What We Can and Can't See

You should know exactly what we can and cannot access. No vague language, no fine print. Here is the full picture.

The short answer: we can see your email, your plan, and a small set of pseudonymous numbers about how the app is used. We do not access the content of your relationships. Below is the long answer, in detail.

What our servers can see

This is the complete list of information our servers can read:

• Your email address. Kinu requires an account so your data can be backed up, restored, and synced across devices. We use your email to manage that account and send you important messages, like a password reset.
• Your subscription status. Whether you are on the free plan, Kinu Plus, or Lifetime, so we can unlock the right features.
• Pseudonymous product analytics. Counts like how many people you have added, and which features get used. These are tied to a random support id, never to your name or your content.
• App version and platform. Whether you are on iOS, Android, or the web app, so we can fix issues and keep things compatible.

That is the full list. There are no hidden categories.

What our servers cannot read

Everything about your relationships is encrypted on your device before it ever syncs, and we do not access it as part of running Kinu. That includes:

• The names of your people. Who is in your life is your business.
• Moments. Anything you write or say about the people you care about, including voice notes.
• Private notes. These get an extra layer of protection. They are architecturally isolated from every feature, on top of being encrypted, so nothing in Kinu ever reads them.
• Important dates. Birthdays, anniversaries, and any custom dates you add.
• Relational Compass settings. Closeness, intention, and the per-person mode you choose.
• Lens names. How you sort your people into groups like Family, Friends, or Work.
• Any other content you create. If you typed it or recorded it, it is encrypted before it ever leaves your device.

Photos and voice notes never leave your device

Photos and voice notes are local-only. They stay on the device where you saved them and are never uploaded to our servers, even when sync is turned on. They live with you, not with us.

On the free plan, nothing syncs at all

On the free plan, your data stays only on your device. There is nothing to upload, so there is nothing on our servers to read beyond your account email, your plan, and the pseudonymous analytics above.

Sync is a Kinu Plus feature, and it is something you choose to turn on. Even then, the rules above still hold: your relationship content is encrypted on your device first, and we do not read it. You can read more in Sync Explained.

How your synced data is protected

When you sync, your relationship content is encrypted on your device before it is uploaded, and it stays encrypted in transit and at rest. Our servers store only encrypted blobs. Your relationship content is never used for analytics, never sold, and never folded into ads or social features.

We are also working toward user-held keys, derived from a secret only you know. Today your key is derived from your account, so our servers could in principle re-derive it. That is why we describe this as encryption in transit and at rest, and not yet zero-knowledge. User-held keys are a future improvement, not something available today, and we will say so plainly when they ship. For the full explanation, see Encryption Explained.

Why we collect any analytics at all

You might wonder why we collect even pseudonymous numbers. The reason is simple. We need to know which features people actually use so we can spend our time making Kinu better.

So we drew a hard line. Analytics never include what you write, who you add, or which dates matter to you. They record only that a feature was used, and how many times, tied to a random support id. There is no cross-app tracking and no advertising identifiers. If even that feels like too much, we understand. We keep the list small and content-free by design.

Account deletion clears everything

If you ever want out completely, you can delete your account in the app at Settings, then Account, then Delete Account. You can also start the process from our account deletion page. Deletion is immediate and permanent. It removes your account and all server data, and it wipes the data on your device. You can read the full walkthrough in deleting your account.

Learn more

---

Still need help? Contact support