and ideas our AI generates from Stream content, along with metadata such as who is responsible for a commitment and any due date attached to it.

Space and membership data. Which Spaces you belong to, and your role within each one (admin or member).

Subscription and billing status. Which of your Spaces have an active AI-extraction upgrade, and billing status such as renewal dates. We do not collect or store your raw payment card details; billing is handled by RevenueCat, described in Section 6.

Technical information. Standard technical data such as device type, app version, and log data needed to operate and secure the service.

4. How we use your information

We use the information above to:

Operate the core product, including generating commitments, decisions, lists, and ideas from Stream content via AI extraction; maintain your account and Space memberships; process subscription billing through RevenueCat; send transactional emails (such as verification, invitations, and account notices) through Resend; and secure and improve the service.

We do not use your data for advertising, and we do not use it to train AI models. See the commitments box above and Section 5 for detail.

5. AI processing and third-party AI providers

To extract commitments, decisions, lists, and ideas from Stream content, we send relevant chat content to AI models for processing. This includes:

Gemini 2.5 Flash-Lite (provided by Google), used as our primary extraction model.

Claude Haiku 4.5 (provided by Anthropic), used as a fallback extraction model.

These providers receive chat content solely to perform the extraction task and return structured results to Kynspace. They do not retain this content for their own purposes beyond what is needed to process the request, and they do not use it to train their models. This no-training guarantee depends on the data processing terms each provider has in place with us at the time content is processed, and we choose providers that offer these terms specifically because this matters to us and to you. If that ever changes for a given provider, we will update this section and this policy before continuing to use them in a way that would affect it.

6. Other third-party service providers

We rely on a small number of service providers to operate Kynspace. Each receives only the data needed to perform its function:

Resend. Sends transactional email, such as verification links and Space invitations.

Purelymail. Hosts our email infrastructure.

RevenueCat. Manages subscription billing and processes payments. RevenueCat and its payment processors handle your payment details directly; we do not receive or store raw card numbers.

Hetzner. Provides the server infrastructure (self-hosted VPS) that stores and runs Kynspace's backend and database.

None of these providers are permitted to use your data for their own marketing, to sell it, or to train AI models on it.

7. Space privacy: who can see what

Content inside a Space, chat messages, images, and AI-extracted records, is visible only to the members of that Space. There is no cross-Space visibility: members of one Space cannot see the content of another Space they do not belong to, and Kynspace staff do not browse Space content except as needed to investigate a specific support request, abuse report, or legal obligation.

One exception worth noting honestly: if you are invited to a Space, you may be able to see that Space's Stream before you have completed email verification, though you cannot send messages, react, or otherwise interact until your email is verified. This means limited exposure to a Space's content can occur during the brief window between accepting an invitation and verifying your email.

8. Data storage and retention

We store account, Space, chat, and AI-extracted data in MongoDB, run on our own Hetzner infrastructure.

We want to be direct about retention: at this time, the app does not have an automatic deletion schedule for chat or Stream history. Messages and derived records persist in a Space unless and until they are manually removed or the account or Space is deleted. We are describing our current behavior honestly rather than a policy we have not yet built. If we introduce automatic retention or deletion windows in the future, we will update this section.

If you delete your account, we remove or anonymize your account information in line with our standard deletion process. Because Space content is shared among members, content you contributed to a Space (such as messages) may remain visible to other Space members after you leave or delete your account, similar to how a message you sent in a group chat remains visible to the group after you leave it.

9. Your choices and rights

You can access and update your account information from within the app, leave a Space at any time, and request deletion of your account by contacting us at support@kynspace.app. Depending on where you live, you may have additional rights under local law (such as the right to access, correct, or delete personal data, or to object to certain processing).

10. Children's privacy

Kynspace is not directed at children, and we do not knowingly collect personal information from children under 13 (or the relevant minimum age in your jurisdiction).

11. International data transfers

Our infrastructure and service providers may process data in countries other than your own.

12. Data security

We use reasonable technical and organizational measures to protect your data, including encryption in transit and access controls on our infrastructure. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

13. Changes to this policy

We may update this policy as Kynspace changes. If we make a material change, we will notify you through the app or by email before it takes effect.

14. Contact us

Questions about this policy or your data can be sent to support@kynspace.app.

