English · हिन्दी · Español · Français · Italiano · اردو · العربية

Privacy

Last updated [DATE, set at publication]

Who we are

Kithmark is made by The Wired Ape Inc., a company registered in Delaware, United States, at [REGISTERED ADDRESS]. We decide what data Kithmark handles and why, so we are the data fiduciary for it under India's Digital Personal Data Protection Act, 2023, and the business or controller under the other laws below. Kithmark is offered first in the United States and in India. If you live in the United States, or in the European Union, the EEA or the UK, the section for you below also applies.

What stays on your phone

Everything you write in Kithmark stays on your phone, in an encrypted database behind a passcode you choose: the people you add, what you log, your answers, your notes and your voice notes. We never receive any of it, except as described below.

What can leave, and only if you choose it

A backup. If you make an account and turn backup on, a copy of your record is locked on your phone before it leaves, with a recovery key only you hold. We store the locked copy and can't open it. Nobody can, without your key. If you lose the key, the backup can't be opened by anyone, us included.

Never in the backup. Health matters you note, yours or a relative's, and who knows about them stay on your phone only. So do photos and places. A new phone starts without them; to keep a copy, take your record out.

Beta feedback. If you use Tell us what's broken in More, the words you type go to Kithmark's server with the app's version and whether your phone is an iPhone or an Android phone. No name, no account and no device number go with them. Before anything is sent, the app checks for words that suggest you may be in danger and opens the help lines instead. We read what you send to fix the app, and keep it only as long as we need it for that.

Your email address. An account is optional. It holds your email address, so you can sign in with a code, and nothing about your family. It also keeps the language you chose, so the sign-in email comes in that language.

Readings, if you sign in. Keeping your record works without the internet and without an account. Readings don't: when you ask Kithmark to put your record together, the calculation runs on our server, and research that isn't kept inside the app comes from our server too. For a calculation, the app sends only numbers, dates and codes: which relation each person is to you, which things you logged and when, how the people you added are related to each other, unless you marked a link as kept quiet, the outside pressures and circumstances you noted, as codes (money, health and caring only with sensitive records on), the settings you chose, and your answers to Kithmark's questions. It never sends a name or anything you typed. Where you wrote a note, it sends only that a note exists. The server works out what can be said, sends that back without any figures, and keeps nothing from the request. The one thing it keeps is a count of how many readings your account asked for each day, so a daily limit can work; counts are deleted after 30 days.

Research is marked for your account. Research the server sends you carries an invisible mark that identifies the account it went to, so a copy of Kithmark's research can be traced. It changes nothing you can see. It is kept inside your locked record so it opens again offline, is never part of your backup or export, and is removed when you sign out.

Tezo and Glosa run on your phone. Tezo and Glosa are optional helpers. They're software, not people. Glosa uses a language model that the app downloads once to your phone, from Google Play or from Hugging Face; like any download, that sees your phone's internet address and nothing else. What you type to either of them never leaves the phone. To answer, Glosa may download Kithmark's research on the topic you asked about, which tells our server the topic but not your words. Glosa reads the entries you logged about someone only if you say yes, for that one conversation, and keeps nothing afterwards.

Sensitive records

Some records are sensitive: who knows about a health matter, and records about orientation in a family. They are off until you turn sensitive records on, and turning them off deletes every one of them at once. What you write in them stays on your phone. If you ask for a reading, the server receives only coded facts from them, such as which people know about a health matter and how they found out, never the matter itself or your words, and keeps none of it.

The practitioner directory

When you open the directory, the app downloads the whole list. Every filter you choose runs on your phone, so we never learn what you looked for or whom you contacted.

Video sessions with a Kithkeeper

If you add a session using the code a Kithkeeper gives you, our server keeps its time and length, the name you chose to show them (optional), the messages you both write, and your answers to the short private check afterwards. Messages are stored sealed and checked for safety; a held message is kept so we can review it. The call runs on Daily, which carries the video and sound between you. Calls are never recorded and nobody watches them. Everything about your sessions is deleted when you delete your account.

