Privacy Policy

Covered Information. This Privacy Policy applies to information that identifies, relates to, or could reasonably be linked to an individual ("personal information") that we collect through the Services or in connection with our communications with you.

United States Only. The Services are offered only to individuals located in the United States. This Privacy Policy is written for users in the United States, and we do not direct the Services to individuals located elsewhere.

Exclusions. This Privacy Policy does not apply to information collected by third parties whose websites, applications, or services you access through or in connection with the Services, including Apple and Stripe, which are governed by their own privacy policies.

Account Information. You create an account and sign in using Sign in with Apple or Google Sign-In. When you do, Apple or Google shares with us your name, your email address (or, if you choose Apple's Hide My Email option, a private relay address that forwards to your email), and a unique account identifier. We do not receive or store your Apple or Google password. We also collect your account preferences and settings.

Imported Contact Information. During onboarding, the App explains why it requests access to your contacts before iOS asks for your permission. If you choose to import contacts from your device, and only after you grant that permission through the iOS permission prompt, we collect the information stored in the contact cards you import. This may include names, phone numbers, email addresses, postal addresses, birthdays, company and job title information, website and social media profile links, contact photos, and other fields available in those contact cards. We do not collect call history, text messages, or any metadata about your calls or messages. Importing contacts is optional, and you may use the Services without granting access to your contacts.

Content You Add. We collect the information you enter into the Services, including notes, tags, groups, reminders, relationship details, and other information you add about the people in your contact book (together with Imported Contact Information, "Your Content").

Voice Input. When you use the voice features of the Services, we collect the audio you record, the resulting transcripts, and the information generated from them, as described in Section 5.

Subscription and Payment Information. When you purchase a subscription, we collect information about your plan, subscription status, billing period, and transaction history.

• (a)Purchases on the Website. Payments on the Website are processed by Stripe, Inc. ("Stripe"). Stripe collects your payment card and billing information directly. We do not receive or store your full payment card number. We may receive limited information from Stripe, such as the card brand, the last four digits of the card, the expiration date, and billing postal code.
• (b)Purchases in the App. Purchases in the App are processed by Apple through its in-app purchase system. We do not receive your payment card information. We receive transaction and subscription status information from Apple.
• (c)Discount Codes and Sponsored Subscriptions. If you redeem a discount code or receive a subscription sponsored by an organization, we collect the code you redeem and the identity of the sponsoring organization.

Information from Sponsoring Organizations. If an organization sponsors subscriptions to the Services, that organization may provide us with your name and email address so that we can invite you to redeem a sponsored subscription.

Communications and Feedback. When you contact us, respond to a survey, or provide feedback, we collect the contents of those communications and any information you choose to provide.

Device and Usage Information. When you use the Services, our servers and service providers automatically collect technical information needed to operate and secure the Services, such as your IP address, device type, operating system and version, browser type, App version, time zone, request logs, and the dates and times of your activity.

Apple Analytics and Crash Reports. We use the analytics and crash reporting tools that Apple provides to developers through App Store Connect. We do not use third-party analytics or crash reporting software in the App. Apple shares App usage and crash data with us only for users who have chosen, in their device settings, to share analytics with app developers, and Apple provides that data to us in aggregated or de-identified form.

Cookies and Similar Technologies. The Website uses cookies and similar technologies that are necessary to keep you signed in, secure your account, prevent fraud, and process payments, including technologies set by our infrastructure and payment providers. We do not use advertising cookies or third-party analytics cookies. You can control cookies through your browser settings, but disabling necessary cookies may prevent the Website from functioning.

Tracking. We do not track you across apps or websites owned by other companies, and we do not use the App Tracking Transparency framework because we do not engage in tracking as Apple defines that term.

Processing on Your Behalf. Imported Contact Information relates to other people, many of whom may not use the Services. We collect, store, and process that information solely on your behalf and at your direction, to provide the Services to you.

Limits on Our Use. We do not contact the people in your contact book, sell their information, use it for advertising, or combine it with information from other users' accounts. We do not match your imported contacts against other users or tell you whether a contact uses the Services. We do not maintain logs of which user imported a particular contact apart from the contact record stored in that user's account.

Your Responsibility. You are responsible for ensuring that you have the right to provide Imported Contact Information to us, as described in the Terms.

Requests from Non-Users. If you do not use the Services and believe that your information has been imported by a user, you may contact us at support@trykith.com. Because we store that information only within individual user accounts and do not associate it across accounts, our ability to locate it may be limited.

