Privacy Policy

Kindus (朝夕) · Updated: July 29, 2026 · Effective: July 29, 2026 · 中文

Kindus is a private space designed for two partners ("the App"), independently operated by an individual developer. Your data belongs to the two of you. The App is built on a "what goes in never leaks out" principle: your private content is end-to-end encrypted (E2EE) on your devices, and our servers cannot read its plaintext. This policy explains what we process, why, and how it is stored and deleted.

1. Data We Process

• Pairing relationship: you and your partner pair with a one-time invite code. Our servers store only the pairing identifier and its status to enable cross-device sync.
• Anniversaries & start date: dates you set, used for day counting and widgets. Date content is end-to-end encrypted in transit and at rest.
• Mood entries: encrypted on your device before syncing. Servers store ciphertext only and cannot read the plaintext.
• Device & key identifiers: to provide E2EE and sync, servers store device public keys, device identifiers, and key epoch numbers. There is no account system — no usernames, no passwords.
• Push tokens: device tokens required by system push services (APNs), used solely to deliver sync notifications to your devices.
• Anonymous feature events: a minimal set of feature events (e.g., widget activation, pairing completion) carrying only enumerated metadata such as platform, widget size, and time-since-binding — never content, never precise timestamps, never personally identifying information.

2. What We Never Do

• We do not request location or contacts permissions;
• No advertising. We never sell or share your data with third parties for marketing;
• No third-party analytics SDKs; feature-event stats are processed on our self-hosted servers;
• Our servers cannot decrypt your private content — losing your device keys makes the ciphertext unrecoverable. That is by design, not a defect.

3. Storage Location & Retention

All data is stored on Alibaba Cloud servers located in mainland China. Data is retained while the pairing relationship exists. When either partner uses "Unpair" or "Delete Data" in the App, the related server-side data is deleted. Due to end-to-end encryption, ciphertext from an unpaired, uninstalled App is unreadable.

4. Your Rights

• Access & copy: everything you have synced is viewable inside the App;
• Deletion: the Settings page provides an entry to delete all server-side data;
• Withdraw consent: unpairing stops all further processing;
• Complaints: contact us via the address below, or file a complaint with the relevant regulator.

5. Children

The App is not directed at children under 14 and does not knowingly collect their personal information.

6. Changes

Updates to this policy will be published on this page with a revised date; material changes will also be flagged in the App.

7. Reach Us

Developer: Shi Sujie (individual developer)
Email: privacy@kindus.cn
Website: https://kindus.cn