Paying for a membership

If you pay for a membership, Apple, Google or Stripe takes the payment. We never see your card or bank details. A membership belongs to your account, never to anything in your record. Our server keeps a record of the purchase so it can confirm it and restore it on a new phone: which plan, its state and its dates, and the store's own reference for it. If you buy a founding membership on our website, we keep only a scrambled form of the email you gave, until you sign in to Kithmark with that email; then the membership joins your account and the scrambled email is deleted. If you delete your account, the purchase record stays with nothing that links it to you, so a refund can still be matched.

Who handles data for us

Supabase stores accounts, locked backups and purchase records, in its East US (North Virginia) region, and holds the practitioner directory. Vercel runs Kithmark's server, in Washington, D.C., which works out readings and keeps nothing from a request. Daily carries the video and sound of Kithkeeper calls and doesn't record them. Apple, Google and Stripe take payments. Google Play and Hugging Face deliver the Glosa model file. Framer hosts this website. None of them can read your record: the backup is locked before it leaves, and what you write never leaves your phone.

What we can't control

Apple and Google keep a record that you installed Kithmark. Family sharing and screen time features may show it too. That's outside our control, and deleting the app doesn't remove it.

Kithmark can't protect you from someone who knows your passcode, or who picks up your phone while the app is open. If you tell Kithmark your phone isn't private to you, it saves nothing at all and makes no backup.

Your passcode and your recovery key

Your passcode protects the key to your record on the phone. Your recovery key opens your backup. We have neither and can't recover either. Write the recovery key down on paper when the app shows it.

Phone backups

Kithmark keeps itself out of iCloud and Google backups. Its own backup, described above, is the only copy that can leave the phone.

Deleting

You can delete one entry, one person or everything, at any time, from inside the app. Deleted means gone. If you have an account, "Delete my account and backup" removes your email address and your locked backup from our servers at once.

How long we keep things

Your email address and your locked backup stay until you delete them, which you can do in the app at any time. The daily count of readings is deleted after 30 days. A snapshot sent for a reading is not kept at all.

Your rights

Under the Digital Personal Data Protection Act you can ask what we hold about you and how it is used, ask us to correct or erase it, withdraw your consent at any time, name someone to act for you if you die or can no longer act, and complain to us. For an account, what we hold is your email address, the language you chose, a locked backup we can't read and a daily count, and the app lets you delete all of it yourself. For anything else, write to the contact below. We answer as soon as we can and always within the time the law sets. If you're not satisfied, you can complain to the Data Protection Board of India.

If something goes wrong

If personal data we hold is ever exposed, we'll tell the people affected and the Data Protection Board of India, as the law requires, with what happened and what we're doing about it. Because backups are locked with a key only you hold, an exposed backup can't be read.

Where your data is

Accounts, locked backups and purchase records are kept in Supabase's East US (North Virginia) region, and readings are worked out on Vercel in Washington, D.C., both in the United States. If you live in India, this means your account is kept outside India. The Wired Ape Inc. is a United States company, and the people who run Kithmark work from the United States and India, so they may reach that data from either, for example to answer your request to delete it. We never sell personal data, share it for advertising, or pass it to anyone except the service providers named above.

Analytics, advertising and tracking

None. Kithmark has no analytics, no crash reporting, no advertising and no tracking of any kind. This website runs on Framer, which serves its pages and files from Framer's own servers; we add no analytics, advertising or tracking to it. [TO CONFIRM: Framer site analytics and any cookie banner are off.]

If you live in the United States

The Wired Ape Inc. is a United States company. State privacy laws give you the rights below, whether or not your state's law reaches a company of our size, and we honor them for everyone in the United States.

What we collect, and why. Categories: an identifier (your email address, if you create an account), commercial information (a record of any membership you buy, never card details), and sensitive data (codes from your record that could reveal health or religious belief, only with your consent and only when you ask for a reading). Sources: only you. Purposes: your account, your backup, your readings and your membership. We keep them for as long as this policy says above.

No selling, no sharing, no targeted advertising, no profiling with legal effect. We do not sell or share personal information as California and other state laws define those words, do not use it for targeted advertising, and make no decision about you with legal or similarly significant effect. There is nothing to opt out of; this website and the app set no cookies and carry no trackers, so a Global Privacy Control signal changes nothing.

Sensitive data. We process it only with your opt-in consent, which you can withdraw at any time in the app.

