Privacy policy

1.Who is responsible

The controller of your personal data is [ŞİRKET ADI], [ADRES], [MERSİS/VERGİ NO] ("Kinf", "we"). Contact for anything about your data: privacy@kinf.app.

Representative in the EU (GDPR art. 27): [EU REPRESENTATIVE]. Representative in the UK (UK GDPR art. 27): [UK REPRESENTATIVE]. You can write to them instead of us. We have not appointed a data protection officer; we are not required to.

If you live in Türkiye, the Turkish text is your notice under KVKK.

2.What we collect

All of it is collected online, by automated means. We don't collect payment details (there are no payments yet), and we don't buy data about you from anyone.

3.What others can see

• Your username, display name and profile photo can be seen by anyone, including people without an account, so friends can find you.
• Brand websites you have verified are shown with your brand.
• A share link shows your name, photo and the poster you shared to anyone who has the link. Search engines don't index it. You can turn the link off.
• In groups and direct messages, the other members see what you write and share there.

4.Why we use it, and on what basis

You can withdraw consent at any time; that doesn't undo what was done before.

5.AI: where your messages go

Kinf is an AI. To write an answer, draw a poster or make a picture, what you send (your message, files you attach, parts of your project and memory that matter) goes to an AI provider.

• With Kinf's own keys we use Anthropic (Claude), OpenAI (models and image generation) and Google (Gemini, only for people 18 and over). All three are in the US.
• Under their API terms these providers don't train on what we send. They may keep it for up to 30 days to detect misuse, then delete it.
• Links you paste are opened by Kinf to read the page. Web searches send your search words to the AI provider. For site icons, Google gets only the domain name.

Your own keys. If you add a key for another provider, what you send to that model goes to that provider, under its terms and in its country:

Choosing a provider with your own key is your decision; that provider's privacy terms apply. China has no adequacy decision under EU or UK law.

6.Memory

Kinf can remember things about you so you don't have to repeat them: your name, tone, brand, what you like. You see all of it in Settings → Memory, and can change, delete or turn it off there.

Health, belief, politics, sex life and similar topics are not remembered unless you turn on "Remember sensitive topics". Then they are used only in your own chat with Kinf. A group's memory is visible to that group's members.

7.Who else gets your data

• Our providers, who run parts of Kinf for us and may use the data only for that: hosting, database, e-mail, AI. They are all in the subprocessor list.
• Services you connect, when you ask Kinf to read from or send to them.
• Authorities, only when the law requires it, and only what is asked.
• A buyer or successor of Kinf, if the business is ever transferred; we would tell you first.

We never sell your data or share it for advertising.

8.Data outside your country

Kinf is run from Türkiye. Our database and files are at our provider in Frankfurt, Germany. Sign-in and invite e-mails are sent from Tokyo, Japan. Hosting and AI providers are mainly in the United States.

When your data leaves the EU or UK we rely on adequacy decisions (such as for Japan), the EU–US Data Privacy Framework and its UK extension where a provider is certified, or the European Commission's standard contractual clauses with the UK addendum (GDPR art. 45–46). Kinf itself is run from Türkiye, which has no adequacy decision; access from there is covered by the same clauses. Ask us at privacy@kinf.app for a copy of the safeguards.

9.How long we keep it

Your messages in groups stay for the other members after you leave; if you delete your account they are shown as from a "Deleted user". See data deletion.

10.Your rights

Under GDPR and UK GDPR (art. 15–22) you can ask what we hold about you and get a copy, correct it, have it erased, take it elsewhere, restrict or object to its use, and withdraw consent at any time. Most of this you can do yourself in Settings. We answer free of charge within one month. The your rights page explains each one.

11.Complaints

Please write to us first; we would like to put it right. You also have the right to complain to a supervisory authority: in the EU, the one where you live, work or where you think the problem happened (list); in the UK, the ICO.

12.Children

Kinf is not for children under 13, and they can't create an account. People aged 13 to 17 need a parent's or guardian's permission. In the EU we never turn on analytics for anyone under 16, and Gemini is used only for people 18 and over. If we learn that a child under 13 has an account, we delete it. Parents can write to privacy@kinf.app.

13.Security

Connections are encrypted. Passwords are stored only as hashes. Your own AI keys and connected-account tokens are encrypted (AES-256-GCM). Agent keys are kept only as hashes. Access within Kinf is limited to what each feature needs.

If a breach puts your data at risk, we tell the authorities within 72 hours and tell you as soon as we can. See our breach procedure.

14.Google data

When you sign in with Google we get your name, e-mail and photo. When you connect Google Drive, Kinf can see only the files you pick or that Kinf creates (the drive.file access), and uses them only to bring them into Kinf or send your work there, as you ask. No one at Kinf reads them, they are not used for ads, not sold, and not used to train AI models.

Kinf's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can cut Kinf's access in Settings → Integrations, or in your Google account.

15.California

This section is for California residents (California Online Privacy Protection Act). The categories of personal information we collect and the third parties we share it with are listed above. You can review and request changes to your data in Settings or by writing to privacy@kinf.app. We will tell you about material changes to this policy before they take effect.

• Do Not Track: Kinf doesn't track you across other sites, so it doesn't change anything when your browser sends this signal. Optional cookies need your yes in the cookie banner either way.
• Third parties: no third party collects data about your activity across sites through Kinf.
• We don't sell or share personal information for cross-context advertising.

16.Changes

When this policy changes we update the date above, and tell you by e-mail or in the app before important changes take effect. Effective from [EFFECTIVE DATE].