Web edition · beta preparation
Privacy notice
Who is responsible
HAVEN GLOBAL SERVICES LTD, Company 16267495, 3 Hornton Place, London W8 4LZ, United Kingdom, is responsible for Kindavelle. Contact Support@havengs.uk for privacy questions and access, correction or deletion requests. Last updated: 9 November 2026.
Your local space
Your chosen name, preferences, reminders, confirmation history, trusted contacts and audio memories are stored in browser storage or the native app on your device. Reminder titles and recordings may contain sensitive information you choose to enter. Local device storage is not encrypted by the app. Downloadable audio backup files are encrypted by default using a separate passphrase; you can explicitly choose readable unencrypted files. Without the phrase, encrypted files cannot be recovered. Local data is not automatically sent to us or synchronised. Use a trusted device and keep exports private.
Optional account and encrypted backup
If you create an account, Supabase processes your email, authentication information and service/security logs; the project is hosted in London. With your explicit backup action, settings, contacts and reminders are encrypted on your device using a separate passphrase before upload. The passphrase is not sent or stored by the app. Audio is excluded. Account sessions are not persisted across relaunches.
Optional reminder sharing
With your permission, an encrypted reminder snapshot can be shared with a confirmed account that accepts your invitation. Contacts and audio are excluded. The recipient reads the shared snapshot and may explicitly copy a reminder into their own independent list; their actions do not edit the owner’s reminders. Updates are voluntary snapshots. Revocation blocks future access but cannot remove copies already read or exported.
Microphone, reading voices and phone calls
Microphone access is requested when you choose to record or start an available voice feature. Local journal recording is not uploaded. Browser or device reading voices may use an online speech service depending on the selected voice. Calling opens the device dialler; you confirm the call. No call is made automatically.
Hosting, providers and future paid features
The Web edition uses Google Firebase Hosting/CDN, which processes network requests such as IP address and technical logs. Optional cloud services use Supabase. No advertising or analytics SDK is added by this Web edition. AI conversation and payments remain closed while provider, budget and sandbox acceptance are pending; these features must be reviewed and this notice updated before activation.
Purpose and legal basis
We process optional account and requested backup data to provide the service you choose (performance of a contract where applicable). Optional sharing is based on your explicit choice and consent where required; you can stop future sharing. Service security and abuse prevention rely on legitimate interests, subject to applicable law. A microphone permission is a device control, not blanket consent for unrelated processing. We do not use your local content for advertising or profiling.
California privacy choices
We do not sell personal information or share it for cross-context behavioural advertising. Where California privacy law applies, you may request the information we hold about you, correction or deletion, and exercise applicable rights without discriminatory treatment. Contact Support@havengs.uk; an authorised agent may contact us and may need to demonstrate authority and account control. This app does not use advertising trackers.
International processing and intended audience
The optional account database is hosted in London. Hosting, authentication, support and security providers may process operational data in other countries. Contact us for information about the providers and transfer arrangements applicable to your request; London hosting is not a promise that every service operation remains in the UK. Kindavelle is intended for adults aged 18 or over. Do not use optional sharing or support to send someone else’s sensitive information without appropriate authority. There are no automated decisions about eligibility for employment, credit, insurance or medical care.
Retention, deletion and exports
Local data stays until you delete it or the browser/device removes it; trash is not automatically emptied. Account deletion removes the active account and associated online backup, entitlements, usage and owned shares. It does not cancel an App Store or Google Play subscription; cancel it in the original store. A recipient leaving or deleting their account loses access. Provider security logs and backups may follow their own retention schedules; we do not promise immediate erasure of every provider backup. Files already exported or shared remain with their holders. Native exports create temporary copies in private app cache. Later exports remove copies aged 24 hours or older; the operating system may clear the cache sooner. Saved files and recipient copies are managed separately.
Your choices and complaints
Depending on your location and applicable law, you may request access, correction, deletion, a portable copy, restriction of processing or object to processing; you may withdraw consent for future optional processing. Contact Support@havengs.uk from your account email. We may verify account control without asking for your password, encryption passphrase or recordings. Use Settings for local exports and online account deletion; audio is separate. The public account-deletion page also accepts an email request without reinstalling the app. You may complain to the UK Information Commissioner’s Office or your local data-protection authority.