We use personal information for the following purposes:

• (a)to provide, operate, and maintain the Services, including creating and managing your account and storing, syncing, and organizing Your Content;
• (b)to import contacts you choose to import and to provide the features you request;
• (c)to process payments, manage subscriptions, and administer discount codes and sponsored subscriptions;
• (d)to provide customer support and respond to your requests;
• (e)to send you service communications, such as account confirmations, security alerts, billing notices, subscription reminders, and notices of changes to our policies;
• (f)to send you information about new features and offers, subject to your right to opt out;
• (g)to administer surveys and collect feedback, and to report aggregated, de-identified results;
• (h)to understand how the Services are used and to improve them, using aggregated or de-identified information where practicable;
• (i)to protect the security and integrity of the Services, prevent fraud and abuse, and enforce the Terms;
• (j)to comply with legal obligations, including age verification and parental consent requirements that apply to apps, and to determine whether you are eligible to use the Services; and
• (k)for any other purpose we disclose at the time we collect the information or with your consent.

What We Do Not Do. We do not sell personal information. We do not share personal information for cross-context behavioral advertising or targeted advertising. We do not use Your Content to serve advertising. We do not use Your Content to train artificial intelligence models.

How Voice Features Work. The Services include voice features that let you dictate notes and other information about the people in your contact book. When you use a voice feature, the audio you record is sent to OpenAI, L.L.C. ("OpenAI"), which transcribes it into text. The transcript is then sent to Anthropic, PBC ("Anthropic"), together with our instructions and the contact information needed to associate the dictation with the correct contact records, and Anthropic returns the dictated information organized into fields that we save as Your Content.

Your Permission. During onboarding, the App presents a consent screen that explains this processing and asks for your explicit permission before any audio or transcript is sent to OpenAI or Anthropic. The App also asks for permission to use your device's microphone. Voice features are optional. You may decline either permission and continue to use the other features of the Services, and you may withdraw your consent to AI processing at any time in the App's settings or revoke microphone access in your iOS Settings. Withdrawing consent stops future processing but does not delete Your Content that was created before you withdrew it.

Provider Commitments. OpenAI and Anthropic process this information as our service providers under their commercial terms, which, as in effect on the Last Updated date of this Privacy Policy, provide that (a) information submitted through their business services is not used to train their models; and (b) that information is deleted within thirty (30) days, except where a provider must retain it longer to comply with law or to investigate a violation of its usage policies.

Storage of Results. The transcripts and organized information that result from this processing are returned to us and stored on our servers as part of Your Content, where they are encrypted in transit and at rest and protected by the safeguards described in Section 10.

Sensitive Information. Please do not use voice features to record sensitive information, such as health, financial, or government identification information, about yourself or others.

Future Integrations. If we offer features that let you connect the Services to third-party applications or AI assistants, we will share Your Content with those services only at your direction and after you authorize the connection, and we will update this Privacy Policy before offering those features.

We share personal information only as described below:

• (a)Service Providers. We share information with service providers that perform services for us, including hosting and data storage (Render, which operates on Amazon Web Services, and Cloudflare), account sign-in (Apple and Google), payment processing (Stripe and Apple), transcription and AI processing (OpenAI and Anthropic, as described in Section 5), and email and customer support (Google Workspace). These providers may use personal information only to provide services to us. We require our service providers to provide the same or equal protection of personal information as stated in this Privacy Policy and as required by the Apple App Store Review Guidelines.
• (b)Apple. When you download the App or make purchases through the App Store, Apple processes information under its own privacy policy, and we exchange with Apple the information needed to validate purchases, manage subscriptions, and comply with legal requirements.
• (c)Sponsoring Organizations. If an organization sponsors your subscription, we may share with that organization aggregated or de-identified information, such as the number of sponsored subscriptions redeemed and aggregated survey results. We do not share Your Content or your individual survey responses with a sponsoring organization.
• (d)Legal Requirements and Protection. We may disclose information if we believe in good faith that disclosure is necessary to comply with law, legal process, or a governmental request; to enforce the Terms; or to protect the rights, property, or safety of Kith, our users, or others.
• (e)Business Transfers. We may transfer information in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of our business or assets. Any successor will be required to handle personal information in a manner consistent with this Privacy Policy.
• (f)With Your Consent. We may share information with third parties when you direct or consent to the sharing.
• (g)Aggregated and De-Identified Information. We may share information that has been aggregated or de-identified so that it cannot reasonably be used to identify you. We will not attempt to re-identify de-identified information, except as permitted by law.

Retention Period. We retain personal information for as long as your account is active and as needed to provide the Services, unless a longer period is required or permitted by law.

