Kinjay Privacy Policy

Depending on how you use Kinjay, we collect:

• Account information: name, email address, authentication identifiers, account settings, and subscription status.
• Household and authority information: the private household associated with your account, relationship to a managed person, authority attestations, and associated timestamps.
• Consumer health data: profile details, health history, conditions, medications, allergies, doses, vital readings, lab results, appointments, immunizations, providers, insurance information, emergency details, care notes, and documents you upload.
• Document and provenance information: filenames, document dates and types, issuing organization, extracted text and numbers, source links, corrections, reviewer identity, and processing-provider/model metadata.
• Activity information: record changes and security or access events where available.
• Connected-agent information: the identity of an agent client you approve, connection and disconnection times, and agent attribution on records it adds.
• Technical and support information: IP address, browser/device details, timestamps, diagnostic and security logs, and communications you send to us.

We receive information directly from you; from documents you choose to upload; from authentication, hosting, storage, security, payment, and AI transcription providers; from your browser or device; and from people who contact us about an account, authorization, or support issue. If you connect an agent, we also receive readings, documents, and proposed report transcriptions that it submits on your behalf.

We use information to:

• create, authenticate, and secure accounts and households;
• store, organize, display, compare, export, and share records as requested;
• authorize, manage, and fulfill requests from agents you explicitly connect;
• transcribe uploaded lab reports and preserve their source and review history;
• manage private account access, subscriptions, and customer support;
• detect misuse, investigate incidents, maintain backups, and improve reliability;
• comply with law and enforce our agreements; and
• analyze public-site performance using privacy-minimized data that is kept separate from authenticated health-record activity.

We do not use health information for targeted advertising, build advertising audiences from it, or sell personal or consumer health data.

We do not create, sell, license, or disclose de-identified or aggregated health data for research, marketing, or any third-party purpose. Operational statistics that contain no health information, such as counts of accounts or public-page visits, are not health data. Before any change to this practice, we will update this policy, obtain consent where required, keep such data in de-identified form, not attempt to re-identify it, and contractually prohibit recipients from re-identifying it.

Website sign-in codes are delivered separately by SMS through Twilio. Twilio receives your phone number and authentication message, rather than your saved health records. Stopping SMS delivery to that sender can prevent future codes from arriving.

If you use Kinjay messaging, LoopMessage carries your phone number, messages, files, and our replies. With your separate messaging approval, Google Cloud Gemini processes the recent conversation and selected records needed to answer factual questions and carry out your requests, with model processing in the United States. This is Kinjay’s own assistant, Jay, rather than an outside agent provider you connect through OAuth.

A new messaging account does not require a name. Your sender number connects to a server-held session; a number associated with an existing account requires support verification before messaging is enabled. Possession of a number is not permanent proof of identity: phone takeover or reassignment can affect account access.

Conversation context is limited to the last hour and ten exchanges. Kinjay encrypts its message jobs, conversation, and session credentials; expired conversation content is excluded immediately and cleaned periodically. Short-lived processing jobs may contain incoming content before onboarding finishes, but it is not sent to Google or saved as health records before consent. Saved records and consent evidence have their own retention periods. Short context does not erase copies on your device or held by your messaging provider or Google under their applicable arrangements.

Reply STOP to withdraw messaging approval and stop future messaging record access. This does not delete saved records or recall files and links already delivered. Contact privacy@kinjay.com for withdrawal, deletion, or account recovery requests. Policy links and a short consent notice are provided in chat. Reply AGREE to confirm you are at least 18, accept the Terms, and consent to storing health records and using AI to process messages and reports for your requests. Continued use alone does not grant health-data or AI permission.

We disclose information only as needed in these circumstances:

• At your direction: to people who receive an exported file you provide.
• Connected agents: to an agent you explicitly approve and its provider, in response to requests made through that connection. This can include household members’ names and archive status, document metadata, lab results, vital readings, source references, and record-entry attribution. These outside providers are separate recipients chosen by you, rather than Kinjay’s own AI transcription provider.
• Service providers: to approved companies that provide authentication, hosting, database, storage, security, communications, payments, support, AI document transcription, and public-page analytics under applicable terms and contracts. Our analytics provider, Google, receives public-page visit information only, as described in section 11, and never health records or account activity.
• Legal and safety: when required by valid legal process or reasonably necessary to protect rights, safety, and the integrity of the Service, subject to applicable law.
• Business transactions: as part of a merger, financing, acquisition, reorganization, bankruptcy, or transfer of assets, with notice and protections required by law.

Cloudflare hosts Kinjay’s website and server functions and processes request and security information needed to deliver them. Requests to health-record features may include health data. Supabase provides account authentication, the database, and private document storage, so it stores account and health-record information. For more about these providers, see Cloudflare’s privacy policy and data processing terms, and Supabase’s privacy policy and data processing terms. Kinjay remains responsible for the practices described in this Policy and for your privacy requests.

Happlace LLC has no affiliate with which it shares Kinjay consumer health data.

When you choose to extract results from a lab report, or an outside agent you connected requests it for a specific report on your behalf, Kinjay sends the report, its file type, and a transcription instruction directly to Google Cloud Gemini for model processing in the United States. The provider returns proposed document fields and lab values. Kinjay records provider and model information, and a person must review the proposal before extracted observations are saved.

Agreeing to AI transcription is a condition of using Kinjay; we do not offer a version of the Service without it. Transcription runs only when you choose to extract results from a specific report, or when an outside agent you connected requests it for a specific report on your behalf. You may upload and privately store a report without extracting it, or enter results manually. We do not use the feature to diagnose, recommend treatment, or make solely automated decisions with legal or similarly significant effects. Withdrawing your AI approval ends access to signed-in Kinjay features until you grant it again.

