Privacy Policy

Kinto — Alpha

Last updated: 10 August 2026

This Privacy Policy explains how Kinto ("Kinto", "we", "us") handles information in connection with the Kinto application and related services (the "Service"). By using the Service you agree to this Policy. If you do not agree, do not use the Service.

Kinto is experimental alpha software. We use reasonable measures to protect information, but we do not and cannot guarantee the security, confidentiality, integrity, or availability of any information, and your data may be lost, exposed, or deleted. Do not submit anything you cannot afford to lose or would not want processed by automated and third-party systems.

1. Information we collect

You provide:

• Account information — email address, display name, household name/handle, and authentication credentials.
• Content — chat messages, voice recordings and their transcripts, notes, tasks, reminders, shopping and meal data, profile and household "knowledge" information, images (e.g. recipe photos), and anything else you submit.
• Support communications — messages you send us via in-app support.

Collected automatically:

• Usage and device data — app version, build, environment, device type, timezone, and basic interaction/feature events.
• Notification tokens — a push token if you enable notifications.
• Approximate technical data — such as IP address and request logs, used for operating and securing the Service.

We do not intentionally seek special-category/sensitive information, but content you submit (including voice recordings and household details) may contain personal information about you or others. You are responsible for what you submit and for having authority to submit information about other people.

2. How we use information

We use information to:

• provide, operate, maintain, secure, and debug the Service;
• generate AI responses, transcriptions, summaries, reminders, and other automated features;
• send you Service-related and notification messages;
• monitor usage, prevent abuse, and improve and develop the Service;
• comply with law and enforce our terms.

Because the Service is AI-powered, your content is processed by automated systems and by the third-party providers listed below in order to function.

3. Service providers

To operate, the Service shares relevant information with third-party service providers that perform functions on our behalf. These include categories such as AI and machine-learning providers (to generate and interpret content), audio transcription providers, email and communication providers, cloud hosting and infrastructure providers, and push-notification providers.

We select our providers at our sole discretion and may add, remove, or replace any provider — including using a different AI model or provider located in any country — at any time and without notice. Each provider processes information under its own terms and privacy practices; we do not control them and are not responsible for their acts or omissions.

We do not sell your personal information.

4. AI processing and accuracy

The Service uses AI to generate and interpret content. AI output may be inaccurate or inappropriate and must not be relied upon. Content you submit is used to produce responses for you and to operate the Service. We may use, change, or combine any AI models or providers we choose — including models operated in or by entities in any country — at any time and without notice. We do not use your content to train our own foundation models; whether third-party providers use data to improve their services is governed by their terms (we configure providers to use API/business tiers where available, but make no guarantee).

5. Storage, security, and retention

• Data is stored on servers we operate using third-party cloud infrastructure.
• In our production environment, certain sensitive content fields are encrypted at rest using application-level encryption. This is a reasonable-effort measure, not a guarantee of security, and non-production/test environments may store data in plain text.
• We retain information for as long as your account is active or as needed to operate the Service, and may delete any or all data at any time, including without notice, consistent with the alpha nature of the Service.
• You can delete your account and its associated content at any time from within the app (Settings → Delete account) — see §6. Deletion is immediate and irreversible. After deletion, copies may persist for a limited period in routine backups and with the third-party providers described in §3, governed by their retention terms.
• We are under no obligation to retain, back up, or return your data. Keep your own copies of anything important.

6. Your choices and rights

• Notifications — you can control push notifications per category in the app and via your device settings.
• Access, correction, deletion — you may request access to, correction of, or deletion of your personal information by contacting us at contact@brooksail.com. We will respond as required by applicable law. Where the law gives you rights (for example under the Australian Privacy Act, GDPR, or CCPA/CPRA if applicable), we honour those rights to the extent they apply to you.
• Account deletion — You can permanently delete your account and its content at any time from within the app: Settings → Delete account. Deletion is immediate and cannot be undone. If you share a household with another member, the shared household content (messages, lists, plans, and notes) remains available to the remaining member and your authorship is shown as "Former member"; if you are the only member, the household and all of its content are deleted with your account. You can also ask us to delete your account by emailing contact@brooksail.com. We cannot retrieve deleted content, and copies held by third-party providers or in backups are handled as described in §3 and §5.

We may verify your identity before acting on a request and may decline requests as permitted by law.

7. International transfers

We and our providers may process and store information in countries other than yours, which may be outside Australia. Those countries may have different data-protection laws, and their governments may be able to access data under their own laws. By using the Service, you consent to such transfers where consent is the applicable basis.

8. Changes to this Policy

We may update this Policy at any time. Material changes will be indicated by updating the "Last updated" date and, where practicable, notifying you through the Service. Continued use after changes take effect constitutes acceptance.

9. Contact

Privacy questions or requests: contact@brooksail.com.