Privacy Policy
Last updated: May 1, 2026
Kinji(“we”, “us”) is built around a simple promise: your kitchen data is yours. This policy explains what we collect, why we collect it, how long we keep it, and the choices you have. We aim to keep it short and plain — if anything is unclear, email support@kinji.ai.
Information we collect
- Account information: name, email address, and authentication identifiers (e.g., Apple ID or Google account token) used to sign in.
- Kitchen data: pantry contents, dietary preferences, saved recipes, meal plans, and shopping lists you create in the app.
- Receipts and photos: images you upload for ingredient parsing. They are processed to extract items and then stored in association with your account.
- Usage data: aggregate, anonymized signals about feature usage, session length, and crashes, used to improve reliability and performance.
- Device information: operating system version, device model, and app version — collected for compatibility and crash-diagnosis purposes only.
How we use your information
- To run the features you use — recipe suggestions, planning, and lists.
- To improve quality, performance, and accuracy of AI features.
- To respond to support requests.
- To send transactional communications (e.g., account or billing notices).
- To meet legal and security obligations.
We do not sell your personal data. We do not show third-party advertising inside Kinji.
How AI features handle your data
Recipe generation, receipt parsing, and voice-driven cooking features run on AI models hosted by trusted third-party providers. Only the minimum data needed for a request — for example, the list of items currently in your pantry — is sent to the model. The response is returned to your app and we do not retain it separately.
Important limitation: AI-generated recipes and suggestions may be inaccurate, incomplete, or unsuitable for your specific dietary needs, allergies, or health conditions. Always apply your own judgement before preparing or consuming any food. Kinji is not a substitute for professional medical or nutritional advice. We are not liable for outcomes resulting from acting on AI-generated content.
We do not use your personal data to train third-party foundation models, and we do not permit our AI providers to use your data for their own model training.
Third-party processors
We share data only with service providers required to operate Kinji. Each processor is bound by a data processing agreement that prohibits use of your data beyond what is necessary to perform their service.
| Provider | Purpose | Location |
|---|---|---|
| Amazon Web Services (AWS) | Cloud infrastructure and storage | USA / global |
| OpenAI | AI recipe generation and ingredient recognition | USA |
| Apple / Google | Authentication (Sign in with Apple / Google) | USA |
| Stripe | Payment processing (if applicable) | USA / global |
| Sentry | Error and crash reporting | USA |
This list may change as the product evolves. We will update this page when we add or replace processors that handle personal data.
Data retention
We keep your data for as long as your account is active, or as long as needed to provide the service and comply with legal obligations.
| Data type | Retention period |
|---|---|
| Account and kitchen data | Until account deletion, then purged within 30 days |
| Receipt and food images | Until you delete them or your account, then purged within 30 days |
| Anonymized usage analytics | Up to 24 months, then aggregated or deleted |
| Crash and error logs | 90 days |
| Billing records | 7 years (tax and legal compliance) |
| Support emails | 3 years from last correspondence |
Your rights — GDPR (EEA and UK users)
If you are located in the European Economic Area or United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR) or UK GDPR:
- Access: request a copy of the personal data we hold about you.
- Rectification: ask us to correct inaccurate or incomplete data.
- Erasure: request deletion of your personal data (“right to be forgotten”).
- Portability: receive your data in a structured, machine-readable format.
- Restriction: ask us to limit processing in certain circumstances.
- Objection: object to processing based on legitimate interests.
- Withdraw consent: where processing is based on consent, you may withdraw it at any time.
Our legal basis for processing is performance of a contract (operating the service you signed up for), legitimate interests (security, fraud prevention, service improvement), and consent where explicitly requested. To exercise any right, email support@kinji.ai. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.
Your rights — CCPA (California residents)
If you are a California resident, the California Consumer Privacy Act (CCPA) grants you additional rights:
- Know: request disclosure of the categories and specific pieces of personal information we have collected about you.
- Delete: request deletion of personal information we have collected (subject to certain exceptions).
- Opt-out of sale: we do not sell personal information, so no opt-out is needed.
- Non-discrimination: we will not discriminate against you for exercising your CCPA rights.
To submit a request, email support@kinji.ai with the subject line “CCPA Request”. We will verify your identity and respond within 45 days.
Cookies and tracking
The Kinji mobile app does not use browser cookies. Our marketing website (www.kinji.ai) may use essential cookies for session management and anonymized analytics. We do not use advertising or cross-site tracking cookies.
Security
We use industry-standard encryption in transit (TLS 1.2+) and at rest (AES-256), scoped access controls so employees access only what their role requires, and regular security reviews of our infrastructure. No system is perfectly secure, but we work to make compromise unlikely and to minimize its impact if it occurs. If you discover a security issue, please report it responsibly to support@kinji.ai.
Children
Kinji is not directed at children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has created an account, contact us and we will remove it promptly.
International data transfers
Kinji is operated from the United States. If you access the service from outside the US, your data may be transferred to, stored in, and processed in the US or other countries where our processors operate. Where required (e.g., EEA to US transfers), we rely on Standard Contractual Clauses or other appropriate safeguards.
Changes
We may update this policy as the product evolves. Material changes will be announced in-app or by email at least 14 days before they take effect. The “last updated” date at the top reflects the most recent revision.
Contact
Questions, data requests, or concerns? Email support@kinji.ai. We aim to respond within 5 business days for general queries, and within the legally required timeframe for formal rights requests.