Kinjay Consumer Health Data Privacy Policy

At a user’s direction, Kinjay may collect:

• name, date of birth, sex recorded at birth, relationship, photo, and profile notes;
• conditions, health history, allergies, medications, supplements, and dose records;
• vital signs, physical measurements, lab observations, and report-provided ranges;
• appointments, immunizations, providers, insurance information, emergency details, contacts, and care notes;
• uploaded laboratory, imaging, prescription, clinical-letter, and other health documents, including their contents and metadata;
• AI-proposed transcriptions, user corrections, source records, and information derived solely to organize or arithmetically compare the user’s records; and
• household ownership, authority attestations, and access/security events associated with health records.

Kinjay does not intentionally collect precise location to infer visits to healthcare facilities, genetic sequence data, or biometric identifiers unless a future feature is separately disclosed and valid consent is obtained first.

Consumer health data comes from:

• you and the forms, choices, corrections, and documents you submit;
• another adult authorized to manage or share a person’s record;
• the contents of uploaded reports and documents;
• approved service providers that store or transcribe information on our behalf;
• agents you explicitly connect that submit readings, documents, or proposed report transcriptions on your behalf; and
• limited technical and security events generated when health-record features are used.

We collect and use consumer health data to:

• provide the record-storage and organization features you request;
• show recorded values and arithmetic changes over time;
• transcribe uploaded lab reports you choose to extract, under your AI approval, and present the proposed values for human review;
• support export and user-directed sharing of copies outside Kinjay;
• fulfill record requests from agents you explicitly connect;
• preserve data lineage and explain the source of displayed information;
• secure the Service, prevent misuse, troubleshoot, and respond to support requests;
• honor access, correction, withdrawal, and deletion requests; and
• comply with law and protect legal rights.

We do not use consumer health data for targeted advertising, data brokerage, employment or insurance decisions, or unrelated profiling. We do not sell consumer health data, and we do not create or disclose de-identified or aggregated health data for third parties.

Depending on your choices, we may share:

• an uploaded lab report, its metadata, and task instructions with the disclosed AI providers when you choose to extract results from that report;
• household members’ names and archive status, document metadata, lab results, vital readings, source references, and record-entry attribution requested by an agent you explicitly connect and its provider;
• account and health information needed by hosting, database, storage, authentication, security, support, communications, and deletion providers acting for us; and
• information required by valid law or necessary to protect rights and safety.

We share only the categories reasonably necessary for the disclosed purpose. Kinjay does not share consumer health data with advertising networks or data brokers.

The categories of recipients are:

• cloud hosting, database, authentication, and private object-storage providers;
• AI document-transcription providers;
• outside agents and their providers that you explicitly approve;
• security, logging, communications, support, and deletion providers;
• payment processors for subscription records that do not require health content; and
• government authorities or transaction counterparties where law permits.

Cloudflare hosts Kinjay’s website and server functions and processes requests needed to deliver and protect them, including health data in requests to health-record features. Supabase provides authentication, the database, and private document storage. For more information, see Cloudflare’s privacy policy and data processing terms, and Supabase’s privacy policy and data processing terms. Kinjay remains responsible for this Policy and your privacy requests.

User-requested lab-report AI transcription runs directly through Google Cloud Gemini, with model processing in the United States. Happlace LLC has no affiliate with which it shares Kinjay consumer health data. We will update this Policy before using a different provider, region, retention arrangement, or data flow when required.

SMS website sign-in uses Twilio separately. It receives your phone number and authentication message, without your saved health records. This sign-in option is available to existing Kinjay messaging accounts.

If you choose Kinjay messaging, LoopMessage processes the messages, files, sender number, and replies needed to deliver that service. Separate messaging approval allows Google Cloud Gemini in the United States to process recent messages and selected records for factual answers and requested record actions. These providers act in Kinjay’s own messaging workflow; they are not the outside agent providers described below. We provide the short consent notice and policy links in chat. Reply AGREE to confirm you are at least 18, accept the Terms, and consent to storing health records and using AI to process messages and reports for your requests. We record this explicit acceptance; continued use alone does not grant consent.

Uploading a report does not request AI transcription. You must request reading, review the original and each proposed result, and explicitly confirm saving. An unnamed account begins with the label “Me”; that label is not evidence of the report patient’s identity, and the assistant does not infer your name from the report.

Kinjay uses at most the last hour and ten conversation exchanges as model context, retaining encrypted processing content only for its short processing period. Saved originals, readings, and consent records remain under their ordinary retention rules. Messaging-provider and Google retention, and copies on your devices, are separate from this context limit. Reply STOP to withdraw messaging approval. Contact privacy@kinjay.com to request deletion or withdrawal of the required account consents. Disconnection cannot recall an original download link or information already delivered.

