Privacy Policy

Last Updated: June 27, 2024

1. Introduction

Welcome! This Privacy Policy explains how Soul AI LLC ("we," "us," or "our") collects, uses, and shares information when you use Kindred AI, including our website and iOS applications (the "App" or "Apps").

Your privacy is important to us. This policy outlines our practices and your rights concerning your information. By using our services, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Information You Provide Directly

When you register for Kindred AI, we collect information that you voluntarily provide, including:

• Personal Information: Name, email address, phone number
• Family Information: Family size, children's ages, location (city)
• Preferences: Activity interests and family preferences
• Communications: Messages you send us through contact forms or support
• Email Address: Used for account creation, login, password recovery, and essential service-related communications

Information Processed via Third Parties

Payment Information (via Apple): If you make any purchases within the App (e.g., subscriptions, one-time purchases), these are processed directly by Apple through their secure In-App Purchase system. We do not collect, receive, or store your credit card details or other sensitive payment information. Apple's processing of your payment information is governed by Apple's own Privacy Policy.

Large Language Model (LLM) API Interactions (OpenAI): To provide the core functionality of the App, your inputs (e.g., text prompts you enter) are sent to our third-party Large Language Model API provider, OpenAI. We send your input to the OpenAI API solely to generate the response you requested within the App. According to OpenAI's current usage policies, data submitted via their API is not used to train their models unless explicitly opted into.

Information We Collect Automatically

When you visit our website or use our App, we may automatically collect:

• Usage Data: Pages visited, time spent, clicks, navigation patterns, frequency of app launch, feature interaction
• Device Information: Browser type, operating system, screen resolution, device type (e.g., "iPhone 14"), iOS version
• Location Data: General geographic location based on IP address
• IP Address: Primarily for security, geographic region estimation, and diagnostics
• Crash Reports: Anonymized or pseudonymized data about app crashes for identifying and fixing bugs
• Cookies and Tracking: Small files stored on your device for functionality and analytics

3. How We Use Your Information

We use the information we collect for the following specific purposes:

• Provide Our Service: Create your family profile and deliver personalized activity recommendations
• Enable Core Features: Sending your inputs to the OpenAI API to generate responses
• Improve Our Platform: Analyze usage patterns to enhance user experience and develop new features
• Communicate With You: Send service updates, respond to inquiries, provide customer support, and essential service-related communications
• Marketing: With your consent, send promotional materials about new features and services
• Security and Fraud Prevention: Using IP addresses or device information to monitor for suspicious activity
• Legal Compliance: Meet legal obligations and protect against fraud or abuse

Legal Basis for Processing (GDPR)

• Processing your email for account management is based on the Performance of a Contract
• Processing your inputs via the OpenAI API is based on the Performance of a Contract
• Processing technical data for functionality, security, and basic improvement is based on our Legitimate Interest

4. Information Sharing and Disclosure

We may share your information only in these limited circumstances:

• LLM API Provider (OpenAI): Your inputs are sent to their API to generate responses. Their handling of this data is governed by their policies.
• Apple: For processing In-App Purchases as described above.
• Service Providers: Trusted third parties who help us operate our service (hosting, analytics, customer support, crash reporting)
• Legal Requirements: When required by law, court order, or to protect our rights and safety
• Business Transfers: In the event of a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly agree to share information for a specific purpose

5. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: All data is encrypted in transit and at rest
• Access Controls: Limited access to personal data on a need-to-know basis
• Regular Audits: Periodic security assessments and vulnerability testing
• Secure Infrastructure: Hosting with reputable providers with strong security practices

6. Children's Privacy

Kindred AI is designed for families, but we do not knowingly collect personal information from children under 13 (or 16 in some jurisdictions like the EEA) without parental consent. Parents control all information about their children in family profiles.

If you believe we have inadvertently collected information from a child under 13, please contact us immediately so we can delete such information.

7. Your Privacy Rights

You have several rights regarding your personal information:

• Access: Request a copy of the personal information we have about you
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your personal information
• Portability: Request your data in a portable format
• Opt-Out: Unsubscribe from marketing communications at any time
• Object (GDPR): Object to processing based on legitimate interests under certain circumstances
• Restrict Processing (GDPR): Request that we restrict the processing of your information under certain conditions
• Non-Discrimination: We will not discriminate against you for exercising your privacy rights

To exercise these rights, please contact us using the information provided below.

8. Data Retention

We retain your email address (if collected) for as long as your account remains active. If you delete your account, we will delete your email address from our active systems within a reasonable timeframe, subject to backup retention cycles or legal requirements.

Technical logs (like IP addresses or crash data) are typically retained for a shorter period (e.g., 30-90 days) necessary for security, diagnostics, and troubleshooting.

Data processed by third parties (Apple, OpenAI) is subject to their respective retention policies.

9. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Remember your preferences and settings
• Analyze website traffic and user behavior
• Provide personalized content and recommendations
• Improve site performance and functionality

You can control cookies through your browser settings, but some features may not work properly if cookies are disabled.

10. Third-Party Services

Our website may contain links to third-party websites or integrate with third-party services. This privacy policy does not apply to those external sites or services. We encourage you to review their privacy policies before providing any information.

11. International Data Transfers

Your information may be processed and stored in countries other than your own. We ensure appropriate safeguards are in place to protect your information in accordance with this privacy policy. For example, OpenAI API servers or our hosting infrastructure may be located in the United States. We rely on the data processing agreements and safeguards provided by our third-party providers for such transfers where required by law.

12. Apple App Store Requirements Alignment

This Privacy Policy aligns with the information provided in the App Privacy section of our App Store listings. Payments are handled securely via Apple's In-App Purchase system. Any permissions requested by the app (e.g., notifications) will use the standard iOS permission prompts, which you can manage in your device Settings.

13. Changes to This Privacy Policy

We may update this privacy policy from time to time. We will notify you of significant changes by:

• Posting the updated policy on our website
• Sending you an email notification (for material changes)
• Updating the "Last Updated" date at the top of this policy

14. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect and how it's used
• Right to delete personal information (with certain exceptions)
• Right to opt-out of the sale of personal information (we don't sell data)
• Right to non-discrimination for exercising your privacy rights

15. European Privacy Rights

If you are in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Legal basis for processing your data
• Right to object to certain types of processing
• Right to restrict processing in certain circumstances
• Right to lodge a complaint with your local data protection authority

16. Limitation of Liability

PRIVACY LIABILITY LIMITATION: SOUL AI LLC SHALL NOT BE LIABLE FOR ANY DAMAGES, LOSSES, OR HARM ARISING FROM:

• Unauthorized access to or disclosure of personal information
• Data breaches or security incidents
• Loss or corruption of user data
• Third-party data processing or storage
• Compliance with privacy laws or regulations
• Any claims related to children's privacy or COPPA compliance

MAXIMUM LIABILITY: NOTWITHSTANDING ANYTHING TO THE CONTRARY CONTAINED HEREIN, SOUL AI LLC'S LIABILITY TO YOU FOR ANY PRIVACY-RELATED CAUSE WHATSOEVER AND REGARDLESS OF THE FORM OF THE ACTION, WILL AT ALL TIMES BE LIMITED TO THE AMOUNT PAID, IF ANY, BY YOU TO US DURING THE SIX (6) MONTH PERIOD PRIOR TO ANY CAUSE OF ACTION ARISING.

17. Contact Information