Privacy Policy

What we collect

• Account details (email) and your profile/display info.
• Your questionnaire: interests, desires, aftercare and goals. Your partner does not receive your full questionnaire. Sharing follows the field-level choices and shared activity described below.
• The boundaries you share with a partner (hard and soft limits, triggers and safewords), which are mutually visible so you both know what to respect.
• Check-ins and mood you choose to log.
• Partner messages. These are a private, human-to-human channel; the assistant never reads your messages.
• Proof you submit for creator tasks. Images go to private storage. A person on our moderation team checks each one; after that, only the intended creator can view it, through short-lived links, once any required payment or membership is in place.
• If you are a creator: a new profile photo stays in private storage until our team approves it, and your proposed name, bio and tasks are kept next to the live version until then.
• Payment records via our payment provider; we do not store card numbers.
• Usage data, so we can run and improve the app: which screens and features you use, how often, and where you came from when you signed up. We record activity as event labels (for example "opened points" or "sent a message") and counts, never the content: your task text, chat, answers, limits, and questionnaire are never part of this. These event records are kept for 90 days and are visible only to our own admins, never shared or sold. Creator profile views are counted without storing who viewed.
• Device and push-notification tokens, if you enable notifications.
• Error reports, when something in the app fails: what failed, on which screen, and the browser and device type. Cookies, your IP address and the content of what you write are removed before a report leaves. Reports are kept for up to 90 days.

Launch notifications and landing statistics

If you join the launch list, we save your email, the time and version of your consent, and how you found us: referral domain, campaign labels, approximate country when available, and device category. This helps us send the launch update you requested and understand which sources bring signups. The list is available only to our admins. Joining does not create an account, and we do not verify email ownership at this step.

Landing measurement counts page loads without cookies or a persistent visitor identifier. We do not keep full referral URLs, search terms or raw IP addresses in these records. A temporary, rotating security hash limits repeated requests and is removed after two days. Landing views are removed after 90 days; launch addresses and their source details after one year, or earlier on request. Contact us below to leave the list or request deletion. Design-preview submissions are kept separately from the live list.

How we use it

To run the app, tailor the assistant's guidance to your stated boundaries, process payments, and keep the service safe.

Automatic content check

Before they are sent or saved, messages to the assistant, its replies, text you save in the app (tasks, rules, rewards, notes, labels, your own words, your current goal and memory notes) and text in the creator marketplace (creator profiles and tasks, text proofs and feedback) are checked automatically against our acceptable-use rules. Text the check stops is not sent or saved. Of what it stops we keep only a daily count per category, never the text and never who wrote it. For text that passes, a one-way fingerprint stays with your account for less than an hour, as proof the check ran. Partner messages, daily question answers, check-in notes, the notes you leave when rating a finished task, triggers and aftercare answers are never checked.

Sharing

• With your partner: shared boundaries, coarse profile information such as experience and accountability, tasks, rules, reviews, check-ins and the shared state of enabled tools. Daily-question answers are revealed to each other only after both partners answer that day. Human messages are shared with their recipient, never read by the assistant.
• Your interests, aftercare and goals are not shown to your partner as questionnaire answers. In Discover, a separate choice by both partners can reveal matching interests; it does not reveal either person's full private map.
• For each answer in "Desires in your own words", Settings offers "Only my assistant", "Both assistants" and "Partner too". "Both assistants" is the default: both assistants may use the answer privately, but your partner is not shown the text. "Only my assistant" keeps it with your own assistant; "Partner too" also makes the text visible to your partner. The separate "Use this to shape my tasks" choice allows a privately used answer to influence your tasks, so your partner may recognize its theme. Changing a choice cannot remove text or tasks already shared.
• The assistant can use shared tasks, rules, reviews, check-in mood and enabled tool activity, with the same hidden-date restrictions as the app. Check-in notes and daily-question answers are not part of that shared assistant context.
• With creators: only what you choose to share, or aggregated signals you explicitly opt into.
• With service providers: hosting, payments, error monitoring, and content-safety tools, under contract.
• With authorities: where the law requires, including reports of child sexual abuse material.

Retention & your rights

You can delete your account in Settings, which erases your data, including your photos and voice recordings, except records the law requires us to keep. We keep only what you can use in the app. When a photo is not passed on to a creator, we delete the photo and keep the note of when you sent it and why, so you can see what happened. You can access and correct your information in the app.

Security & contact

Access to your data is restricted by row-level security so people only see what they're meant to. Questions or requests: safety@kinkgpt.com.