15. Third-party platform integrations

Kynspace maintains its own marketing accounts on YouTube, TikTok, Meta platforms (Facebook, Instagram, and Threads), and X. We publish and manage content on these accounts through a private tool we run ourselves, on our own infrastructure. This is separate from the Kynspace app covered elsewhere in this policy: no Kynspace app user connects their own YouTube, TikTok, Meta, or X account to our service, and no app user or Space data is involved in this integration. The following subsections describe this use for transparency and to satisfy each platform's developer policies.

15.1 YouTube API Services

Kynspace uses YouTube API Services to publish and manage video content on our own YouTube channel. By using this integration, we agree to be bound by the YouTube Terms of Service. Google's handling of information in connection with YouTube API Services is described in the Google Privacy Policy.

What we access. Our own connected channel's basic information (channel name, ID, and avatar), the ability to upload videos and Shorts with metadata (titles, descriptions, tags) we write ourselves, and analytics for our own channel's performance.

How we use it. Solely to publish and measure our own marketing content. We do not access, request, or process any other YouTube user's or channel's data.

Storage. The OAuth tokens authorizing this access are stored encrypted on our self-hosted server. We store only the post records needed to show scheduled and published posts (such as status, publish time, and basic analytics); we do not sell, share, or use this data for advertising, and we do not use it to train AI models.

Revocation. Access can be revoked at any time at security.google.com/settings/security/permissions.

Deletion. To request deletion of data we have stored in connection with this integration, email support@kynspace.app. We aim to respond within 5 business days and will delete the data within 30 days of a verified request, or immediately upon revocation of access.

Google API Limited Use disclosure. Kynspace's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

15.2 TikTok

Kynspace uses the TikTok API to publish and manage content on our own TikTok account.

What we access. Our own connected account's basic profile information (Open ID, display name, avatar, and profile link), and the ability to post video content we create.

How we use it. Solely to publish and measure our own marketing content on our own account.

Storage. OAuth tokens are stored encrypted on our self-hosted server; we store only the post records needed to show scheduled and published content. TikTok's own handling of data is described in TikTok's Privacy Policy.

Revocation. Access can be revoked at any time from the TikTok app, under Settings and privacy → Manage app permissions.

Deletion. To request deletion of data we have stored in connection with this integration, email support@kynspace.app. We aim to respond within 5 business days and will delete the data within 30 days of a verified request, or immediately upon revocation of access.

15.3 Meta (Facebook, Instagram, and Threads)

Kynspace uses Meta's platform tools to publish and manage content on our own Facebook Page, Instagram account, and Threads account.

What we access. Our own connected Page or account's basic information, the ability to publish content we create, and insights about our own content's performance.

How we use it. Solely to publish and measure our own marketing content.

Storage. OAuth tokens are stored encrypted on our self-hosted server; we store only the post records needed to show scheduled and published content. Meta's own handling of data is described in the Meta Privacy Policy.

Revocation. Access can be revoked at any time from Facebook, Instagram, or Threads, under Settings → Apps and websites (or Business Integrations).

Deletion. To request deletion of data we have stored in connection with this integration, email support@kynspace.app. We aim to respond within 5 business days and will delete the data within 30 days of a verified request, or immediately upon revocation of access. See also our Data Deletion Instructions below.

15.4 Data deletion instructions

If you would like to request deletion of data associated with Kynspace's use of Meta's platforms (Facebook, Instagram, or Threads), email support@kynspace.app with your request. Because our use of Meta's APIs is limited to publishing and measuring our own marketing content on our own accounts, no end-user data from Meta is collected or stored by Kynspace through this integration, only metadata about the posts we publish ourselves (such as post IDs, captions, and scheduling status). We will delete any such stored data within 30 days of a verified request, or immediately upon revocation of access via Meta's Apps and websites settings.

15.5 X

Kynspace uses the X API to publish and manage content on our own X account.

What we access. Our own connected account's basic profile information, and the ability to post content we create.

How we use it. Solely to publish and measure our own marketing content.

Storage. OAuth tokens are stored encrypted on our self-hosted server; we store only the post records needed to show scheduled and published content. X's own handling of data is described in the X Privacy Policy.

Revocation. Access can be revoked at any time from X, under Settings and privacy → Security and account access → Apps and sessions → Connected apps.

Deletion. To request deletion of data we have stored in connection with this integration, email support@kynspace.app. We aim to respond within 5 business days and will delete the data within 30 days of a verified request, or immediately upon revocation of access.