Kinoseed

Privacy Policy

Last updated: 8 November 2026

This Privacy Policy describes how Kinoseed (“we”, “us”) collects, uses, and shares information when you use our service.

1. Information we collect

  • Account information. When you sign in via Google or GitHub we receive your name, email address, profile image, and a unique identifier from the provider.
  • Billing information. Payments are processed by Stripe. We store a Stripe customer identifier and subscription state. We never see your full card number.
  • Usage data. Prompts, reference media you upload, and the resulting generations, plus operational logs (request timing, provider errors) needed to run the Service.
  • Cookies. We use a session cookie to keep you signed in. We do not use third-party advertising trackers. Page views are counted on our own server without cookies: a visitor is a one-way hash that changes every day, and no IP address is stored. When you are signed in, the pages you open are also saved with your account, so we can see where the product gets in your way. If you arrive through a friend's invite link, a cookie remembers their code for 30 days so the invite can be credited when you sign up. Likewise, if you arrive from a tagged campaign link, a cookie keeps the campaign name for 30 days so we can tell which posts bring people in. Neither cookie is shared with anyone. We also use Umami, a cookieless analytics service, to see which pages are visited, from which sites and countries, and on which devices; it stores no personal data and does not track you across other sites. In Europe we ask first: if you decline, the invite and campaign cookies are removed and not set again, and only the session cookie stays.

2. How we use information

  • To operate the Service: authenticate you, run generations, bill credits.
  • To detect and prevent abuse, fraud, and security incidents.
  • To improve the Service (aggregated, non-identifying analysis).
  • To communicate with you about your account or important changes.

3. How we share information

  • Identity providers (Google, GitHub, Apple): for sign-in.
  • Stripe on the web, and Apple with RevenueCat in the iOS app: to process payments.
  • AI generation providers: your prompt and uploaded reference media are sent to fal.ai and Sume, which run the model you use, from OpenAI, Google, ByteDance, Kuaishou, Black Forest Labs, xAI or Anthropic. We send the minimum necessary to fulfill the request. The iOS app asks for your consent before the first request.
  • Hosting infrastructure: to store your account and generation history.
  • Legal: when required by law or to enforce our Terms.

We do not sell your personal information.

4. Data retention

We retain account data while your account is active. Generations remain in your history until you delete them or your account. You may request deletion of your account at any time by contacting support.

5. Your rights

Depending on where you live, you may have rights to access, correct, or delete the personal information we hold about you, and to object to certain processing. Contact us to exercise these rights.

6. Security

We use industry-standard safeguards to protect your information, including TLS in transit and access controls on our infrastructure. No system is perfectly secure; please use a strong, unique account at your identity provider.

7. Children

The Service is not intended for children under 18.

8. International transfers

Kinoseed and our processors operate globally. By using the Service you consent to processing in the countries where we operate, including the United States.

9. Changes

We may update this Privacy Policy. Material changes will be communicated via the Service or by email.

10. Contact

For privacy questions or requests, email privacy@kinoseed.app.