1. Introduction

Kinvo ("we," "us," or "our") operates the website kinvophone.com and the Kinvo browser-based international calling service. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our service.

By using Kinvo, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account Information

When you create a Kinvo account, we collect your email address and password (stored securely using bcrypt hashing). If you set up caller ID verification, we also collect the phone number you choose to verify.

2.2 Payment Information

When you purchase credits, payment processing is handled entirely by Stripe. We do not store your credit card number, CVV, or full payment details on our servers. We receive a transaction confirmation and associate the purchased credits with your account.

2.3 Call Data

When you make calls through Kinvo, we collect call metadata including: the destination number dialed, call duration, call start and end times, and the cost of the call. This data is necessary for billing and is displayed in your call history and analytics dashboard.

We do not record or store the audio content of your calls. All calls are encrypted end-to-end using WebRTC SRTP encryption.

2.4 Usage Data

We collect anonymized usage analytics (via PostHog) to improve the service, including pages visited, features used, browser type, and general location (country-level, not precise). We do not sell this data to third parties.

3. How We Use Your Information

We use the information we collect to:

Provide, operate, and maintain the Kinvo calling service
Process credit purchases and maintain your account balance
Display call history and analytics in your dashboard
Send transactional emails (account verification, payment receipts)
Improve the service and fix bugs
Comply with legal obligations

4. Data Sharing

We do not sell your personal information. We share data only with the following third-party services that are necessary to operate Kinvo:

Stripe — Payment processing. Subject to Stripe's Privacy Policy.
Telnyx / Twilio — VoIP call routing. These providers process the destination phone number and call metadata to connect your calls.
PostHog — Anonymized product analytics. No personally identifiable call data is sent to PostHog.

5. Data Security

We take reasonable measures to protect your personal information:

Passwords are hashed using bcrypt and never stored in plaintext
All connections use HTTPS/TLS encryption
Call audio is encrypted end-to-end via WebRTC SRTP
Database access is restricted and credentials are rotated

6. Data Retention

We retain your account information and call history for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required by law to retain certain records (e.g., financial transaction records).

7. Your Rights

You have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your account and associated data
Export your call history data (available via CSV export in your dashboard)

To exercise any of these rights, contact us at abdel@kinvophone.com.

8. Cookies

We use essential cookies for authentication and session management. We also use analytics cookies (PostHog) to understand how the service is used. You can manage cookie preferences through the cookie consent banner shown on your first visit.

9. Children's Privacy

Kinvo is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new "Last updated" date.

11. Contact Us

If you have questions about this Privacy Policy, contact us at: abdel@kinvophone.com