Privacy Policy
Last updated: 1 November 2026
- Kinnod is built so that we know as little as possible. Messages are encrypted end to end, the app connects through Tor, and our server deletes messages once they’re delivered.
- On this website we collect an email address only if you join the waitlist. We use it once, when Kinnod is out, and then delete it.
- No cookies, no ads, no tracking pixels. We count visits with analytics we run ourselves, without cookies.
- We don’t sell data and don’t share it for advertising.
1. Who is responsible for your data
The controller of your personal data is SztosCode Rafał Kucharski, a sole proprietorship registered in Poland.
For anything about your data, write to [email protected]. We reply within one month.
2. This website
The website runs on a server in Finland that we rent from mikr.us. Requests reach it through Cloudflare, which protects the site and delivers it quickly; to do that, Cloudflare processes your IP address and the details of each request. Our own code doesn’t store IP addresses, and the server doesn’t keep access logs.
The website doesn’t set cookies and doesn’t store anything on your device.
Visit statistics
We count visits with Umami, an analytics tool that runs on our own server at stats.kinnod.app. It doesn’t use cookies or store your IP address. For each visit it records the page address, the domain of the website that sent you, campaign tags (utm_*) from the link you used, your browser, operating system, device type, screen size and language, and the country (and, where available, the region and city) worked out from your IP address. Before anything is sent, the page removes every other parameter from the address.
To tell visits apart, Umami computes an identifier from your IP address, browser, our website and a value that changes every month. It keeps the identifier, not the inputs, so it can’t recognise you after the month ends. We don’t combine these statistics with any other data. If your browser sends a “Do Not Track” signal, we don’t count your visit at all.
Legal basis: our legitimate interest in knowing how many people visit and which campaigns bring them (Article 6(1)(f) GDPR).
3. The waitlist
If you join the waitlist, we store your email address, the campaign tags (utm_*) of the link you came from, and when you signed up and confirmed. We email you a confirmation link that works for 48 hours. If you don’t confirm, we delete the address within 7 days.
Once you’ve confirmed, we use the address once: to tell you Kinnod is out. Right after that email we delete the whole list. Every email we send has a link that removes your address at once.
To stop automated sign-ups, we briefly keep a keyed hash of your IP address in the server’s memory. It is never written to disk, and the key is replaced every 24 hours, after which the hash means nothing.
Emails are sent through Resend (Plus Five Five, Inc.), which processes your address on our behalf. Our emails don’t track whether you open them or click their links.
Legal basis: your consent (Article 6(1)(a) GDPR), which you can withdraw at any time with the link in our emails or by writing to us. For the sign-up limits: our legitimate interest in protecting the service from abuse (Article 6(1)(f)).
4. Emails you send us
Mail to [email protected] is forwarded by Cloudflare Email Routing to a Gmail mailbox (Google). We use what you write only to answer you and to deal with your request. Legal basis: our legitimate interest in replying (Article 6(1)(f)), and our legal obligations when you exercise your rights (Article 6(1)(c)).
5. The Kinnod app
The app isn’t available yet. This section describes the current version and will be updated before release.
What stays on your phone
Your messages, contacts and encryption keys, in an encrypted database. The key to that database is kept in the iPhone Keychain and works only on that device.
What our server keeps
- Your account: the username you chose (other people can find you by it), a sign-in record created with the OPAQUE protocol, which lets the server check your password without ever learning it, your plan and when you signed up.
- The public keys of your phone, including one-time keys that are used up as people start chats with you.
- A sign-in token for your phone, stored only as a hash.
- If you allow notifications, your phone’s push token. When a message arrives, our server asks Apple’s push service to show “New message” on your phone. Apple sees the token and the time, not the content or the sender.
Messages
Messages are encrypted on your phone so that only the person you write to can read them. Our server receives them as sealed envelopes it can’t open, isn’t told who sent them, keeps them in memory (not on disk) until the recipient’s phone collects them, and then deletes them. An envelope nobody collects is deleted after 7 days.
Connection and security
The app connects to our server only through the Tor network, so the server doesn’t see your IP address. To protect the service, the server counts attempts (for example failed sign-ins) in memory for up to an hour and logs security events without usernames or account identifiers. A failed sign-in is logged with a short tag computed from the username with a key that exists only in memory and changes every 24 hours.
Deleting your account
Before release, the app will let you delete your account. Until then, write to [email protected] and we’ll delete it, together with your keys and tokens.
Legal basis: providing the service you sign up for (Article 6(1)(b) GDPR), and for the security log, our legitimate interest in protecting the service and its users (Article 6(1)(f)).
6. Who else processes data
We use these providers. We don’t sell data and don’t share it with anyone for advertising.
| Who | What for | Where |
|---|---|---|
| mikr.us (server in a Hetzner data centre) | Hosting the website, the waitlist, analytics and the app’s server | Finland |
| Cloudflare, Inc. | Delivering and protecting the website, DNS, forwarding email to [email protected] | USA and worldwide |
| Plus Five Five, Inc. (Resend) | Sending waitlist emails | USA |
| Google LLC (Gmail) | The mailbox where emails to [email protected] arrive | USA |
| Apple Inc. | Push notifications on iPhone (the app only) | USA |
7. Transfers outside the EEA
Cloudflare, Google and Resend are certified under the EU-U.S. Data Privacy Framework, and Resend’s data processing agreement also includes the European Commission’s standard contractual clauses. Resend stores account data, including email logs, in the United States. Apple runs the push service as part of iOS, under its own privacy policy.
8. How long we keep data
| Data | Where | How long |
|---|---|---|
| Waitlist address, not confirmed | Our server | Until you confirm it, at most 7 days |
| Waitlist address, confirmed | Our server | Until we send the launch email, then the whole list is deleted |
| Keyed hash of your IP address (sign-up limits) | Our server’s memory | At most 24 hours |
| Visit statistics | Umami on our server | As long as the website runs; they can’t be linked to you |
| Emails you send us | Gmail | As long as we need them to deal with your message and any claims about it |
| App account, public keys, notification token | Our server | Until the account is deleted |
| Sealed messages | Our server’s memory | Until delivered, at most 7 days |
| App security log | Our server | Until overwritten by newer entries (the log is capped at 100 MB) |
9. Your rights
You can ask us for access to your data, a copy of it, correction, deletion or restriction of processing, and you can object to processing based on our legitimate interest. Where we rely on your consent, you can withdraw it at any time; this doesn’t affect what we did before. Write to [email protected].
You can also complain to the Polish data protection authority: Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl, or to the authority in the EU country where you live.
10. Age
Kinnod is for people aged 16 and over. See our child safety standards.
11. Changes
We’ll publish changes here with a new date. If a change matters for app users, we’ll also tell them in the app.