Privacy Policy

1. Overview

Kinpost ("Kinpost", "we", "us", or "our") provides a social platform where you preserve, share, and experience keepsakes — meaningful objects captured as photos and as AI-generated 3D models. This Privacy Policy explains how Kinpost collects, uses, shares, retains, and protects your personal information when you use the Kinpost iOS application (the "Service").

Your keepsakes are yours. You control what you capture, who can see it, and when it is deleted. We do not sell your personal information, we do not display advertising, and we do not use your content to train artificial intelligence models. If you do not agree with this Privacy Policy, please do not use the Service.

2. Information We Collect

We collect only the information needed to operate the Service, and nothing beyond what is described in this section.

Account information. When you create an account with your email address or with Sign in with Apple, we collect your name, email address, date of birth (used to verify that you meet the minimum age requirement), and profile photo. If you use Sign in with Apple, Apple shares that information with us as part of the sign-in process, and you may hide your email address using Apple's private email relay.

Keepsake content and 3D scanning data. When you create a keepsake, you choose photographs from your photo library or take them with your device camera (with your permission), and you may add a title and description. The photographs you submit for a 3D keepsake, together with the 3D model and thumbnail our photogrammetry pipeline generates from them, make up your keepsake content. Camera capture happens on your device; we receive only the photographs you choose to submit.

Social and community data. Friendships, friend requests, blocks, likes, comments (including photos attached to comments), collections you create, and reports you submit. When you block someone, we store a snapshot of their name and username as they appeared when you blocked them so that your blocked list stays meaningful to you.

Technical and account data. To operate the Service we maintain authentication records, account preferences, keepsake and processing-job metadata, and entitlement records that track your keepsake allowance. If you enable push notifications, we store a device token that allows the Service to deliver notifications to your device (see "Push Notifications" below).

Support and safety communications. Messages you send through the in-app contact form (your email address, subject, and message), account deletion requests, and the details you provide when you report content or a user.

Payments. We do not ask for and do not store your payment card details. If you purchase a Kinpost Plus subscription through the App Store, Apple processes the payment; we receive only confirmation of the purchase and the state of your subscription entitlement.

3. How We Use Your Information

We use the information we collect to provide and support the Service, specifically to:

• create and authenticate your account
• store your keepsakes and make them available to you whenever you use the Service
• run the 3D reconstruction pipeline on the photographs you submit for 3D keepsakes (see "AI Processing and 3D Photogrammetry" below)
• provide social features — friendships, comments, likes, and collections — and show your content to the people you choose
• send service notifications you have enabled, such as the notification that your 3D keepsake is ready
• respond to your support requests and account deletion requests
• investigate reports and enforce our content and community rules, including removing content and suspending accounts where necessary
• secure, debug, and maintain the Service, and comply with legal obligations

We do not use your information for third-party advertising, for profiling, or for automated decision-making. We do not send marketing emails.

4. AI Processing and 3D Photogrammetry

Kinpost's 3D keepsakes are created with machine-learning-based photogrammetry built on Apple's RealityKit technology. This section explains exactly what happens to your photographs.

• Capture. You take or select photographs of your object. Capture happens on your device, at your direction, with your permission. We never access your camera without it.
• Reconstruction. When you submit photographs for a 3D keepsake, they are transmitted over an encrypted connection and processed automatically by our photogrammetry pipeline on Kinpost-controlled infrastructure. The pipeline produces the 3D model and a thumbnail.
• Automation. Processing is automated, and in the ordinary course no person views your photographs or 3D models. We review content only in response to a report, to investigate a safety, security, or legal issue, or when you ask us to — for example, in a support request.
• No AI training. We do not use your photographs, 3D models, or any other content you create to train artificial intelligence or machine-learning models — ours or anyone else's.
• No profiling. The pipeline's output is a 3D model of your object, nothing more. Your content is not used to make predictions or decisions about you.

5. How We Share Your Information

Your content is visible to others only as you choose. Keepsakes and profile information are shown according to your sharing and visibility settings; friends-only content is shown only to people you have accepted as friends; and public keepsakes are visible to other signed-in Kinpost users. Comments and likes are visible to whoever can see the keepsake they belong to.

We use a small number of service providers that process data on our behalf, only to deliver the Service: Google (Firebase authentication, database, file storage, and push-message delivery) and Apple (Sign in with Apple, the Apple Push Notification service, and App Store distribution).

