Privacy Policy

1. Information We Collect

Information you provide:

• Phone number (required to deliver the service)
• Onboarding responses: quit status, smoking history, quit motivation, primary triggers, and time zone — collected via SMS during setup
• Inbound messages you send (e.g., keyword replies like URGE, SLIP, HELP)

Information collected automatically:

• Message delivery status and timestamps (via Twilio)
• Inbound message logs (for service operation and keyword parsing)

We do not collect your name, email, payment information, or device data. We do not use cookies or tracking pixels.

2. How We Use Your Information

We use your data solely to operate the kyndl service:

• Delivering your personalized message sequence based on your quit date and smoking history
• Responding to keyword replies (URGE, SLIP, HELP, STOP)
• Tracking message delivery status and maintaining opt-out records
• Logging milestones and progress events

We do not use your data for advertising, analytics platforms, or marketing to third parties.

3. SMS Messaging & Twilio

kyndl uses Twilio to send and receive SMS messages. Twilio processes your phone number and message content as part of message delivery. Twilio's own privacy policy governs their handling of this data. You can review it at twilio.com/legal/privacy.

We retain inbound message logs (your replies) in our database to operate the service. These are not shared with third parties.

4. Health Information

Some information you provide — such as your smoking history, quit attempts, and personal reasons for quitting — relates to your health. We treat this information with particular care. It is used only to personalize your message sequence and is never sold, shared with advertisers, or disclosed to any third party except as required by law.

5. Data Sharing

We do not sell, rent, or share your personal information with third parties, except:

• Twilio — as our SMS delivery provider (see Section 3)
• Supabase — as our database infrastructure provider, where your data is stored securely
• As required by law — if compelled by a valid legal process

6. Data Retention

We retain your data for as long as your account is active or as needed to provide the service (up to 6 months for program completion). After opting out via STOP, we retain your phone number on a suppression list to honor your opt-out preference, but no further messages are sent.

You may request deletion of your data at any time by emailing hello@kyndl.app.

7. Data Security

Your data is stored in a managed Postgres database hosted on Supabase with access controls and encryption at rest. We use industry-standard practices to protect your information. No system is perfectly secure — if you have concerns, contact us at hello@kyndl.app.

8. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate information
• Request deletion of your data
• Opt out of the service at any time (reply STOP to any message)

To exercise any of these rights, contact us at hello@kyndl.app.

9. California Residents (CCPA)

California residents have the right to know what personal information we collect and how it is used, request deletion of their personal data, and opt out of the sale of their data. We do not sell personal data. To submit a request, email hello@kyndl.app.

10. Children

kyndl is not intended for users under 18 years of age. We do not knowingly collect information from anyone under 18. If you believe we have inadvertently collected such information, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the service after changes constitutes acceptance of the updated policy.

12. Contact

Questions or requests related to this Privacy Policy can be directed to:

Michael Semensi
kyndl
hello@kyndl.app