kit

Privacy Policy

Last updated: 13 October 2026

Kinta counts the days you go without a habit and is there for the minute a craving hits. This page says plainly what we store, where it lives, and how to get rid of it.

Who is responsible for your data

The controller of the data described here is Brigitte DO VALLE-SANTOS (EI, registered as Brigitte COLLIGNON, SIRET 531 030 732 00014), 830 Route de Choisi, 82290 La Ville-Dieu-du-Temple, France. Questions, requests and complaints go to support@getkinta.app.

What stays on your phone

Your promise, the days you marked, your reason for starting and anything you write in the app are stored on your device with Apple's SwiftData. If you are a Pro subscriber, they also sync to your own private iCloud; on the free tier they stay on the device only, so a new phone or a reinstall starts empty. We cannot read your iCloud data — it belongs to your Apple Account, not to us.

What our servers store

Kinta uses Supabase (servers in the EU, Paris region) for three things:

• Your account. You sign in with Apple or Google when you set the app up. We store the identifier the provider gives us, plus your email address when the provider shares it.
• Your subscription status. Whether you are on the free tier or Pro, handled through RevenueCat and Apple. We never see your card. Payments go through Apple, and Apple does not share your payment details with us.
• Usage events, if you allow analytics. Events, not content: that a promise was started and for which habit, that Kit was opened, which onboarding screen was the last one you saw. The habit can say something about your health, so the consent screen says so before you answer. We ask once, while you set the app up, and you can say no. Saying no changes nothing about how the app works. Never your reason, your journal or anything you say to Kit.

What happens when you talk to Kit

Kit answers through our server, and only if you agree:

• Through our server. The first time you talk to Kit the app asks first. If you agree, your messages in that conversation, your chosen habit, your stated reason, how many days you are in and — on Pro, so he remembers you — four numbers from your craving log (cravings this week, how many you rode out, the hour they usually hit, how long the last one took) are sent to our server and passed to Scaleway (Paris, France), which runs the AI model and answers. Scaleway keeps no prompts or replies and does not use them to train any model; neither do we — our server keeps only a count of messages, to enforce usage limits. Never your name, email or journal.
• Offline, on your device. On iPhones that support Apple Intelligence, when there is no connection, the reply is generated on the phone and nothing leaves it.
• Today's conversation, on your phone. So that Kit can pick up where you left off, today's conversation is kept on your phone only — in a protected file, never in iCloud or a device backup, never on our server — and deleted at midnight, or the next time you open the app if it was closed then. It is not in analytics or in your data export, and deleting your account deletes it.

What you tell Kit can reveal things about your health or sex life, which the GDPR treats as special categories of data. That is why this happens only with your explicit consent, and why you can withdraw it at any time in the app's profile (“Kit's cloud AI”). Withdrawing stops anything further being sent; Kit then answers only on phones that can run him on the device.

Please do not put names, addresses, medical details or payment information into a message to Kit. He does not need them, and the fewer of them exist anywhere, the better.

Why we are allowed to process it, and for how long

Under the GDPR every piece of processing needs a legal basis and an end date. Ours:

• Your account — necessary to perform the contract between us (Article 6(1)(b)). Kept until you delete the account.
• Your subscription status — necessary to perform the contract, and to meet accounting obligations (Article 6(1)(b) and (c)). Purchase records are kept for as long as tax law requires, then deleted.
• Messages to Kit — your explicit consent (Article 6(1)(a) and Article 9(2)(a)), asked for in the app before the first message is sent. Kept only as long as it takes to answer you; the usage counter holds a number, not your words.
• Usage analytics, including which habit you picked — your explicit consent (Article 6(1)(a) and Article 9(2)(a)). Withdraw it at any time in the app's settings. When you delete your account, its events are detached from you and stripped of the habit; what remains is an anonymous count of screens.
• Advertising identifiers, if ads are shown — your consent, asked for separately through Apple's prompt and through a consent form where the law requires one.

There is no automated decision-making that produces legal effects for you, and no profiling beyond what is described here.

Where your data goes

Our database and the AI model behind Kit both sit in the European Union (Supabase and Scaleway, Paris); conversations with Kit do not leave France. Apple and RevenueCat, which handle sign-in and purchases, process data in the United States; those transfers rely on the European Commission's Standard Contractual Clauses, or on the EU–US Data Privacy Framework where the company is certified under it.

What we never collect

• Health records, HealthKit data, location, contacts, photos or your address book.
• The content of what you write, sent to analytics. Analytics receives events only.
• Any data at all from anyone under the age this policy allows — see below.

Advertising

The free tier of Kinta may show ads. If it does, you will be asked for permission before any tracking identifier is used, through Apple's App Tracking Transparency prompt, and separately for consent where the law in your country requires it. You can remove ads permanently with a one-time purchase, and Pro has no ads at all.

Deleting everything

There is a Delete account button inside the app, in your profile. It removes your account and the data attached to it from our servers, permanently and without a waiting period, and erases what is stored on your device. If you are Pro, that erase carries over to your iCloud copy as well.

You can also write to support@getkinta.app and ask us to delete your data, to send you a copy of it, or to correct it. We answer within 30 days.

Who else touches your data

• Apple — sign-in, purchases and iCloud.
• Google — sign-in, if you choose it.
• Supabase — our database and servers, hosted in the European Union.
• RevenueCat — subscription status.
• Vercel — hosts this website (see below).
• The AI provider behind Kit — the conversation you are having with him, plus which habit you are quitting, your reason, how many days you are in and, on Pro, four numbers from your craving log — counts and times, never words — so he can answer you. Only when your device cannot answer locally, and never with your name, email or account.

We do not sell your data. We do not share it with advertisers or data brokers.

This website

getkinta.app is hosted by Vercel. Like any web server, it records each request — your IP address, the page and the time — to keep the site running and secure; that is our legitimate interest, and Vercel keeps those records only as long as it needs them for that. The site sets no cookies, runs no analytics and loads no fonts, scripts or images from anyone else: everything comes from getkinta.app.

Your rights

If you live in the European Union or the United Kingdom, you have the right to access your data, to correct it, to delete it, to receive a copy in a portable format, to restrict or object to processing, and to withdraw consent at any time — withdrawing it does not affect what was done before. Write to support@getkinta.app and we will answer within 30 days.

You also have the right to lodge a complaint with a supervisory authority. In France that is the CNIL (cnil.fr); elsewhere in the EU, the authority where you live.

If you live in California, the CCPA gives you the right to know what we collect, to delete it, to correct it, and to opt out of the sale or sharing of personal information. We do not sell or share personal information as those terms are defined by the CCPA, and we do not offer financial incentives in exchange for data. Exercising any of these rights never gets you a worse version of the app.

Age

Kinta is for adults. It is rated 18+ in the App Store and you must be 18 or older to use it. We do not knowingly collect data from anyone younger. If you believe a minor has an account, write to us and we will delete it.

This is not medical care

Kinta counts days and is someone to talk to. It is not medical care: it does not diagnose, treat or cure any condition, and Kit is not a doctor or a counsellor. If you are in crisis, contact a medical professional or your local emergency service.

Changes

If this policy changes in a way that matters, we will say so in the app before the change takes effect, not quietly on this page. The date at the top always reflects the current version.