Kinverra Privacy Policy

Kinverra LLC, a Wyoming limited liability company ("Kinverra," "we," "us," or "our"), operates the Kinverra mobile and web application (the "Service"). This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have.

1. Who this policy covers

This policy applies to anyone who creates a Kinverra account, joins a trip as a member, or follows a trip as a read-only viewer. If you’re a trip member, some of what you add to a shared trip (photos, journal entries, chat messages) is visible to your fellow travelers by design - that’s the core of how Kinverra works. Section 4 explains exactly what’s shared with whom.

2. Information we collect

Account information

• Email address, and a password if you sign up directly (we never see or store your password in readable form - it’s handled by our authentication provider).
• If you sign in with Google or Apple, we receive the name and email address associated with that account.
• Display name and profile photo, which you choose.
• Age verification: on iOS, a coarse age-range signal from your Apple Account (via Apple’s Declared Age Range feature) when available, or otherwise your direct confirmation that you’re 13 or older, collected at signup to confirm you’re old enough to use Kinverra (see Section 8, Children’s Privacy). We do not collect or store your date of birth.

Trip content you create or add

• Journal entries you write.
• Photos and videos you upload, including any caption you add.
• Reservation details you enter (flights, hotels, activities, confirmation numbers, and similar booking information).
• Trip chat messages, reactions, and polls.
• To-do items and packing lists.
• Documents you upload to a trip.

Location information

• Photo location data. If a photo or video you upload has location data embedded in it by your device (EXIF GPS data), we extract and store that location so it can be shown on your trip map. This happens automatically for any photo with embedded location data - we don’t ask separately each time.
• Live location sharing (opt-in). If you turn on location sharing for a trip, we periodically record your approximate location while that trip is active, so your travel companions can see where the group is on a shared map. This is off by default and only starts once you turn it on.

  Important: turning location sharing off stops us from recording new location updates, but it does not remove location history we already recorded - that history remains visible to your fellow trip members. If you want previously recorded location history removed, you can request it by contacting us or by deleting your account (Section 9).

• Reservation and city locations. When you add a reservation or a city to a trip’s itinerary, we look up its approximate coordinates so it can be shown on the trip map.

Information from your device

• A push notification token, if you enable notifications, so we can deliver alerts for new trip messages and reminders. This token is not tied to any advertising identifier.

What we do not collect

We do not use any analytics or crash-reporting service, and we do not track your activity across other apps or websites. We do not currently run any advertising, and we do not sell your information (see Section 6).

3. How we use your information

We use the information above to:

• Operate the core features of Kinverra - trips, journaling, photos, chat, reservations, maps, and packing lists.
• Generate AI-written trip reports and photo captions, and produce printed photo books, as described in Section 5.
• Send you emails (a welcome email, and password reset emails) and push notifications (new trip messages, periodic "remember this trip" reminders, and photo update digests).
• Detect and prevent abuse, and enforce our Terms of Service.
• Comply with legal obligations.

4. Who can see your content

Kinverra is built around shared trips, so visibility is central to how it works:

• Trip members can see everything added to a trip they belong to: journal entries, photos, reservations, chat, location (if a member has sharing on or has ever had it on), and documents.
• Trip followers (people who’ve been given a read-only follow link to a trip) can see journal entries, photos, and reservations, but not chat or location.
• Poll votes are visible to trip members by default. If a poll is marked anonymous, other members can see the vote counts but not who voted for what - only you can see your own vote.
• Shared AI trip reports. If you generate an AI trip report and choose to share it, the link works for anyone who has it, not just your trip members - report links are not password-protected, so treat them like any other shareable link. Outside of a report you’ve chosen to share, we do not offer any way to make trip content publicly viewable outside your trip’s membership.

5. Third parties we share information with

We use a small number of service providers to operate Kinverra. We do not sell your information to anyone, and we do not share it for advertising purposes.

Two of these providers - Anthropic and OpenAI - are third-party AI services. Before any content is sent to them, the app asks you to affirmatively agree to this in a dedicated screen that names each provider and what’s sent to it, matching the table below.

We may also disclose information if required by law, to protect the rights and safety of Kinverra or our users, or in connection with a merger, acquisition, or sale of assets (in which case we’ll provide notice before your information becomes subject to a different privacy policy).

6. We do not sell your information

Kinverra does not sell your personal information, and has not sold personal information in the preceding 12 months, as those terms are defined under the Colorado Privacy Act and the California Consumer Privacy Act.

7. Data retention

• We keep your account and trip content for as long as your account is active.
• If you delete your account, see Section 9 for exactly what happens.
• Single-trip purchases. A trip created under a single-trip purchase is valid for 1 year from the purchase date unless you extend it. If it isn’t extended, we begin a 30-day grace period at the 1-year mark, then permanently delete the trip and its content - 395 days after purchase in total - unless you extend it before the grace period ends.
• Trips covered by a subscription, and AI-generated reports outside of an expired single-trip purchase, do not currently have an automatic expiration process - content is retained until you delete it, delete your account, or ask us to remove it.

8. Children’s privacy

Kinverra is not intended for anyone under 13 years old. We confirm your age when you create an account — on iOS, using a coarse age-range signal from your Apple Account where available, and otherwise by asking you to confirm you’re 13 or older directly. We do not ask for or store your date of birth. We do not allow account creation for anyone under 13 - if this check indicates the user is under 13, the account is deleted immediately, not merely restricted. We do not knowingly collect personal information from children under 13. If we learn that we’ve collected information from a child under 13 in violation of this policy, we will delete it promptly. Parents who believe their child has provided us information can contact us using the details in Section 12.

9. Account deletion

You can delete your account at any time from Edit Profile → Delete Account. Here’s exactly what happens:

• A 30-day grace period begins. If you sign back in within 30 days, you can reactivate your account and cancel the deletion.
• After 30 days, your account is permanently deleted:
  • Deleted outright: your location history, individual (non-shared) packing list items, your avatar photo, and your account itself.
  • Kept, but no longer linked to you: photos, journal entries, reservations, to-dos, documents, and reports you contributed to shared trips remain visible to your former trip companions, but are no longer attributed to your name - they display as "Deleted user."
  • Trips you own: if you’re the only member, the whole trip and its content is deleted. If other members remain, the trip stays intact for them, but is locked from further changes until an ownership-transfer feature (not yet built) becomes available.

10. Your rights and choices

Depending on where you live, you may have rights under laws like the Colorado Privacy Act (CPA) or the California Consumer Privacy Act (CCPA), including the right to:

• Access the personal information we hold about you.
• Correct inaccurate information (most of this you can already do yourself in Edit Profile).
• Delete your information (Section 9).
• Data portability - obtain a copy of your data in a portable format.
• Opt out of targeted advertising, the sale of personal information, or profiling - not applicable today, since we don’t do any of these, but you may still submit a request.
• Appeal a decision we make regarding your rights request.

To exercise any of these rights, contact us using the details in Section 12. We will respond within the timeframe required by applicable law. We will not discriminate against you for exercising these rights.

You can also control:

• Location sharing - toggle on/off per trip at any time (Section 2).
• Push notifications - control at the device level through your phone’s settings.

11. Security

We use industry-standard measures to protect your information, including encryption in transit and access controls that restrict trip data to trip members and followers. No method of transmission or storage is 100% secure, and we can’t guarantee absolute security.

12. Contact us

Questions about this policy, or requests regarding your information, can be sent to:

help@kinverra.com

13. Changes to this policy

We may update this policy from time to time. If we make material changes, we’ll notify you by email or through the app before the changes take effect. The "Effective date" at the top of this page always reflects the most recent version.