Kindra Privacy Policy
1. About This Policy
Kindra is a solo improv practice app operated by EmberWorks Digital LLC ("EmberWorks," "we," "us," or "our"). Kindra is available on iOS, Android, and the web.
This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and what choices you have. It applies to all users of the Kindra app and the kindra app website regardless of where you are located.
By creating an account or using Kindra, you agree to the practices described in this policy.
Questions or requests? Contact us at support@emberworksdigital.com.
2. Information We Collect
We collect information in three ways:
- information you give us directly,
- information generated automatically when you use the app, and
- information we receive from third-party services you use to sign in.
2a. Account Information
When you create a Kindra account using Google or Apple sign-in, we receive:
- Email address
- Display name
- Profile photo (if your OAuth provider shares one)
You may also upload a profile photo directly.
2b. Voice Data
When you use the microphone to practice drills or engage with an AI scene partner, your voice is recorded as a temporary audio file. That audio is used solely to produce a text transcript of what you said. Once transcription is complete, the audio itself is discarded. We do not keep your voice recordings.
Depending on the type of drill you are practicing, transcription happens one of two ways:
- On your device: Audio is processed locally and never leaves your device.
- On our servers: Audio is briefly sent to our backend and to our speech-to-text provider for transcription. Raw audio is discarded as soon as the transcript is produced.
What we do with transcripts after that depends on the type of practice:
- Drills you choose to save: After completing a drill, you have the option to save it to your personal scene archive. Nothing is saved automatically — saving is always your choice.
- AI scene partner conversations and Play with Friends scenes: When you practice with an AI scene partner or play a scene with friends, your conversation transcript is kept as part of the service so you can return to the app and pick up where you left off.
When you participate in a Play with Friends session, the conversation transcript is visible to all participants in that session by design. Kindra is not responsible for how another participant handles content they have seen during a shared session.
Items in your scene archive (including saved drills and scene conversations) are stored for as long as your account is active and can be deleted by you at any time from within the app. If your Premium subscription lapses, your scene archive is retained for 30 days before it is removed.
Kindra also retains pseudonymous analytics about your drill activity (such as which types of drills you have practiced) to understand how users engage with the app and improve it over time. This data never includes your voice recordings or full transcripts.
2c. Drill Content and Scene Dialogue
When you practice with an AI scene partner, your responses and drill settings are sent to our backend and then to our AI service providers to generate the AI's reply. The data transmitted consists of your drill text and any scene character configuration you have set. We do not send your name, email address, or any other account information as part of this request. For details on which providers receive this data, see Section 4.
2d. Usage and Session Data
When you use Kindra, we automatically collect certain usage and activity data to understand how the app is performing and how users engage with it. This includes:
- A session identifier linked to your Kindra account, used to maintain your login session and connect app activity to your account across app launches.
- A pseudonymous analytics identifier used to measure how users engage with the app. This identifier is separate from your account, does not contain your name or email address, and is not connected back to your identity. Kindra does not use it to identify you individually or associate it with any other data that could identify you.
- Device and session information, such as platform, app version, timezone, and locale.
- In-app activity, such as which features you use, how you engage with drills, and actions you take within the app.
- Technical events, such as errors or performance issues, used to diagnose and improve the app.
This data is collected through analytics tools and is used solely to provide and improve Kindra.
2e. Billing and Subscription Data
Kindra offers a Premium subscription. How your payment is handled depends on the platform you use to subscribe.
Apple App Store and Google Play (in-app subscriptions): When you subscribe through the iOS App Store or Google Play, your payment is processed entirely by Apple or Google within their platform. Neither company shares your payment card details, name, email address, or billing information with Kindra. Kindra receives only the data necessary to confirm your subscription status: a transaction identifier, the product purchased, the purchase date, and your subscription expiration date. This is standard behavior for all apps using native in-app purchases on these platforms. Your payment relationship for these subscriptions is with Apple or Google directly, and their privacy policies govern how they handle your payment data.
Web (Stripe): When you subscribe through the Kindra website, your payment is processed by Stripe, and their privacy policies govern how they handle your payment data. We do not store your full payment card details.
2f. Local Device Data
Kindra stores a small amount of data locally on your device, such as your session state and app preferences. This data is used only to provide and improve the app.
3. How We Use Your Information
We use the information we collect for the following purposes, consistent with our obligations under applicable privacy law. The data categories below correspond to those described in Section 2.
| Purpose | Data Categories Used | Legal Basis (GDPR) |
|---|---|---|
| To provide, operate, and maintain the Kindra app and its features | Account Information, Usage and Activity Data | Contract performance |
| To create and manage your account and authenticate you | Account Information, Authentication Credentials | Contract performance |
| To deliver voice practice and AI scene partner features | Voice Data, Drill Content and Scene Dialogue | Contract performance |
| To process payments and manage your subscription | Billing and Subscription Data | Contract performance |
| To analyze usage and improve the app, its features, and user experience | Usage and Activity Data | Legitimate interests |
| To diagnose and resolve technical issues | Usage and Activity Data | Legitimate interests |
| To communicate with you about your account or support requests | Account Information | Legitimate interests |
| To comply with applicable legal obligations | As required by applicable law | Legal obligation |
We do not sell your personal information. We do not use your data for advertising purposes.
Kindra uses automated logic to manage subscription tiers and enforce usage limits. These decisions are based on your subscription status and usage activity and do not involve human review. If you believe a limit or tier assignment has been applied in error, contact us at support@emberworksdigital.com and we will review it promptly.
4. Third-Party Services
Kindra uses third-party service providers to operate. We share personal information only to the extent necessary for each provider to perform its specific function. No provider receives data beyond what is needed for the purpose listed.
We organize our service providers into the following functional categories:
| Service Category | Data Categories Shared | Purpose | Current Providers |
|---|---|---|---|
| Identity and authentication providers | Account Information, Authentication Credentials | Sign-in, account creation, and session management | Google, Apple |
| Cloud infrastructure and hosting | Usage and Activity Data, Account Information | Backend services, data storage, and web app delivery | AWS, Netlify, Google Cloud |
| AI language model providers | Drill Content and Scene Dialogue | Generating AI scene partner responses for drills | OpenAI |
| Speech-to-text providers | Voice Data (server-side transcription path only) | Transcribing voice input for scene drill responses | Groq |
| Text-to-speech providers | AI-generated scene partner text | Converting scene partner responses and narration to spoken audio | Speechify |
| AI quality and observability | AI request traces (may include practice content and model outputs) | Short-lived debugging traces for service quality and reliability | Langfuse |
| Payment processors | Billing and Subscription Data | Processing subscription payments depending on platform | Stripe, Apple, Google, RevenueCat |
| Analytics providers | Usage and Activity Data | Understanding product usage and improving the app | Google Firebase Analytics |
The "Current Providers" column lists examples of providers we use at the time of this policy's publication. We may add, replace, or remove individual providers within a category as our technology evolves. When we make changes that materially affect how your data is processed, we will update this policy and notify you.
Each provider processes data under its own privacy policy and, where applicable, a Data Processing Agreement governing its obligations as a processor on our behalf. We do not authorize any provider to use your data for their own purposes beyond what is necessary to perform services for Kindra.
5. Data Retention
We retain personal information only for as long as necessary to fulfill the purposes described in this policy. Each data category follows one of three retention frameworks:
- Account-linked: retained for the duration of your account and deleted within 30 days of account deletion.
- Vendor policy: data processed by a third-party vendor is subject to that vendor's own retention policy. We do not control how long vendors retain data on their systems.
- Time-based: retained for a defined period and deleted on a rolling basis regardless of account status.
| Data Category | Retention | Framework |
|---|---|---|
| Account Information | Duration of account | Account-linked |
| Authentication Credentials | Session tokens are short-lived and not persisted client-side | Account-linked |
| Voice Data (on-device) | Transient — discarded immediately after transcription. Audio never leaves the device. | Account-linked |
| Voice Data (server-side) | Discarded after transcription is complete. Not retained by Kindra. | Vendor policy |
| Voice Data (transcripts, scene archive) | Retained while account is active; individual items deletable by user at any time. Removed 30 days after Premium subscription lapses, or upon account deletion, whichever comes first. | Account-linked |
| Drill Content and Scene Dialogue (sent to AI providers) | Not retained by Kindra; subject to each provider's API data retention policy | Vendor policy |
| AI request traces (Langfuse) | Retained briefly for operational and service quality purposes, then deleted | Time-based |
| Usage and Activity Data | Duration of account | Account-linked |
| Billing and Subscription Data | Subject to Stripe's, Apple's, or Google's retention policy depending on platform | Vendor policy |
| Local Device Data | Retained locally to provide the app; cleared on account deletion | Account-linked |
When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it by law.