Household records are private to your signed-in account and agents you explicitly connect. You may save a record as a PDF or download an original source document and provide the file yourself. Exports are under your control after download; Kinjay cannot revoke or erase copies made outside the Service.

Connecting an agent is optional and separate from Kinjay’s required AI transcription approval. Before connecting, you sign in and approve the requesting client. Approval gives it household-wide access, including people you add later; there is no read-only or per-person choice. Current tools can read people, document metadata, lab results, vital readings, and their sources, and add readings, original documents, or report-derived proposals for your review. An agent can also ask Kinjay to run AI transcription on a stored report, which sends that report to Google Cloud Gemini as described above and uses 15 household Credits when a usable lab extraction is saved. Transcribed results stay pending until you confirm them; the agent is instructed to show you every result and the original first, and Kinjay relies on the agent to pass on your decision. Medication and supplement records can also be created, edited or deleted, with your confirmation before deletion. Original documents and record links remain subject to Kinjay’s access controls, except that an agent can request a private download link to an original. Anyone holding that link can open the file for one hour, disconnecting does not cancel a link already issued, and the agent and its provider can keep a copy of the file. Connecting does not itself send every record; information is returned when the agent requests it.

Your agent’s provider may receive, process, and retain information returned through the connection under its own terms and privacy practices. Review those practices for its purposes of use, processing locations, retention periods, and deletion controls. Kinjay does not set that provider’s retention period or automatically erase its copies. You can disconnect an agent on the Connected agents page while signed in. Disconnecting stops future Kinjay record access, but cannot recall information already received. Use the provider’s controls or contact it to request deletion of its copies.

We retain active account and health-record information while the account or managed record remains active, unless a shorter period is disclosed or required. When deletion is completed, information is removed from active systems and applicable providers, subject to verification and limited exceptions.

Disconnecting an agent does not delete records it added to Kinjay. Connection history and record-entry attribution remain under our account, record, and security retention practices. Copies held by an outside agent provider follow that provider’s retention and deletion practices, as described above.

If we keep backup copies, deleted information may remain in them for a limited time until they are overwritten. We may separately retain limited billing, tax, fraud-prevention, security, dispute, or legal-compliance records where required or reasonably necessary. Security logs are retained only as reasonably necessary for the purposes described in this Policy.

We use administrative, technical, and physical safeguards designed for the sensitivity of the information, including encrypted transmission, access controls, authentication, private object storage, row-level database authorization, and security monitoring. No system is perfectly secure, and we cannot guarantee absolute security.

If a security incident affects your information and applicable law requires notice, we will notify you, and any regulators or others the law requires, in the manner and within the time the law requires.

Subject to verification and applicable exceptions, you may ask to access, obtain, correct, or delete information; withdraw consent; obtain information about collection and sharing; or appeal a denied request. In the Service you can view, correct, and delete individual entries and people, and save a person’s record as a PDF. Less common requests are handled by email, including deleting your entire account or household, withdrawing consent, and other privacy requests.

Submit a request to privacy@kinjay.com. We may request information reasonably necessary to authenticate you and protect the person whose record is involved. We will not discriminate against you for exercising an applicable privacy right.

We will respond within 45 days of receiving a verifiable request. If we need more time, we may extend this once by up to 45 additional days where the law allows, and we will tell you why within the first 45 days. If we deny a request, you may appeal by replying to our decision; we will respond to an appeal within 45 days (up to 60 more days where permitted) and explain how to contact your state attorney general if you disagree.

Kinjay accounts are for adults. An authorized adult may maintain a child’s record, but a child may not create or operate an account. If we learn that a child created an account or submitted account information directly, we will take appropriate steps to remove it.

Authentication and security technologies may be necessary to operate the Service. Any analytics or advertising technology used on the public marketing site must not receive health-record content, authenticated activity, email addresses, or family-link tokens. Kinjay does not permit third parties to track authenticated health activity across unrelated websites for advertising.

We use Google Analytics 4 on our public pages only—the home page and these legal policies—to count visits and see which pages people read. On those pages Google sets cookies and receives the page address without any query string, the page title, your approximate location derived from a truncated IP address, and general browser and device information. Google acts as our service provider for this measurement.

Analytics does not run on the sign-in page, anywhere inside a signed-in account, on upload or review screens. It is switched off for anyone who is signed in, and we have disabled Google’s advertising and cross-site personalization features, so this measurement is not used to build advertising audiences and is not a sale or a share of personal information. If your browser sends a Global Privacy Control or Do Not Track signal, we do not measure your visit at all. A browser-level cookie or script blocker also prevents it.

Kinjay is intended for the United States. Information may be processed where our approved service providers operate, subject to their contracts and applicable law. We keep our provider and transfer disclosures consistent with the services we use.

We will update the date shown above when this policy changes and provide additional notice or obtain consent before a material new health-data category, purpose, or recipient is introduced when required. We record policy acknowledgements and their dates.

Account and service emails. We send emails you need to use the Service, such as sign-up confirmation, password reset, security alerts, billing notices, and changes to our Terms or policies. You cannot turn these off while you have an account.

Product and marketing emails. We may occasionally email account holders about new features, tips, and offers from Kinjay. Each includes an unsubscribe link, and unsubscribing does not affect account emails. We do not use your health records or health-related activity to select or personalize marketing, and we do not share your email address with other companies for their marketing.

Contact Happlace LLC at privacy@kinjay.com.