Privacy Policy

Introduction

Welcome to Kelson ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services (the "Service").

By using Kelson, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies, please do not use our Service.

Personal Information

• Account Information: Name, email address, and password when you create an account
• Profile Information: Profile photo (optional), relationship goals, and preferences
• Payment Information: Payment details processed securely through Stripe (we do not store your full credit card number)

Journal & Content Data

• Journal Entries: Your written reflections, mood selections, and personal notes
• AI Coach Conversations: Messages exchanged with our AI coaching feature
• Relationship Maps: Information about your relationships that you choose to add
• Progress Data: Journey completion status, streak information, and activity dates

Technical Information

• Device Information: Device type, operating system, and unique device identifiers
• Usage Data: Features used, session duration, and interaction patterns
• Push Notification Tokens: For sending you journaling reminders (with your permission)

• Provide and maintain the Kelson service
• Personalize your experience and AI coaching responses
• Process your subscription payments securely
• Send you journaling reminders and important updates (with consent)
• Analyze usage patterns to improve our service
• Provide customer support
• Comply with legal obligations

Our AI Coach feature uses your journal entries and conversation history to provide personalized guidance. This data is processed using third-party AI services (OpenAI, ElevenLabs) to generate responses. We take measures to minimize data shared with these services to what is necessary for functionality.

We implement industry-standard security measures to protect your personal information:

• Encrypted data transmission (HTTPS/TLS)
• Secure cloud storage with Firebase and AWS
• Regular security audits and updates
• Limited employee access to personal data

We do not sell your personal information. We may share data with:

• Service Providers: Firebase (authentication, database), AWS (file storage), Stripe (payments), OneSignal (notifications)
• AI Providers: OpenAI and ElevenLabs for AI coaching features
• Analytics: Google Analytics for usage insights (anonymized)
• Legal Requirements: When required by law or to protect our rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data
• Export: Download your journal entries and data
• Opt-out: Disable push notifications at any time

To exercise these rights, contact us at the email address below.

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

Legal Basis for Processing

• Consent: You have given explicit consent for processing (e.g., AI coaching, notifications)
• Contract: Processing is necessary to provide the Service you requested
• Legitimate Interest: Processing for analytics and service improvement

Additional GDPR Rights

• Right to Portability: Receive your data in a structured, machine-readable format
• Right to Restrict Processing: Limit how we use your data
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time without affecting prior processing
• Right to Lodge a Complaint: File a complaint with your local data protection authority

International Data Transfers

Your data may be transferred to and processed in the United States and other countries where our service providers operate. We ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission, to protect your data during international transfers.

Data Protection Officer

For GDPR-related inquiries, please contact our data protection team at: [email protected]

California Privacy Rights (CCPA)

California residents have specific rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request disclosure of personal information collected, used, and shared
• Right to Delete: Request deletion of your personal information
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights
• Do Not Sell: We do not sell personal information to third parties

To exercise your CCPA rights, contact us at [email protected] or use the in-app data export feature.

Children's Privacy

Kelson is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. You may request deletion of your account and associated data at any time. Some data may be retained for legal compliance purposes.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or our data practices, please contact us: