Privacy Policy

1. Overview

Kinpost ("Kinpost", "we", "us", or "our") provides a social platform where you preserve, share, and experience keepsakes: meaningful objects captured as photos and as 3D models generated by our automated photogrammetry pipeline. This Privacy Policy explains how Kinpost collects, uses, shares, retains, and protects your personal information when you use the Kinpost iOS application and kinpostapp.com (the "Service").

Your keepsakes are yours. You control what you capture, who can see it, and when it is deleted. We do not sell your personal information, and we do not use your content to train artificial intelligence models. Our only advertising is promoted posts in the Feed, sold directly to businesses; we never work with outside ad networks. If our advertising ever changes, we will update this Policy before the change takes effect. If you do not agree with this Privacy Policy, please do not use the Service.

2. Information We Collect

We collect only the information needed to operate the Service, and nothing beyond what is described in this section.

Account information. When you create an account with your email address or with Sign in with Apple, we collect your name, email address, date of birth (used to verify that you meet the minimum age requirement), and profile photo. If you use Sign in with Apple, Apple shares that information with us as part of the sign-in process, and you may hide your email address using Apple's private email relay.

Keepsake content and 3D scanning data. When you create a keepsake, you choose photographs from your photo library or take them with your device camera (with your permission), and you may add a title and description. If you use video capture, your device records a short video and extracts still frames from it on your device; only the extracted photographs are uploaded. The photographs you submit for a 3D keepsake, together with the 3D model and thumbnail our pipeline generates from them, make up your keepsake content. Camera capture happens on your device; we receive only the photographs you choose to submit.

Social and community data. We collect the friendships, friend requests, page subscriptions, blocks, comments (including photos attached to comments), collections you create, and reports you submit. When you block someone, we store a snapshot of their name and username as they appeared when you blocked them, so you can still tell who is on your blocked list even if they later change their name or username.

Technical and account data. To operate the Service we maintain authentication records, account preferences (including whether your account is personal or business), keepsake and processing-job metadata. If you enable push notifications, we store a device token that allows the Service to deliver notifications to your device (see "Push Notifications" below).

Support and safety communications. Messages you send through the in-app contact form (your email address, subject, and message), account deletion requests, and the details you provide when you report content or a user.

Payments. The Service is currently free, and we do not ask for and do not store your payment card details.

Website launch updates. If you sign up for email updates on kinpostapp.com, we collect the email address you submit so we can tell you when the Kinpost app launches and share important updates. These emails are sent through MailerLite (see "Third-Party Services" below), and you can unsubscribe at any time using the link in any email we send.

3. How We Use Your Information

We use the information we collect to provide and support the Service, specifically to:

• create and authenticate your account
• store your keepsakes and make them available to you whenever you use the Service
• run the 3D reconstruction pipeline on the photographs you submit for 3D keepsakes (see "Automated Processing" below)
• provide social features, friendships, page subscriptions, comments, and collections, and show your content to the people you choose
• send service notifications you have enabled, such as the notification that your 3D keepsake is ready
• respond to your support requests and account deletion requests
• investigate reports and enforce our content and community rules, including removing content and suspending accounts where necessary
• secure, debug, and maintain the Service, and comply with legal obligations

We do not use your information for third-party advertising, and we do not use it for profiling or automated decision-making: we do not work with outside ad networks, we do not sell your personal information, and we do not track you across other companies' apps or websites. The Feed may show promoted posts from businesses; those placements are sold directly to businesses by Kinpost, and if that ever changes how your information is used, we will update this Policy first. We do not send marketing emails; the only emails you can receive from us are the launch and update emails you explicitly sign up for on our website, which you can leave at any time.

4. Public Data: What Others Can See

Basic profile. Every account has a public basic profile that other signed-in users can find in search: your display name (your @username), your full name (if you added one), your profile photo, and whether your account is a business page. This basic profile does not include your email address or date of birth.

Keepsakes and comments. Keepsakes you have not marked private are visible to your friends. Keepsakes you mark private ("Only Me") are visible only to you. Comments are visible to whoever can see the keepsake they belong to.

Business accounts. If you choose a business profile, your entire profile and its content are public and discoverable: your name, username, profile photo, business designation, and subscriber count are visible and searchable by all signed-in users, and every keepsake you have not marked private is visible to all signed-in users, not just friends. Comment threads on its keepsakes are visible to all signed-in users, and any signed-in user may comment on keepsakes you have not marked private. Only keepsakes you mark private stay visible to you alone. Subscriptions are one-way: subscribers can see the business page's public keepsakes, and the business cannot see the subscribers' keepsakes.

5. Automated Processing

Kinpost's 3D keepsakes are created with machine-learning-based photogrammetry built on Apple's RealityKit technology. This section explains exactly what happens to your photographs.

• Capture. You take or select photographs of your object, or record a short video that your device converts into photographs. Capture happens on your device, at your direction, with your permission. We never access your camera without it.
• Reconstruction. When you submit photographs for a 3D keepsake, they are transmitted over an encrypted connection and processed automatically by our photogrammetry pipeline on Kinpost-controlled infrastructure. The pipeline produces the 3D model and renders a thumbnail of it, and both are stored with your keepsake.
• Automation. Processing is automated, and in the ordinary course no person views your photographs or 3D models. We review content only in response to a report, to investigate a safety, security, or legal issue, or when you ask us to, for example, in a support request.
• No AI training. We do not use your photographs, 3D models, or any other content you create to train artificial intelligence or machine-learning models, ours or anyone else's.
• No profiling. The pipeline's output is a 3D model of your object, nothing more. Your content is not used to make predictions or decisions about you.

