1. Introduction

Kinvo ("we," "us," or "our") operates the website kinvophone.com and the Kinvo browser-based international calling service. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our service.

By using Kinvo, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account Information

When you create a Kinvo account, we collect your email address and password (stored securely using bcrypt hashing). If you set up caller ID verification, we also collect the phone number you choose to verify.

2.2 Payment Information

When you purchase credits, payment processing is handled entirely by Stripe. We do not store your credit card number, CVV, or full payment details on our servers. We receive a transaction confirmation and associate the purchased credits with your account.

2.3 Call Data

When you make calls through Kinvo, we collect call metadata including: the destination number dialed, call duration, call start and end times, and the cost of the call. This data is necessary for billing and is displayed in your call history and analytics dashboard.

We do not record or store the audio content of your calls unless you turn on recording for that call. Call audio is encrypted between your browser and our network using WebRTC SRTP. The final leg to the person you call runs over the public telephone network, like any phone call.

Recordings and transcripts (opt-in, per call). If you switch on "Record call" before dialing, the person you call hears a notice and the recording is stored on servers we operate, visible only to you in your call history until you delete it. If you also buy a transcript, the recording is sent to OpenAI to produce a transcript and a short summary, which we store with the call. Under OpenAI's API terms this data is not used to train their models. Deleting the recording deletes its transcript too.

2.4 Usage Data

We collect anonymized usage analytics (via PostHog) to improve the service, including pages visited, features used, browser type, and general location (country-level, not precise). We do not sell this data to third parties.

We also count visits from our own web server logs, using analytics software we host ourselves, so this data never leaves our servers. If you accept analytics cookies, it gives your browser a random visitor ID (a skald_vid cookie and local storage, kept up to 400 days) so we can tell which pages and sources lead to sign-ups and first purchases. The ID contains nothing about you; if you create an account it is stored with the account. Declining cookies, or a Do Not Track or Global Privacy Control signal, means no ID is set.

3. How We Use Your Information

We use the information we collect to:

Provide, operate, and maintain the Kinvo calling service
Process credit purchases and maintain your account balance
Display call history and analytics in your dashboard
Send transactional emails (account verification, payment receipts)
Improve the service and fix bugs
Comply with legal obligations

4. Data Sharing

We do not sell your personal information. We share data only with the following third-party services that are necessary to operate Kinvo:

Stripe — Payment processing. Subject to Stripe's Privacy Policy.
VoIP carriers — Call routing. Our underlying dual-carrier VoIP providers process the destination phone number and call metadata to connect your calls.
OpenAI — Only for calls you choose to have transcribed: the recording is processed to create the transcript and summary. Subject to OpenAI's Privacy Policy.
PostHog — Anonymized product analytics. No personally identifiable call data is sent to PostHog.

5. Data Security

We take reasonable measures to protect your personal information:

Passwords are hashed using bcrypt and never stored in plaintext
All connections use HTTPS/TLS encryption
Call audio is encrypted between your browser and our network via WebRTC SRTP
Database access is restricted and credentials are rotated

6. Data Retention

We retain your account information and call history for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required by law to retain certain records (e.g., financial transaction records).

7. Your Rights

You have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your account and associated data
Export your call history data (available via CSV export in your dashboard)

To exercise any of these rights, contact us at abdel@kinvophone.com.

8. Cookies

We use essential cookies for authentication and session management. We also use analytics cookies (PostHog, and the self-hosted visitor ID described in section 2.4) to understand how the service is used. You can manage cookie preferences through the cookie consent banner shown on your first visit.

9. Children's Privacy

Kinvo is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new "Last updated" date.

11. Contact Us

If you have questions about this Privacy Policy, contact us at: abdel@kinvophone.com