Privacy Policy
Kiptale is an app for the people you'd text good night: you send a goodnight card, they can leave you something, and your morning gathers what they left with a little about the topics you follow. It also has group plans and rituals, boards for places you want to go, chat, and an optional food tracker. This page says what we collect, why, who else sees it, and what happens when you leave. We don't sell your data, we don't show ads, and we use no third-party analytics or tracking tools.
What we collect, and why
Your account
- Name and email. When you sign in with Apple, Apple gives us your name and email address (or a private relay address, if you choose that).
- Phone number. You verify it by text; friends find you by it. Twilio sends the verification code.
- Profile photo and pronouns, if you add them. Your profile photo can be seen by anyone who has your profile link.
- Settings: bedtime, wake time, time zone, alarm and sound choices.
The people you add
When you add someone, we store the name and phone number you give us. If you pick them from your contacts, Apple's contact picker hands us only the one person you tap; we never read your address book. We also keep who you're connected with and anyone you've blocked.
What you create and share
- Photos and voice notes you leave for someone, add to a ritual or a chat, put on a board, or send with a card.
- Messages in plan chats, ritual chats and comment threads, and the notes and links you leave.
- Plans, rituals, polls, boards and calendar entries, and the places you pin.
- Topics you follow, including any you type yourself.
- Words you dictate. Your iPhone turns speech into text on the device where it can, or with Apple's speech service where it can't. We don't keep the recording.
Health and food
- Apple Health stays on your phone. If you allow it, Kiptale reads your sleep, steps, active minutes, active calories and workouts to show them in your morning recap. None of it is ever sent to us or anyone else, and it never appears on a card.
- The food tracker is stored with us, if you use it: the foods you log and their calories, protein, carbs, fat, fiber, sugar and sodium; foods you save; your daily totals; your weight log; and what you tell us to set a calorie goal (height, weight, goal weight, age, sex, activity level and how fast you'd like to go) and your protein goal.
- If you choose to put a goal you hit on a card ("hit their protein goal", "stayed on plan"), the people you send that card to see it. They never see a number.
Location
Only when you choose to set or move a meeting place, for example "use where I am" for a group ritual. That place is shared with the people in it. Once you've allowed location, the app may use your last known position on your phone to show nearby places first when you search; that search goes to Apple Maps, not to us.
How you use the app
Records the app needs to work: when you last opened it, which mornings you've opened, which messages you've seen in a plan's chat, which version of the app you're on, and whether our notifications were delivered. They're linked to your account and used only to run the app and fix what breaks — never for advertising, and never shared with an analytics company.
Purchases
Apple handles every payment; we never see your card. Apple tells us whether your subscription is active, and we keep that record.
Who else sees it
- The people you share with. Your cards, what you leave for someone, and what you add to a ritual, plan, chat or board are seen by the people in it. Some of these work by link (a card, a ritual's page, a board's page), and anyone you or they forward that link to can see what it shows.
- Anthropic provides the AI that runs parts of Kiptale. It receives:
- every photo left for someone's morning, a reveal or a ritual, to check it's suitable before anyone sees it;
- a food-label photo, to read the nutrition (we don't keep the photo);
- your name, pronouns and the goal facts you choose, to help write your cards;
- the text of places, links and calendar questions, and words you dictate into a plan, to understand them;
- the recent messages in a plan's chat, to help settle the plan, with each person shown only as "Person A", "Person B" and so on — never by name.
- Twilio receives your phone number to send the verification code.
- Expo and Apple deliver our notifications. A notification can include a name: the name the person receiving it saved for the sender.
- Apple Maps receives place searches.
- twitterapi.io receives the topic phrases you follow, to find posts about them.
- Supabase hosts our database and storage, on Amazon Web Services in the United States (us-west-1).
We don't sell or rent your information, and we don't share it for advertising.
Deleting your account
Settings → Delete account removes your account immediately. One rule decides what happens: what you gave to other people stays with them, with your identity removed; what is only yours goes.
| Deleted | Your profile (name, phone, photo, settings), your sign-in with us and your sessions, your contacts, topics, mornings, cards, calendar entries, connections, health and food logs, boards, notification tokens and our subscription record. Photos and voice notes belonging to deleted items are removed from storage by a daily clean-up. |
|---|---|
| Stays with others, without your name | What you gave other people: photos, notes, messages and voice notes in rituals, plans and chats, things you left in someone's morning, and text you added to someone's board. These show as "A former member", with your name, phone and account link removed. Plans, rituals and polls you started pass to someone still in them. In a comment thread, your side is deleted and the other person's words stay. |
| Not yours to delete | Other people's own records of you: your name and number in their contacts, and on an invitation they sent before you joined. |
| Backups and logs | Daily database backups keep deleted data for about 7 days before it's gone for good. Server logs are kept for about 7 days. Anonymous usage and billing counts are kept without your name. |
| Your subscription | Deleting your account doesn't cancel an App Store subscription — Apple keeps billing until you cancel it in your Apple ID settings. The app reminds you of this before you delete. |
| Our providers | Twilio, Expo and Anthropic keep what they processed for us under their own retention terms. |
Your choices
- Health, location, camera, photos, microphone, speech, calendar and notifications are each optional, can be turned off in your iPhone's Settings at any time, and are asked for only when you use the feature that needs them.
- You can see and change your profile, people and topics in the app, and delete your account there. To ask for a copy of your data, or anything else on this page, write to hello@kiptale.com.
Age
Kiptale is for people 18 and over. We don't knowingly collect information from anyone younger; if we learn we have, we delete it.
Changes
If this policy changes, we'll update the date at the top, and tell you in the app if the change matters.