6. How We Share Your Information

Your content is visible to others only as you choose, as described in "Public Data: What Others Can See" above.

We use a small number of service providers that process data on our behalf, only to deliver the Service: Google (Firebase authentication, database, file storage, and push-message delivery) and Apple (Sign in with Apple, the Apple Push Notification service, and the App Store).

We may disclose your information if we reasonably believe it is necessary to comply with law or a legal process, to enforce our Terms of Service, or to protect the rights, property, or safety of Kinpost, our users, or others, including investigating and preventing fraud and security issues.

We do not sell or rent your personal information. We do not share it with data brokers, analytics companies, or third-party advertising networks, and we do not disclose it to third parties for their own marketing purposes. Promoted posts are sold and served by Kinpost itself, and the businesses that buy them do not receive your personal information. If we are ever involved in a merger, acquisition, or sale of assets, we will give you notice before your information is transferred to a new operator.

7. Push Notifications

If you allow notifications, the Service can send you service-related notifications, for example, that your 3D keepsake is ready. We do not send marketing pushes. Delivery relies on a device token issued through Apple's push notification infrastructure; you can turn notifications off at any time in your device Settings, and we delete your device token when your account is deleted.

8. Data Retention and Deletion

We retain your information while your account is active, and we delete it when you tell us to.

Deleting a keepsake permanently removes the keepsake record, the photographs you submitted for it, and its visibility to other users. The generated 3D model file is stored in a separate system location that the app cannot delete directly, so a deleted keepsake's model file can remain on our infrastructure; it is no longer shown or reachable anywhere in the app once the keepsake is deleted. Deletion cannot be undone.

Deleting a comment removes it from the keepsake's comment thread. A photo attached to a deleted comment may remain in our file storage, where it is no longer shown anywhere in the app.

Deleting your account. You can request account deletion from the app's Help Center. When we process the deletion, we permanently remove your account and the Kinpost data associated with it, including your sign-in identity, profile, owned keepsakes, uploaded media and photographs, 3D models and thumbnails, collections, friendships, pending friend requests, page subscribers, comments, notifications, and processing jobs. We complete verified deletion requests within 30 days and confirm by email.

Where a longer retention period is required by law or is needed to resolve disputes or enforce our terms, the affected records are kept only for that purpose and then deleted. Backup copies expire through our normal backup cycle.

9. Your Privacy Rights

Many controls are built into the app: you can edit your profile, delete individual keepsakes, block other users, switch your account between personal and business, and request account deletion at any time.

United States state privacy laws. If you live in a state with a consumer privacy law, such as the California Consumer Privacy Act as amended by the California Privacy Rights Act, you have the right to know, access, delete, and correct the personal information we hold about you, and you will not be discriminated against for exercising those rights. Because we do not sell or share personal information as those laws define the terms, no opt-out mechanism is required or offered. If that ever changes — for example, if our advertising practices change in a way those laws treat as selling or sharing — we will provide the opt-out mechanisms they require, including honoring Global Privacy Control signals where they apply.

International users. If you are in the European Economic Area or the United Kingdom, our legal bases for processing under the GDPR and UK GDPR are the performance of our contract with you (operating your account, storing and sharing your keepsakes, and running the 3D pipeline), your consent (push notifications, which you can withdraw at any time), and our legitimate interests in keeping the Service secure and free from abuse. You have the rights of access, rectification, erasure, restriction, portability, and objection, and you may lodge a complaint with your supervisory authority.

To exercise any of these rights, use the controls in the app, contact us through the in-app contact form (Settings, Help Center, "Send us a note"), or email us at kinpostapp@gmail.com. We may need to verify that you are the account holder before acting on a request.

10. Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. We collect each user's date of birth at registration to enforce this age requirement. If we learn that we have collected personal information from a child under 13, we will delete it promptly. If you believe a child under 13 has provided us personal information, please contact us at kinpostapp@gmail.com.

11. International Data Transfers

Kinpost operates in the United States, and your information is stored on Google Cloud and Apple infrastructure. If you access the Service from outside the United States, including from the EEA or the UK, your information will be transferred to and processed in the United States and other countries where that infrastructure operates. Those transfers rely on recognized safeguards, including data-transfer frameworks and standard contractual terms.

12. Security

Your data is transmitted over encrypted connections (TLS) and stored encrypted at rest. Access to production systems is restricted to Kinpost personnel who need it to operate the Service, under least-privilege credentials, and our photogrammetry workers operate with scoped credentials that do not include your account credentials. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we learn of a security incident that affects your information, we will notify you and the relevant authorities as required by law.

13. Third-Party Services

The Service depends on Google Firebase (authentication, database, storage, and cloud messaging), Apple (Sign in with Apple, push notifications, and the App Store). These providers process your information only to deliver their services to us. Their own privacy policies, available at policies.google.com/privacy and apple.com/privacy, describe how each provider handles information under its control; this Policy governs what we collect and how we use it. Website launch-update emails are delivered through MailerLite (mailerlite.com), which stores the email addresses submitted via our signup form and processes them only to send those updates on our behalf.

14. Changes to This Policy

We may update this Privacy Policy as the Service evolves. The "Last updated" date above shows the current version, and a change takes effect on the date it is posted. If a change is material, we will notify you, for example, with a notice in the app or through an app update, before it takes effect. If you continue to use the Service after a change takes effect, you accept the updated Policy.

15. Contact Us

Questions about this Privacy Policy or your personal information can be sent through the in-app contact form (in the app: Settings, Help Center, "Send us a note", please put "Privacy" in the subject line so it reaches the right place quickly), or by email at kinpostapp@gmail.com. You can also find us at kinpostapp.com.