Kinjay requests clear, affirmative consent before collecting consumer health data and a separate, specific approval for AI transcription. Both are required to use Kinjay; we do not offer a partial version of the Service without them. Transcription runs only when you choose to extract results from a specific report, or when an outside agent you connected requests it for a specific report on your behalf. A report can be uploaded and privately stored without extraction, and results can be entered manually.

Connecting an outside agent is optional and requires a separate sign-in and approval of the requesting client. Kinjay’s AI transcription approval does not authorize that connection. Approval gives the agent household-wide access, including people you add later; there is no read-only or per-person choice. Current tools can read people, document metadata, lab results, vital readings, and their sources, and add readings, original documents, or report-derived proposals for your review. An agent can also ask Kinjay to run AI transcription on a stored report, which sends that report to Google Cloud Gemini as described above and uses 15 household Credits when a usable lab extraction is saved. Transcribed results stay pending until you confirm them; the agent is instructed to show you every result and the original first, and Kinjay relies on the agent to pass on your decision. Medication and supplement records can also be created, edited or deleted, with your confirmation before deletion. Original documents and record links remain subject to Kinjay’s access controls, except that an agent can request a private download link to an original. Anyone holding that link can open the file for one hour, disconnecting does not cancel a link already issued, and the agent and its provider can keep a copy of the file. Connecting does not itself send every record; information is returned when the agent requests it.

The agent and its provider are separate recipients chosen by you. The provider may receive, process, and retain returned health information under its own terms and privacy practices. Review those practices for its purposes of use, processing locations, retention periods, and deletion controls. Kinjay does not set that provider’s retention period or automatically erase its copies. You can disconnect on the Connected agents page while signed in. Disconnecting stops future Kinjay record access and does not end your Kinjay account access, but cannot recall information already received. Use the provider’s controls or contact it to request deletion of its copies.

You may withdraw consent by contacting us as described below. Withdrawal does not change processing already completed lawfully, but it stops the covered future processing after we authenticate and implement the request, and it ends access to signed-in Kinjay features until consent is granted again. When you withdraw, you may also ask us to delete your records, and we will explain what happens to them before completing the request.

Subject to applicable law and authentication, you may request to:

• confirm whether we collect, use, or share your consumer health data;
• access the data, including a list of relevant recipients where required;
• correct inaccurate data;
• withdraw consent and stop covered collection or sharing;
• delete consumer health data from our active systems and instruct applicable processors to delete it, subject to lawful exceptions; and
• appeal a refusal of your request.

You may exercise rights for a person whose record you are legally authorized to manage. We may ask for information necessary to verify identity and authority. We will not discriminate against you for exercising an applicable right.

Email privacy@kinjay.com with the subject “Kinjay Privacy Request” and state whether you seek access, correction, withdrawal, deletion, recipient information, or an appeal. Do not email health documents or detailed diagnoses. We will provide a secure method if supporting information is needed.

We will authenticate the request and explain any denial and available appeal or regulator-contact method. Authorized agents may submit requests where applicable, subject to verification of their authority.

We will respond within 45 days of receiving a verifiable request. If we need more time, we may extend this once by up to 45 additional days where the law allows, and we will tell you why within the first 45 days. If we deny a request, you may appeal by replying to our decision; we will respond to an appeal within 45 days (up to 60 more days where permitted) and explain how to contact your state attorney general if you disagree.

We retain consumer health data while needed to provide the requested record service, until the user deletes the applicable record or asks us to delete the account, or for a shorter disclosed period. A completed deletion removes active data and is propagated to applicable processors. If we keep backup copies, deleted data may remain in them for a limited time until they are overwritten. Separate legal, billing, fraud, and security records are retained only when justified and are not used as active health records.

Disconnecting an agent does not delete records it added to Kinjay. Connection history and record-entry attribution remain under our account, record, and security retention practices. Copies held by an outside agent provider follow that provider’s retention and deletion practices, as described above.

We restrict health-data access to people and processors that need it for the authorized purpose and use safeguards designed to protect confidentiality, integrity, and availability. The general Privacy Policy describes security in more detail. If a security incident affects your information and applicable law requires notice, we will notify you, and any regulators or others the law requires, in the manner and within the time the law requires.

Kinjay does not authorize advertising or analytics providers to collect consumer health data over time across Kinjay’s authenticated pages and unrelated websites. Infrastructure and security providers may process limited technical data to deliver and protect the Service, subject to contract and this policy.

We will update the date shown above when this policy changes. Before collecting, using, or sharing an additional category of consumer health data, or using it for a materially different purpose or undisclosed recipient, we will update the policy and obtain affirmative consent when required. We record policy acknowledgements and their dates.

Contact Happlace LLC at privacy@kinjay.com.