Deleting Content. You may delete individual contacts and other Your Content at any time within the Services.

Deleting Your Account. You may delete your account at any time from the account settings in the App or on the Website. Deleting your account permanently deletes your account and Your Content; it is not a deactivation. After you delete your account, we delete your personal information from our active systems and servers within ninety (90) days, except as described in Section 7.4.

Exceptions. We may retain limited information after account deletion (a) as required to comply with legal, tax, or accounting obligations; (b) to resolve disputes, prevent fraud, and enforce our agreements; and (c) in de-identified form that does not identify you. Information held by third parties, such as transaction records held by Apple or Stripe, is retained under their own policies.

Subscriptions. Deleting your account does not cancel a subscription purchased through the App Store. You must cancel an App Store subscription through your Apple account settings. Canceling a subscription does not delete your account or Your Content.

Withdrawing Consent. You may revoke the App's access to your contacts or microphone at any time in your iOS Settings, and you may withdraw your consent to AI processing in the App's settings. Revoking access stops future access but does not delete information already imported. To delete that information, delete it within the Services or delete your account.

Your Rights. Subject to verification and applicable law, you may request to (a) access the personal information we hold about you; (b) correct inaccurate personal information; (c) delete your personal information; and (d) receive a copy of your personal information in a portable format. Residents of certain states have these and other rights under state privacy laws. We honor these requests from all users of the Services, whether or not a state law applies to us or to you.

How to Make a Request. You may make a request by emailing support@trykith.com. We will verify your identity by confirming your control of the email address associated with your account, and we may request additional information when needed. An authorized agent may submit a request on your behalf with proof of authorization. We will respond within forty-five (45) days, or within any shorter period required by law, and we may extend that period as permitted by law.

Appeals. If we decline your request, you may appeal by replying to our decision or by emailing support@trykith.com with the subject line "Privacy Appeal." We will respond to your appeal within the period required by applicable law.

No Discrimination. We will not discriminate against you for exercising your privacy rights.

Marketing Communications. You may opt out of promotional emails by using the unsubscribe link in those emails. We may continue to send you service communications while you have an account.

Do Not Track and Opt-Out Preference Signals. Because we do not sell personal information, share it for targeted advertising, or track users across third-party websites, we do not change our practices in response to Do Not Track signals or other opt-out preference signals.

California Disclosure. We do not disclose personal information to third parties for their own direct marketing purposes.

Children Under 13. The Services are not directed to children under the age of thirteen (13), and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will delete it. If you believe a child under 13 has provided us with personal information, please contact us at support@trykith.com.

Minors Aged 13 to 17. Users who are at least thirteen (13) but under eighteen (18) years of age may use the Services only with the consent of a parent or legal guardian and only where permitted by the Terms. Under the Terms, users who reside in certain states with app store age verification laws must be at least eighteen (18) years of age until we make parental consent features available in those states.

Age and Parental Consent Information. The App uses Apple's Declared Age Range service to determine whether age verification requirements apply to you and, where they do, to receive your age range and parental consent status from Apple. We do not receive your date of birth through this service. We use this information only to determine your eligibility, apply age-appropriate restrictions, and comply with applicable law. We do not share it, and we delete it once verification is complete, except for any record that the law requires or permits us to keep to demonstrate compliance.

Safeguards. We use administrative, technical, and physical safeguards designed to protect personal information, including encryption of data in transit and at rest and access controls that limit access to personal information to personnel and service providers who need it.

No Guarantee. No method of transmission or storage is completely secure, and we cannot guarantee the security of personal information. You are responsible for securing the Apple or Google account you use to sign in to the Services and for notifying us promptly of any unauthorized use of your account.

Security Incidents. If a security incident affects your personal information, we will notify you and the appropriate authorities as required by applicable law.

We are based in the United States. We and our service providers may process and store personal information in the United States and in other locations where they operate, subject to the protections described in Section 6.

The Services may contain links to, or rely on, services operated by third parties, including Apple and Stripe. We are not responsible for the privacy practices of those third parties, and we encourage you to review their privacy policies.

We may update this Privacy Policy from time to time. When we do, we will post the updated Privacy Policy in the Services and update the Last Updated date. If we make material changes, we will notify you by email or through the Services before the changes take effect. If a change would allow us to use personal information we have already collected in a materially different way than described when we collected it, we will obtain your consent where required by law. Your continued use of the Services after an update takes effect means that you acknowledge the updated Privacy Policy.

If you have questions about this Privacy Policy or our privacy practices, or if you wish to exercise your rights, please contact us at: