Kynlo

Privacy, in plain language.

Effective July 10, 2026

Kynlo is your household’s concierge. Everything it knows, it knows so it can carry your family’s week — and for no other reason. This page says what we hold, where it lives, and what we will never do with it.

What we hold

• What you tell us: your name and email, family member names and rough ages, schedules, tasks, routines, meals, shopping lists, and anything you write or say to the concierge.
• What you connect: calendar events from calendars you choose to link (Google, Apple, or a subscription link). Read-only — we never write to or share your external calendars.
• What you send: photos you capture (a flyer, a form) are read once to extract dates and fees, then discarded — the photo itself is never stored.
• Phone numbers, if you enable text messages, so the letter and the concierge can reach you by SMS.

How Kynlo uses Google user data

If you sign in with Google or connect a Google Calendar, here is exactly what we access and why:

• Your basic Google profile (name, email address, profile picture) — used only to create and sign you into your Kynlo account.
• Your Google Calendar events, read-only — used only to show your schedule inside Kynlo, spot conflicts, send you reminders about your own events, and write your family’s daily letter. We keep a synced copy of your events in our database so your dashboard loads instantly; it is refreshed from Google and deleted when you disconnect the calendar or delete your account. We never write to, edit, or share your Google Calendar.

We do not sell Google user data, use it for advertising, or transfer it to third parties except the service providers named on this page acting on our instructions. No human at Kynlo reads your Google data except with your explicit permission (for example, if you ask for support), where necessary for security or to comply with law. We do not use Google user data to develop, improve, or train generalized artificial-intelligence or machine-learning models; event details are processed by OpenAI’s API solely to produce your own family’s brief, and under our agreement that content is not used to train their models.

Kynlo’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can withdraw Kynlo’s access to your Google data at any time — disconnect the calendar in Kynlo’s settings, or revoke access at myaccount.google.com/permissions.

How we protect it

• Encryption in transit: every connection to Kynlo — and every call we make to Google, OpenAI, Telnyx, and Stripe — is encrypted with TLS (HTTPS).
• Encryption at rest: our database is encrypted at rest by our hosting provider (AES-256).
• Access control: every request is authenticated and scoped to your family — one household can never read another’s data, and roles inside a family (parent, child, caretaker) limit what each member sees.
• Credentials and tokens: Google OAuth tokens are stored server-side, never exposed to your browser, and destroyed when you disconnect. Service credentials live in protected environment configuration, never in code.
• Verified messages: incoming webhooks (texts, payments) are cryptographically signature-checked and rejected otherwise.
• Minimal hands: production data access is restricted to what is required to operate the service — there is no browsing of family data.
• Deletion: disconnecting a calendar removes its synced events; deleting your account removes your family’s data. If a security incident ever affects your data, we will notify you promptly.

Where it lives

Your family’s data is stored in our database (hosted on Neon) and served from our servers (hosted on Railway), both in the United States. Text messages are delivered by Telnyx. The concierge’s judgment runs on OpenAI’s API — the content needed to write your letter or sort your week is processed there and is not used to train their models under our agreement.

Text messages

If you opt in to SMS, message frequency varies and message & data rates may apply. Reply STOP at any time to unsubscribe, or HELP for help. Phone numbers collected for SMS consent are never shared with third parties or affiliates for their marketing.

What we never do

• We never sell your data, to anyone, for anything.
• We show no ads and share nothing with advertisers.
• We never hold your passwords for other services, and we never touch your payment credentials at any store.
• The concierge acts only on your word — every act it takes on your behalf is recorded in your Household Book, where you can see it and stop it.

Children

Kynlo is built for parents. Information about children (names, ages, activities) is entered and controlled entirely by their parents or guardians; children do not create accounts of their own without a parent adding them, and we collect nothing from children directly.

Your word is final

You can correct anything Kynlo believes in the Household Book, and you can ask us to delete your family’s data entirely — write to hello@kynlo.life and it will be done, fully and promptly.

Payments

Subscriptions are processed by Stripe. We never see or store card numbers.

If we ever change how any of this works, this page changes first — and the date above with it. Questions belong at hello@kynlo.life.