Kindred

Privacy Policy

Last updated: 2026-11-12

1. Data Controller

The data controller is GAO KAIPING, operating the Kindred platform ("we"), available at https://kindredai.me. For all privacy matters, contact [email protected] (unified entry for data-rights requests and privacy inquiries). Data Protection Officer: not separately appointed; requests to the email above are handled by our privacy team.

2. Personal Information We Collect

  • 2.1 Information you provide: the messages you send in chat, an optionally bound email address (used for identity recovery), and your communications with support.
  • 2.2 Information collected automatically: IP address, device and browser type, access/usage logs (page visits, feature usage, request times and error logs), language preference, and an anonymous device identity used for free-quota enforcement and abuse prevention (a device identifier in a cookie, plus a browser-based device fingerprint stored as a non-reversible hash).
  • 2.3 Service-derived information: to provide a companionship experience that "remembers you," we generate and store AI memory from your conversations (facts you chose to share and conversation summaries), updated as the conversation grows.
  • 2.4 Payment information (once paid features launch): transaction amount, order status and billing email. We never store full card numbers — payment card data is handled exclusively by our payment processor (see Section 5) and never passes through the Site's servers.

3. How We Use Your Information (Legal Bases)

We process your personal information for the following purposes, with the corresponding legal bases:

  • Providing and maintaining the companion chat service, including the memory feature that remembers what you share (contract performance);
  • Billing, subscription management and payment processing (contract performance; applies once paid features launch);
  • Customer support (contract performance / legitimate interests);
  • Security and policy-update notices (legitimate interests);
  • Security, fraud and abuse prevention, including free-quota enforcement (legitimate interests);
  • Product improvement and aggregated, de-identified analytics (legitimate interests);
  • Compliance with legal obligations (legal obligation).
  • We will not use your conversation content to train AI models without your explicit consent.

4. Cookies & Local Storage

The Site uses only a small number of cookies and local storage items, and no marketing or advertising tracking cookies:

  • Strictly necessary: the anonymous device identity (device-identifier cookie) that maintains your conversation history, free quota and core functionality; cannot be disabled;
  • Functional: language preference, remembering the language you chose on the Site; clearable via browser settings, after which the Site falls back to its default language.
  • Note: clearing your anonymous identity re-computes your identity as a new device, and previous conversation history can no longer be recovered — bind an email first if you want to keep it.

5. Sharing & Disclosure

We do not sell your personal information, including as "sale" is defined under applicable law such as the CCPA. We share information only in these circumstances:

  • Service providers: cloud computing and storage, and third-party AI model providers (the messages you send are transmitted to their platforms to generate replies, governed by their privacy policies);
  • Payment processing: payment card data is handled exclusively by our PCI-DSS-compliant payment processor Waffo Pancake and is not stored on the Site's servers;
  • Legal and regulatory requirements: in response to lawful requests by law, court order or competent authorities;
  • Business transactions: in mergers or acquisitions, with prior notice and continuity of protection obligations;
  • Other cases with your explicit consent.

6. Data Security

We apply transport encryption (TLS/HTTPS), encryption or hashing of sensitive data, least-privilege access control and continuous security auditing. If a data security incident likely affects your rights, we will notify you and the relevant regulators within 72 hours of discovery as required by law. Please safeguard your devices and identity credentials and do not share them.

7. Retention Periods

Data is deleted or anonymized once its retention period ends. Retention by category:

  • Anonymous identity and email (if bound): retained while the account is active, deleted or anonymized within 90 days after a deletion request;
  • Chat records and AI memory: retained until you delete them or for 90 days after account deletion;
  • Access and security logs: rolling deletion within 180 days maximum;
  • Transaction and billing records: retained as required by applicable tax and accounting law (usually no more than 5 years).

8. Your Data Rights

You may exercise the following rights via the contact channel in Section 12; we will respond within 30 calendar days:

  • Right to be informed: know what data we collect and how we use it;
  • Right of access: obtain a copy of your personal information;
  • Right to rectification: correct inaccurate or incomplete information;
  • Right to erasure: request deletion of data under certain conditions (including chat records and AI memory);
  • Right to restrict processing: pause processing in certain circumstances;
  • Right to data portability: receive your data in a machine-readable format;
  • Right to object: object to processing based on legitimate interests or marketing;
  • Right to withdraw consent: withdraw consent-based processing authorizations.

9. Marketing Communications

The Site currently does not send marketing emails or SMS; we only send service-essential notices (billing, security alerts and material policy changes). If we ever send marketing content with your consent, every email will include a one-click unsubscribe link; unsubscribing does not affect service-essential notices.

10. Cross-Border Data Transfers

The Site's servers and partner service providers may be located outside your country or region (primarily Singapore and the regions where our AI providers operate). For cross-border transfers we protect your data through data-processing agreements incorporating Standard Contractual Clauses (SCCs) and by transferring only to recipients with an equivalent level of protection.

11. Protection of Minors

The Service is intended only for users aged 18 or older (consistent with the Terms of Service). We do not knowingly collect personal information from anyone under 18; if you believe a minor has provided us information, contact us immediately and we will delete it promptly.

12. Changes & Contact Us

If this policy changes materially, we will notify you at least 15 days in advance via in-site announcement or your registered email, and update the "Last updated" date on this page. Last updated: 2026-11-12. Privacy contact: [email protected] (unified entry for data-rights requests, privacy inquiries and support).