Privacy Policy

1. Information We Collect

1.1 Information you give us directly

• Account data: email, display name, profile photo (optional), phone number (optional), date of birth (used for the age gate only).
• Authentication data: if you sign in with Apple or Google, we receive the identifier and basic profile fields those providers share — never your password.
• Orbits and events: names, descriptions, and membership of the Orbits and events you create or join.
• Places and messages: places you save or share with an Orbit, messages in Orbit chats, event details you post.
• Emergency contacts: the people you add to your SOS list.
• Contacts (optional): if you invite someone from your address book, we only process the specific contact you select. We do not upload your entire address book.
• Support correspondence: if you email us, we keep that message and our reply.

1.2 Information collected automatically

• Location data: current position (latitude, longitude, accuracy, heading, speed, altitude, battery level, moving/stationary state) when sharing is on.
• Location history: retained for a limited window (see Section 7 for retention periods).
• Stationary visits: when the app detects you have been in one place, it records arrival and departure times so labels like “at home since 2 hours ago” can be shown without constant uploads.
• Device and usage data: device model, OS version, app version, unique device identifier, crash logs, aggregated usage events.
• Push notification tokens: issued by Apple or Google so we can deliver notifications to your device.

1.3 What we do NOT collect

• Sensitive categories — political opinions, religious beliefs, racial or ethnic origin, sexual orientation, genetic or biometric data.
• Content of your device outside Kenvii (messages in other apps, photos, files).
• Data purchased from data brokers.
• We do not sell personal information.

2. How We Use Your Information

We use your information to:

• Share your location with family and Orbit members you have approved.
• Deliver SOS alerts to your emergency contacts and override Privacy Mode during an active SOS alert.
• Keep the service secure and prevent abuse.
• Improve and personalize the product via aggregated analytics and crash diagnostics.
• Communicate important updates about the app.
• Respond to your support requests.

3. Legal Bases for Processing (GDPR / UK GDPR)

If you are in the EU, UK, or EEA, we process your information under one or more of these legal bases:

You can withdraw consent at any time. Withdrawal does not affect processing that already happened lawfully.

4. Location Data

Location sharing is a core feature of Kenvii. You have full control over:

• Who can see your location (only approved family and Orbit members).
• When to share your location (you can pause sharing anytime via Privacy Mode).
• Location history retention (you can delete your history).
• Privacy Zones: Designate places (like Home or Work) where your exact location is hidden — others only see a label such as “at Home”.
• Temporary Sharing: Share location for limited time periods (1 hour, 4 hours, 1 day, 1 week) with automatic expiration.

Your location is only visible to family and Orbit members you have explicitly approved. We do not sell or share your location data with third parties for advertising purposes.

5. Data Security

We protect your information with:

• Encryption in transit (TLS 1.2+) and at rest (AES-256, Firebase default).
• Authentication and authorization on every backend request.
• Server-side access rules that restrict who can read your location to your Orbits and SOS contacts.
• Rate limits on sensitive actions (login, invitations, SOS triggers).
• Regular security audits and timely updates.

No security measure is perfect. If we learn of a breach affecting your personal data, we will notify you as required by applicable law.

6. Data Sharing

We do not sell your personal information. We share data only in these situations:

6.1 Other Kenvii users

• Members of your Orbits: see your display name, photo, and — when sharing is on — your live and recent location.
• Your SOS contacts: always appear in your contact list and see your live location during an active SOS alert, even if you had Privacy Mode on.
• Invitees: see the inviter's name and the Orbit or event name when they receive an invitation.

6.2 Service providers we rely on

Each provider is contractually bound to process data only on our instructions. Some are located outside your country (see Section 11).

6.3 Legal and safety disclosures

We may disclose information if reasonably necessary to comply with applicable law, protect user safety in a life-threatening situation, investigate fraud or abuse, or enforce our Terms of Service. We will notify affected users when legally permitted.

7. How Long We Keep Your Information

Note on viewing history: How far back you can view your location history in the app, and how long we keep it on our servers, both depend on your subscription tier. You can download all retained data at any time via Settings → Export My Data.

When you delete your account, we delete the above within 30 days, except where law requires longer retention (for example, tax or fraud records).

