Privacy Policy

1. Information We Collect

Information you provide:

• Phone number (used to deliver SMS coaching and, on the web, to verify you and let you return without a password)
• Onboarding responses: quit status, tobacco/nicotine use history, quit motivation, primary triggers, and time zone — collected via SMS or the web chat during setup
• The content of messages you send — your SMS replies (including keyword replies like URGE, SLIP, HELP) and the messages you send to a web coach

Information collected automatically:

• Message delivery status and timestamps (via Twilio, for SMS)
• Message logs and progress events (for service operation, keyword parsing, and personalizing your coaching)
• Standard technical information generated when you use the website (such as request logs held by our hosting providers)

We do not collect your name, email address, or payment information. To keep your coaching continuous, kyndl sets one first-party cookie named kyndl_guest_id. It holds a single randomly generated identifier (a UUID) and nothing else: no name, email, or personal data. Its only purpose is so your coach remembers you across visits. It is the same identifier whether you use the web chat or onboarding, so you are one person to kyndl rather than two separate records. This cookie is first-party only. It is never sent to any third party, and it is not used for advertising, analytics, or cross-site tracking. kyndl uses no third-party advertising or tracking pixels.

2. How We Use Your Information

We use your data solely to operate the kyndl service:

• Delivering your personalized SMS coaching based on your quit date and history
• Generating responses from your chosen web coach during a conversation
• Responding to keyword replies (URGE, SLIP, HELP, STOP)
• Tracking message delivery status and maintaining opt-out records
• Logging milestones and progress events to personalize your support

We do not use your data for advertising, third-party analytics platforms, or marketing to third parties.

3. SMS Messaging & Twilio

kyndl uses Twilio to send and receive SMS messages. Twilio processes your phone number and message content as part of message delivery. Twilio's own privacy policy governs their handling of this data. You can review it at twilio.com/legal/privacy.

We retain inbound message logs (your replies) in our database to operate the service. These are not shared with third parties except as described in this policy.

4. AI Coaching & Anthropic

Our web-based coaches (Sol, Sarge, and Sage) are powered by Anthropic's Claude AI. When you chat with a web coach, the content of your messages — along with relevant context such as your quit progress — is sent to Anthropic's API to generate the coach's response. We receive the response and show it to you.

Anthropic processes this content to generate responses on our behalf. Anthropic's handling of data is governed by its own privacy terms, which you can review at anthropic.com/legal/privacy. We store your conversations in our own database to provide continuity in your coaching.

5. Voice Input (Optional)

The web chat may offer an optional voice-input feature that lets you speak a message instead of typing it, for accessibility and convenience. You can always type your message instead.

When you use voice input, your device's web browser converts your speech into text. Depending on which browser you use, this conversion may be performed by your browser provider's own speech-recognition service rather than entirely on your device — for example, Google Chrome sends the audio to Google for processing. The transcribed text is what kyndl receives, and we treat it like any other message you send. kyndl does not separately record, store, or transmit the audio of your voice. To understand how your browser handles voice audio, please review your browser provider's privacy policy.

6. Health Information

Some information you provide — such as your tobacco or nicotine use history, quit attempts, personal reasons for quitting, and what you share in coaching conversations — relates to your health. We treat this information with particular care. It is used only to personalize and deliver your coaching and is never sold, shared with advertisers, or disclosed to any third party except the service providers described in this policy or as required by law.

7. Data Sharing

We do not sell, rent, or share your personal information with third parties, except with the service providers that operate kyndl on our behalf:

• Twilio — our SMS delivery provider (see Section 3)
• Anthropic — the AI provider that powers our web coaches (see Section 4)
• Supabase — our database infrastructure, where your data is stored securely
• Web hosting and infrastructure providers — that operate our website and backend systems
• As required by law — if compelled by a valid legal process

These providers process your information only to provide their service to us and are not permitted to use it for their own purposes beyond what their terms allow.

8. Data Retention

We retain your data for as long as your participation is active or as needed to provide the service (up to 6 months for program completion). After you opt out via STOP, we retain your phone number on a suppression list to honor your opt-out preference, but no further proactive messages are sent.

You may request deletion of your data at any time by emailing hello@kyndl.app.

9. Data Security

Your data is stored in a managed Postgres database hosted on Supabase with access controls and encryption at rest. We use industry-standard practices to protect your information. No system is perfectly secure — if you have concerns, contact us at hello@kyndl.app.

10. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate information
• Request deletion of your data
• Opt out of SMS at any time (reply STOP to any message)

To exercise any of these rights, contact us at hello@kyndl.app.

11. California Residents (CCPA)

California residents have the right to know what personal information we collect and how it is used, request deletion of their personal data, and opt out of the sale of their data. We do not sell personal data. To submit a request, email hello@kyndl.app.

12. Children

kyndl is not intended for users under 18 years of age. We do not knowingly collect information from anyone under 18. If you believe we have inadvertently collected such information, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the service after changes constitutes acceptance of the updated policy.

14. Contact

Questions or requests related to this Privacy Policy can be directed to:

Michael Semensi
kyndl
hello@kyndl.app