Privacy Policy

Kindred is a voice-first relationship platform. We ask you to share something intimate — your voice, your story, your real identity — and in return we promise stewardship, not surveillance. This policy explains exactly what we collect, why, who else touches it, how long we keep it, and the control you have. We never sell your data and never share it with advertisers.

1. What we collect

Phone number — for verification and login (via Twilio).
Identity details — your legal name, date of birth, and the city, state, and ZIP code from your ID, verified through Stripe Identity (which also processes a government ID and selfie). Kindred stores only these details — never your street address — and uses your city to plan dates near you. The ID image and selfie are held by Stripe, not us.
Your Sage interview — the audio and transcript of your onboarding conversation with Sage, our AI matchmaker.
Voice date recordings — pre-reveal voice dates may be recorded, only ever with both participants' explicit consent at the start of that call, along with their transcripts and AI-extracted insights. Recordings are encrypted at rest. Post-reveal connection calls are not recorded.
Match & activity data — your matches, date metadata (start/end times, durations), reveal outcomes, date-suggestion interactions, and the psychological dimensions Sage extracts to match you.
Subscription state — your membership status, derived from Apple's in-app purchase receipts. We never see your card or bank details.
Diagnostics — if crash reporting is enabled, crash and performance data (and a device identifier) to fix problems.

2. Why we collect each thing

Verification — phone and identity confirm you are a real, of-age human. "Verified humans only" is a core promise.
Matching — your interview and the dimensions extracted from it are how Sage finds people whose inner life might fit yours.
Sage's continuous learning — the conversations she listens to (with consent) make future matches better, for you and across the platform.
Safety — when someone is blocked or reported, having the actual conversation lets us review accountably rather than guess.
Membership — purchase state gates access to matching.

We use your data only for App Functionality and basic Analytics — never for advertising, never for cross-app tracking, never sold to data brokers.

3. Who else sees it (subprocessors)

We share the minimum necessary with vetted service providers who act on our behalf and not for their own purposes:

Provider	What they handle
Twilio	Sends your verification SMS.
Stripe Identity	Verifies your government ID + selfie; holds the ID image (we don't).
ElevenLabs	Powers Sage's voice and processes the interview audio. Does not train on your audio under our tier.
Anthropic (Claude)	Extracts matching dimensions and analyzes transcripts. Does not train on what we send (API terms).
OpenAI (Whisper)	Transcribes recorded calls. Does not train on submitted audio (API terms).
LiveKit	Relays real-time call audio/video. Not stored by them.
Amazon Web Services (S3)	Stores call recordings, encrypted at rest.
Railway	Hosts our database and servers.
Apple	Processes your subscription payment (StoreKit). We never see payment details.
Sentry	Crash/error monitoring, if enabled.

We never sell your data, never share it with advertising networks, and never permit any third party to train external AI models on your conversations beyond the processing described above.

4. How long we keep it

Raw call audio — kept for 24 hours, then permanently deleted. The transcript of the call is retained — it's how Sage keeps learning to match you better, and what we review if a safety concern is reported. If either participant reports a call, we place a safety hold that preserves that call's audio for up to 90 days so it can be reviewed; otherwise the audio is gone within a day. The recording itself is irrecoverable after deletion.
Sage interview audio — your interview with Sage is processed by ElevenLabs (who do not train on it under our tier); Kindred keeps only its transcript and the dimensions extracted from it.
Account data — kept while your account exists; removed when you delete your account.
You can request deletion of any single recorded call at any time.

5. Your rights and controls

Delete your account — in-app (Settings → Delete Account). This permanently removes your profile, matches, recordings, transcripts, and extracted data from Kindred.
Delete a single call recording — available per call.
Data export — request a copy of your data by emailing us. We respond to export requests within 30 days.
Withdraw consent — either party can decline recording at the start of any call; the call is then cancelled.

6. Children's data

Kindred is strictly for adults 18 and older. Identity verification (Stripe Identity, with date of birth) gates access — we do not knowingly collect data from anyone under 18, and we have no under-18 users.

7. California & EU/UK disclosures

If you are a California resident (CCPA/CPRA) or in the EU/UK (GDPR), you have rights to access, correct, delete, and port your personal data, and to object to or restrict certain processing. We do not "sell" or "share" personal information as those terms are defined under California law. Our lawful bases under GDPR are performance of our contract with you (providing the service), your consent (call recording), and our legitimate interests (safety and service improvement). To exercise any right, contact us below.

8. Data breach notification

If a data breach affects your personal information, we will notify you promptly, consistent with applicable law.

9. How to contact us

Email privacy@akindredlove.com for any privacy question or request.

10. Changes to this policy

If we make a material change, we'll notify you with an in-app banner and, where appropriate, by email, before the change takes effect.

11. Effective date

This policy is effective as of June 9, 2026.