6. Your Rights and Choices
6a. All Users
Regardless of where you are located, you can:
- Access the personal information associated with your account from within the app settings.
- Update your display name and profile photo at any time.
- Delete your account directly within the app. This will delete your account, profile, drill history, and scene archive within 30 days.
- Revoke microphone access at any time through your device settings. The app will fall back to text input and you will never be blocked from using Kindra without a microphone.
- Contact us at support@emberworksdigital.com with any privacy question or request.
6b. European Users (GDPR)
If you are located in the European Economic Area, United Kingdom, or Switzerland, you have the following additional rights under the General Data Protection Regulation:
- Right of access: request a copy of the personal data we hold about you.
- Right to rectification: ask us to correct inaccurate data.
- Right to erasure: ask us to delete your personal data. You can do this directly by deleting your account, or by contacting us.
- Right to restriction: ask us to limit how we use your data while a dispute is resolved.
- Right to data portability: request your data in a structured, machine-readable format.
- Right to object: object to processing based on legitimate interests, including analytics.
- Right to withdraw consent: where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, contact us at support@emberworksdigital.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.
The legal entity responsible for your data under GDPR is: EmberWorks Digital LLC, reachable at support@emberworksdigital.com.
6c. California Users (CCPA / CPRA)
If you are a California resident, you have the following additional rights under the California Consumer Privacy Act as amended by the CPRA:
- Right to know: request disclosure of the categories of personal information we have collected, the sources, our business purpose, and the categories of third parties we share it with.
- Right to delete: request deletion of your personal information, subject to certain exceptions.
- Right to correct: request correction of inaccurate personal information.
- Right to opt out of sale or sharing: we do not sell or share your personal information for cross-context behavioral advertising.
- Right to limit use of sensitive personal information: we do not use sensitive personal information beyond what is necessary to provide the service.
- Right to non-discrimination: we will not discriminate against you for exercising any of these rights.
Under the CPRA, voice recordings are an explicitly enumerated category of sensitive personal information. Kindra collects your voice solely to transcribe your practice sessions. We do not use your voice data for any purpose beyond delivering the Kindra service, and we do not sell or share it for cross-context behavioral advertising.
To submit a California privacy request, contact us at support@emberworksdigital.com. We will respond within 45 days.
7. Children's Privacy
Kindra is not directed at children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children under these ages. If you believe a child has provided us with personal information, contact us at support@emberworksdigital.com and we will delete it promptly.
8. Data Breach Notification
In the event of a data breach that affects your personal information, we will notify affected users and report to relevant authorities in accordance with applicable law. Where required, we will provide notification without undue delay and include information about the nature of the breach, the data affected, and the steps we are taking to address it.
If you have reason to believe your account has been compromised, contact us immediately at support@emberworksdigital.com.
9. Data Security
We take reasonable technical and organizational measures to protect your personal information, including:
- All data transmitted between your device and our servers is encrypted in transit using TLS.
- Authentication credentials are encrypted in transit and at rest and are not stored client-side.
- Access to production systems is restricted to authorized personnel.
- Our hosting infrastructure maintains industry-standard security certifications.
No system is perfectly secure. If you believe your account has been compromised, contact us at support@emberworksdigital.com immediately.
10. International Data Transfers
EmberWorks Digital LLC is based in the United States. If you are located outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those in your country.
For users in the European Economic Area, United Kingdom, or Switzerland: where we transfer personal data outside of these regions, we rely on appropriate safeguards such as Standard Contractual Clauses or the recipient's adherence to applicable data transfer frameworks.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the "Last Updated" date at the top of this page and, where appropriate, by sending a notice to the email address on your account. Your continued use of Kindra after any changes constitutes acceptance of the updated policy.
Material changes to the third-party vendors listed in Section 4 will be treated as a material policy change and will trigger the notification process described above.
If EmberWorks Digital LLC is involved in a merger, acquisition, or sale of assets, your personal information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your information.
12. Contact Us
If you have questions, concerns, or requests related to this Privacy Policy or your personal information, please contact us:
EmberWorks Digital LLC
Kindra App
support@emberworksdigital.com
kindra-admin.netlify.app/support