KindlyKeep DRAFT: pending attorney review Version privacy-draft-0.1
KindlyKeep Privacy Policy
DRAFT — for attorney review. Not legal advice. Version: privacy-draft-0.1 · Last updated: Nov 13, 2026 · Effective: [launch date]
Plain-English summary (shown at the top)
- We answer your unknown calls with an automated assistant, block spam, and send you voicemails as text and audio.
- To do that we handle your phone number, your contacts list (if you add it), the numbers and words of callers, voicemail audio and transcripts, and your billing details (card details stay with Stripe).
- We don't sell your data or use it for ads. We don't use your voicemails to train AI models. [verify xAI/vendor terms before this sentence ships]
- We keep messages 30 days by default (you choose 7, 30 or 90), held spam calls 7 days, and blocked-call details 28 days. You can delete any message or your whole account.
- Family members and caregivers only see what you choose to share, and only with your consent.
- Questions or requests: privacy@kindlykeep.com or the helpline, 828-785-4838.
1. Who we are
KindlyKeep, [legal entity name — LLC to be formed], Fletcher, North Carolina ("we"). Contact: privacy@kindlykeep.com; [mailing address].
2. What we collect and why
| What | Examples | Why | Source |
|---|---|---|---|
| Account | Name, phone number(s), email, password hash or login code, time zone, settings | Run your account, log you in, send texts | You |
| Contacts / allow list | Names and numbers you add | Let trusted callers through | You |
| Calls | Caller number, time, call length, screening result (allowed / voicemail / blocked), spam score | Screen and block calls; show your call history | Phone network, our systems |
| Voicemail and screening content | Audio of what a caller says to our assistant, transcript, translation, summary | Deliver your messages | Callers, our vendors |
| Billing | Plan, billing dates, last 4 of card, receipts, tax | Charge and invoice you | You, Stripe |
| Consent and notice records | When you accepted Terms/texts/auto-renew (time, version, IP address, device), reminders we sent | Prove consent, comply with law, resolve disputes | You, our systems |
| Family / caregiver | Who you invited, what you chose to share, their phone numbers | Family Safety Hub | You, invitees |
| Code word / emergency info (optional) | Code word (kept only as a one-way scrambled copy we cannot read back); emergency contacts and notes | Family Safety Hub features | You |
| Device and usage | Browser type, IP address, error logs, page views needed to run the service | Security, reliability | Your device |
| Support | Messages you send us, helpline calls (recorded and transcribed — see AI disclosure) | Help you | You |
Callers: People who call a KindlyKeep customer reach our assistant. We record and transcribe what they say, tell them so at the start of the call, and handle it under this policy. Callers can use the dispute page blocking-dispute-redress.md and ask us to delete their voicemail by emailing privacy@kindlykeep.com.
3. How we use it / what we don't do
We use data to provide and secure the service, send the texts and emails you ask for, bill you, prevent fraud, meet legal duties, and improve spam detection using call patterns (numbers, timing, scores). We do not: sell or "share" your personal data for cross-context advertising; use voicemail contents for advertising; use voice recordings to identify you by voiceprint; use your voicemails to train outside AI models [verify vendor terms].
4. Who we share it with (service providers)
| Provider | Role | Data |
|---|---|---|
| Twilio | Phone calls and texts | Numbers, call data, audio/text in transit |
| xAI | Speech-to-text, translation and AI conversation | Audio and text of calls and messages [verify retention/training terms] |
| Cloudflare | Hosting, database, storage, email routing | All service data |
| Stripe | Payments, tax | Payment and billing data (we never see your full card number) |
| [Email sending provider] | Emails | Email address and message |
We also share if you ask us to (family/caregiver), if the law requires (subpoena, court order — we'll tell you first where allowed), to prevent harm or fraud, or in a sale of the business (with notice). We do not sell data.
5. How long we keep it
| Data | Keep |
|---|---|
| Voicemails, transcripts, summaries | 30 days by default; you choose 7, 30 or 90; then deleted |
| Voicemail audio at our phone provider (Twilio) | Deleted soon after we save your message to your account (builder: MF-9) |
| Held (blocked) calls | 7 days, then deleted |
| Blocked-call details (number, time, score) | 28 days |
| Contacts, settings, family links | Until you delete them or close your account |
| Consent, acceptance, reminder and billing records | 3 years after the account ends at minimum; billing/tax records up to [7] years as the law requires (verify) |
| Support emails and helpline recordings | [12] months |
| Backups | Overwritten within [35] days |
When you close your account we delete or de-identify your data within [30] days, except records we must keep.
6. Your choices and rights
- Access, correct, delete, download: in Settings, or email privacy@kindlykeep.com. We reply within 30 days.
- Texts: reply STOP to stop texts (see SMS terms). Emails: unsubscribe link in marketing emails; service emails continue.
- Private mode: hide message contents from family/caregiver views.
- State laws: North Carolina has no comprehensive consumer privacy statute (verify at launch). We apply the same choices to all customers. If you live in a state with a privacy law (e.g., CA, CO, VA), you may have more rights, and we will honor them as required.
- Do Not Track / Global Privacy Control: we don't track across sites, so there is nothing to opt out of; we honor GPC signals anyway (verify).
6a. Text messages (SMS)
- We do not share your mobile phone number, or your text-message consent, with any third party or affiliate for marketing or promotional purposes. Text-messaging originator opt-in data and consent will not be shared with anyone, except the phone and text service providers that deliver our messages for us.
- Message frequency varies. It depends on your calls and settings. Most people get a small number of texts a week: a text when a real person leaves you a voicemail, plus sign-in codes and occasional account notices. We never text you about spam or junk calls, and we do not send marketing texts.
- Message and data rates may apply. Reply STOP to stop texts at any time, or HELP for help. See the SMS Terms.
7. Security
Encryption in transit; code words kept only as one-way hashes, other private details encrypted at rest; access controls; logging. No system is perfect. If personal information is breached, we will notify you and, where required, regulators as the law requires, including N.C. Gen. Stat. § 75-65 (notice without unreasonable delay; to the NC Attorney General's office too, if affected people are notified) [V ncleg.gov GS_75-65].
8. Children
KindlyKeep is for adults 18 and older. We don't knowingly collect data from children under 13 (COPPA). If you think a child gave us data, email privacy@kindlykeep.com and we'll delete it.
9. Biometric and voice data
We process voice only to turn speech into text and detect spam. We do not create voiceprints or identify people by voice. (Own-voice greeting features are not offered.) (Illinois BIPA / Tennessee ELVIS Act risk avoided by this design — lawyer.)
10. Calls, recording and AI
See ai-disclosure.md and caller-notice-script.md. Callers hear a notice at the start of every screened call.
11. Cookies
See the Cookie Notice. We use only essential cookies.
12. Changes
We'll tell you by email/text at least [30] days before material changes.
13. Contact
privacy@kindlykeep.com · 828-785-4838 · [mailing address]