8. Your Rights

You have the right to:

• Access your personal data (Settings → Export My Data).
• Correct inaccurate data (edit in-app).
• Delete your account and all associated data (Settings → Delete Account).
• Export your data in a machine-readable format (JSON).
• Opt out of non-essential communications.

9. Additional Rights Based on Where You Live

9.1 If you are in the EU, UK, or EEA (GDPR / UK GDPR)

• Right to data portability — receive your data in a machine-readable format. Our in-app export returns JSON.
• Right to object to processing based on legitimate interests.
• Right to withdraw consent at any time.
• Right not to be subject to solely automated decision-making (we do not do this).
• Right to lodge a complaint with your national Data Protection Authority.

9.2 If you are a California resident (CCPA / CPRA)

• Right to know what categories of personal information we collect and share.
• Right to delete (available in the app).
• Right to correct inaccurate personal information.
• Right to opt out of “sale” or “sharing” of personal information. We do not sell or share personal information for cross-context advertising, so there is nothing for you to opt out of.
• Right to limit use of sensitive personal information (we do not use sensitive personal info for secondary purposes).
• Right to non-discrimination for exercising these rights.

To exercise any right, use the in-app controls where available, or email privacy@kenvii.com. We respond within 30 days (EU) or 45 days (California).

10. Children's Privacy (COPPA Compliance)

Kenvii is designed for family use, including children under parental supervision. Parents and guardians are responsible for managing their children's accounts and data. We do not knowingly collect personal information from children under 13 without parental consent.

Enhanced Privacy for Users Under 18

Kenvii provides enhanced privacy protections for users under 18:

• Age Verification: We collect date of birth during signup to apply age-appropriate settings.
• Default Sharing Off: Location sharing defaults to OFF for minors.
• Temporary Sharing Default: When minors enable sharing, the default is 1 hour (not permanent).
• Privacy Zones Enabled: Privacy zone features are automatically enabled.
• Enhanced Privacy Badge: Minor accounts display a privacy protection indicator.

11. International Data Transfers

Kenvii is powered by Google Firebase, which by default stores data in datacenters in the United States. If you use Kenvii from outside the US, your data may be transferred to and processed there. For transfers from the EU, UK, or EEA to the US, we rely on the European Commission's Standard Contractual Clauses and the additional safeguards described in Google's Data Processing and Security Terms.

12. Third-Party Services You Access Through the App

When you tap a link in Kenvii that leads to another service (for example, directions in Google Maps, or future partner services like restaurant bookings or event tickets), that service's own privacy policy applies from the moment you land there. We are not responsible for third-party practices.

13. Advertising and Partner Links

Kenvii is free to use. We cover the cost of running the service through two revenue streams, both of which we keep transparent:

13.1 Google AdMob

We show ads inside the app using Google AdMob. For ad delivery and measurement, AdMob may collect and process:

• Your device's advertising identifier (Apple IDFA or Android Advertising ID).
• Approximate location (derived from IP, not the precise GPS we use for Orbits).
• Device and app information (model, OS, app version, language).
• Events within ad surfaces (impressions, clicks).

Google AdMob's handling of this data is governed by Google's Privacy & Terms and their AdMob data disclosures.

13.2 How to limit or opt out of ad personalization

• iOS: Settings → Privacy & Security → Tracking → turn off “Allow Apps to Request to Track.” You can also reset your advertising identifier in Settings → Privacy & Security → Apple Advertising.
• Android: Settings → Google → Ads → toggle off “Opt out of Ads Personalization” and tap “Reset advertising ID.”
• EU / UK / EEA users: when you first launch the app, you will see a consent prompt to allow or refuse personalized advertising. You can change your choice later in Settings → Privacy → Advertising.

Opting out of personalization does not remove ads; it just means the ads you see will be non-personalized.

13.3 Partner referrals (future)

Kenvii may earn a commission if you book or purchase through links to partners (for example, restaurant reservations or event tickets). This does not increase your cost and does not change what personal information we collect about you. When affiliate links go live in the app, this section will be expanded with the specific partners involved.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date above. For material changes, we will notify you via in-app banner or email at least 7 days before the change takes effect.

15. Contact Us

If you have questions about this Privacy Policy or want to exercise your rights, please contact us at:

Email: privacy@kenvii.com