Privacy Policy

This policy covers two kinds of people: practitioners, the professionals who create a Kinka account to run their practice, and the clients whose information a practitioner enters into Kinka to manage bookings and history.

Practitioners are the account holders and are responsible for having a lawful basis and, where relevant, their client's consent to store that client's information in Kinka.

• Account data: email, password (hashed), and any profile details you add.
• Client records: whatever a practitioner enters, pseudonym, contact method, session history, notes, and intake responses. Real legal names are never required.
• Billing data: subscription status and invoice history. Card details are handled entirely by our payment processor; Kinka never sees or stores full card numbers.
• Usage data: basic log data (IP address, browser, pages visited, timestamps) used for security and reliability, not advertising.

To operate the service you signed up for: running your calendar, client list, billing, and dashboard; keeping the account secure; responding to support requests; and meeting legal obligations. We do not use client records to train models, and we do not sell any personal information to anyone, ever.

We rely on a small number of infrastructure providers to run Kinka, each bound by their own data-processing agreement:

• Supabase: database, authentication, and file storage.
• Vercel: application hosting.
• Our payment processor: billing and card processing.

None of these providers get access beyond what's needed to provide their service, and none are permitted to use your data for their own purposes. We disclose information beyond this only if required by valid legal process, or to prevent fraud or harm.

Data is encrypted in transit (TLS) and at rest. Access to production data is limited to what's needed to operate the service. No system is perfectly secure, and we'll notify affected users without undue delay if a breach puts their information at risk.

We keep account and client data for as long as the account is active. You can export your data or delete your account (and everything tied to it) from your dashboard settings at any time. Deletion is permanent within 30 days, except where we're required to retain certain billing records for tax purposes.

Depending on where you're located, you may have the right to access, correct, export, or delete your personal information, and to object to certain processing. To exercise any of these, use the controls in your account or contact us below.

Kinka is a business tool for adults. You must be at least 18 years old to create an account, and practitioners must not enter information about anyone under 18.

If we make material changes, we'll notify account holders by email before they take effect. Continuing to use Kinka after that means you accept the update.

Questions about this policy or a data request can be sent to info@kinka.online.