We may disclose your information if we reasonably believe it is necessary to comply with law or a legal process, to enforce our Terms of Service, or to protect the rights, property, or safety of Kinpost, our users, or others — including investigating and preventing fraud and security issues.

We do not sell or rent your personal information. We do not share it with advertising networks, data brokers, or analytics companies, and we do not disclose it to third parties for their own marketing purposes. If we are ever involved in a merger, acquisition, or sale of assets, we will give you notice before your information is transferred to a new operator.

6. Data Retention and Deletion

We retain your information while your account is active, and we delete it when you tell us to.

Deleting a keepsake permanently removes the keepsake, its 3D model and thumbnail, its source photographs, and its likes and comments. Deletion cannot be undone.

Deleting your account (Settings → Delete Account) permanently deletes your account and the Kinpost data associated with it, including your keepsakes, uploaded media, collections, and profile. When we process an account deletion, we remove or anonymize, as applicable: your sign-in identity, profile, owned keepsakes, source photographs, 3D models and thumbnails, collections, friendships, pending friend requests, likes, comments, notifications, processing jobs, and entitlement records. We complete verified deletion requests within 30 days.

Where a longer retention period is required by law or is needed to resolve disputes or enforce our terms, the affected records are kept only for that purpose and then deleted. Backup copies expire through our normal backup cycle.

7. Security

Your data is transmitted over encrypted connections (TLS) and stored encrypted at rest. Access to production systems is restricted to Kinpost personnel who need it to operate the Service, under least-privilege credentials, and our photogrammetry workers operate with scoped credentials that do not include your account credentials.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we learn of a security incident that affects your information, we will notify you and the relevant authorities as required by law.

8. Your Privacy Rights

Many controls are built into the app: you can edit your profile, delete individual keepsakes, block other users, turn notifications on or off, and delete your account at any time.

California residents. Under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, you have the right to know, delete, and correct the personal information we hold about you, and you will not be discriminated against for exercising those rights. Because we do not sell or share personal information as California law defines those terms, no opt-out mechanism is required or offered.

EEA and UK residents. Under the GDPR and UK GDPR, our legal bases for processing are the performance of our contract with you (operating your account, storing and sharing your keepsakes, and running the 3D pipeline), your consent (push notifications, which you can withdraw at any time), and our legitimate interests in keeping the Service secure and free from abuse. You have the rights of access, rectification, erasure, restriction, portability, and objection, and you may lodge a complaint with your supervisory authority.

To exercise any of these rights, use the controls in the app, or contact us at kinposthelp@gmail.com (see "Contact Us" below). We may need to verify that you are the account holder before acting on a request.

9. Push Notifications

If you allow notifications, the Service can send you service-related notifications — for example, that your 3D keepsake is ready. We do not send marketing pushes. Delivery relies on a device token issued through Apple's push notification infrastructure; you can turn notifications off at any time in the app or in your device Settings, and we delete your device token when your account is deleted.

10. Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will delete it promptly. If you believe a child under 13 has provided us personal information, please contact us at kinposthelp@gmail.com.

11. International Data Transfers

Kinpost operates in the United States, and your information is stored on Google Cloud and Apple infrastructure. If you access the Service from outside the United States — including from the EEA or the UK — your information will be transferred to and processed in the United States and other countries where that infrastructure operates. Those transfers rely on recognized safeguards, including data-transfer frameworks and standard contractual terms.

12. Third-Party Services

The Service depends on Google Firebase (authentication, database, storage, and cloud messaging) and Apple (Sign in with Apple, push notifications, and the App Store). These providers process your information only to deliver their services to us. Their own privacy policies — available at policies.google.com/privacy and apple.com/privacy — describe how each provider handles information under its control; this Policy governs what we collect and how we use it.

13. Changes to This Policy

We may update this Privacy Policy as the Service evolves. The "Last updated" date above shows the current version, and a change takes effect on the date it is posted. If a change is material, we will notify you — for example, with a notice in the app or through an app update — before it takes effect. If you continue to use the Service after a change takes effect, you accept the updated Policy.

14. Contact Us

Questions about this Privacy Policy or your personal information can be sent through the in-app contact form (in the app: Settings → Help Center → "Send us a note" — please put "Privacy" in the subject line so it reaches the right place quickly), or by email at kinposthelp@gmail.com. You can also find us at kinpostapp.com.