Privacy policy

Kinesis is operated by YOUR LLC (“we”, “us”). This policy explains what information Kinesis collects, how it is used and shared, and the choices you have. It covers the Kinesis web app at kinesis.yo-ur.com (formerly kenesis.yo-ur.com) and the Kinesis desktop apps that connect to it.

Information we collect

• Recordings and transcripts. Audio you record or import, the transcripts made from it, and the tasks, notes, people, and other items extracted from those transcripts.
• Account and sign-in data. Passkey credentials and session cookies used to keep you signed in.
• Google user data. If you connect a Google account, we access your Gmail messages, threads, labels, and basic account information (your email address) through the Gmail API.
• Feedback and diagnostics. Feedback you choose to send, and error logs needed to keep the service running.

How we use Google user data

Kinesis requests the Gmail scope that lets it read, organize, and send email on your behalf. We use that access only to provide features you can see and control in the app:

• showing your inbox, threads, and messages;
• archiving, labeling, marking read or unread, and otherwise organizing messages when you ask;
• sending the emails and replies you write or approve;
• drafting suggested replies in your voice, which you review before sending;
• saving an email to your Kinesis list as a task or note when you choose to capture it.

Kinesis's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular, we do not:

• sell Google user data, or use or transfer it for advertising, including personalized or retargeted ads;
• use Google user data to determine creditworthiness or for lending purposes;
• use Google user data to develop, improve, or train generalized or non-personalized AI or machine-learning models;
• allow humans to read your Google user data, except with your explicit consent for specific messages, when necessary for security purposes such as investigating abuse, to comply with applicable law, or when the data has been aggregated and anonymized for internal operations.

AI features

When you ask Kinesis to draft a reply, the relevant thread and a small sample of your previously sent messages (used to match your writing style) are sent to Anthropic's Claude API to generate the draft. Anthropic processes that content only to return the draft, under commercial terms that do not permit training its models on it. Transcripts of your recordings are processed the same way to extract tasks and notes. Drafts are never sent without your action.

How we store and protect data

Google OAuth tokens and Gmail content are stored on the device where you connect your account, in a private directory readable only by your user, and are never included in responses to the app's interface. Recordings, transcripts, and captured items are stored on our servers. All data in transit is encrypted with TLS. Access to the service requires your passkey or password.

If you use mail routing, the app passwords for the mailboxes you connect are stored on our server, encrypted, with the key kept apart from the database. They are used only to sign in to those mailboxes and copy new messages along the routes you set up. Messages pass through our server while they are copied and are not kept there. Removing a mailbox from Kinesis deletes its stored password, and you can revoke the app password with your mail provider at any time.

How we share data

We do not sell your data. We share it only:

• with service providers that run features on our behalf (Anthropic for AI processing, and our hosting provider), bound to use it only to provide those features;
• when you direct us to, such as sending an email you wrote;
• when required by law, or to protect the rights, safety, and security of users and the service;
• as part of a merger, acquisition, or sale of assets, subject to this policy.

Retention and deletion

We keep your data while your account is active. Cached Gmail content and reply drafts are kept only as long as needed to show them to you. You can revoke Kinesis's access to a Google account at any time from your Google account permissions; once revoked, the stored tokens stop working and Kinesis can no longer read or send your mail. To delete your account and everything associated with it, email zf@yo-ur.com and we will delete it within 30 days.

Your choices

You can access, correct, export, or delete your data by contacting us. Connecting a Google account is optional; the rest of Kinesis works without it.

Children

Kinesis is not directed to children under 13, and we do not knowingly collect their data.

Changes

If we change this policy, we will update the effective date above. If we change how we use Google user data, we will ask for your consent before doing so.

Contact

Questions about this policy or your data: zf@yo-ur.com. See also our terms of service.