Your rights. You can ask to know and see what we hold, to correct it, to delete it, and to receive it in a portable form (Export in the app gives JSON), without being treated differently for asking. You can use an authorized agent. Write to privacy@kithmark.com. We answer within 45 days, extendable once by 45 more with a reason. If we decline, you can appeal by replying to our answer; we decide within 45 days and, if you still disagree, tell you how to complain to your state attorney general.

Consumer health data. People in Washington, Nevada and Connecticut have further rights, set out in our consumer health data privacy policy.

Children. Kithmark is for adults. We do not knowingly collect personal information from anyone under 18, and delete it if we learn we have.

Tracking and Do Not Track. No one, us or a third party, tracks you across websites or over time through Kithmark or this website. Because there is no such tracking, a Do Not Track or Global Privacy Control signal has nothing to switch off. We never collect precise location.

Email and texts. The only email we send is the sign-in code you ask for. If you pay on our website, Stripe sends you a receipt. We send no marketing email and no text messages.

Automated decisions. Kithmark makes no decision about employment, credit, housing, insurance, education, health care or anything with a similar effect, so the rules on consequential automated decisions (such as California's and Colorado's) do not apply to it.

If you live in the European Union, the EEA or the UK

The EU's General Data Protection Regulation and the UK GDPR apply to you. This section adds what they require.

Who is responsible. The Wired Ape Inc. is the controller. Because The Wired Ape Inc. is not established in the EU, it has appointed a representative there: [EU REPRESENTATIVE, NAME AND ADDRESS]. For the UK: [UK REPRESENTATIVE, NAME AND ADDRESS]. Data protection contact: privacy@kithmark.com.

Where your data is. Accounts, locked backups and purchase records are kept in Supabase's East US (North Virginia) region, and reading requests are handled on Vercel in Washington, D.C. That transfer to the United States relies on the European Commission's standard contractual clauses in our agreements with Supabase and Vercel. The people who run Kithmark may reach account data from the United States and India, under the same clauses.

Why we may use it. Your account, backup and readings are handled because you asked for them: that is our contract with you (GDPR Art. 6(1)(b)). Sensitive records, the questions about faith and the health disclosure map are handled only with your explicit consent (Art. 9(2)(a)), which you can withdraw at any time by switching them off, and everything they hold is deleted when you do. A membership you buy is handled to provide it, under our contract with you (Art. 6(1)(b)), and its record is kept as tax and accounting law requires (Art. 6(1)(c)). Our providers keep short security logs of requests, such as the time and the network address, for our legitimate interest in keeping the service safe (Art. 6(1)(f)).

Automated readings. Kithmark's readings are made by software. They describe what you recorded and make no decision about you, have no legal effect and are never shared, so the rules on solely automated decisions (Art. 22) do not apply. You can ask a person at The Wired Ape to explain how a reading was reached.

Your rights. You can ask to see your data, to correct it, to erase it, to restrict or object to its use, and to receive it in a machine-readable form; Export in the app gives you your record as a plain-words file and as JSON. You can withdraw consent at any time. We answer within one month, or three for complex requests, and tell you if we need longer. You can complain to the data protection authority where you live, work or think an infringement happened.

If something goes wrong. We tell the lead data protection authority within 72 hours of learning of a breach that puts your rights at risk, and we tell you directly when the risk is high.

Providers. Supabase (accounts, backups, purchase records), Vercel (readings) and Daily (Kithkeeper video calls) process data only on our instructions, under data processing agreements that include the standard contractual clauses. Apple, Google and Stripe handle payments under their own terms. Google Play and Hugging Face deliver the Glosa model file, and Framer hosts this website.

Age

Kithmark is for adults, 18 and over. Tezo and Glosa, like the rest of the app, are only for people who have confirmed they are 18 or over. If we learn that an account belongs to someone under 18, we delete it and its backup.

Where your app store shares an age range, Kithmark reads it once at first run, only to confirm you're 18 or over, and stops setup if the store reports you're younger. Nothing about it is stored or sent.

Changes

If this policy changes, the new version will be posted here with its date, and the app will say so before the change applies to you.

Contact, and our grievance officer

privacy@kithmark.com

Grievance officer: Vishwinder Singh Jamwal, privacy@kithmark.com

The Wired Ape Inc., Delaware, United States, [REGISTERED ADDRESS]