# KinetSoul — Privacy Policy

*Last updated: 2026-06-16*

KinetSoul is built to be private by default. This policy explains what data
exists, where it lives, and the one case where data can leave your device.

## 1. Local-first: your data stays on your device

The following are stored **only on your device** (a local SQLite database) and
are **never uploaded** to us or any server by default:

- Your **mood check-ins** (mood/energy levels, notes, dates)
- Your **chat history** with the companion
- **Long-term memories** the app extracts from your chats to remember context
- Your **avatar** choices and any photo you pick for your avatar

We do not run any backend server that receives this data. There is no account
system — you do not log in, and we cannot tie data to an identity.

## 2. On-device AI runs offline

The default AI model runs **entirely on your device**. When you use the
on-device model, your messages and context are processed locally and **do not
leave your phone**.

## 3. Optional remote AI (the only time data can leave your device)

KinetSoul lets you optionally connect a **remote AI provider** (for example
DeepSeek, Zhipu GLM, MiniMax, or your own custom endpoint) using **your own API
key**. This is a choice you make in **Settings → Remote AI Config**.

If — and only if — you connect a remote provider, then when you send a message:

- Your **message and recent conversation history**
- Your **recent mood context** (so the companion can respond empathetically)
- Any **long-term memories** the app has noted

…are sent **directly from your device to the provider you chose**.

**Important:**
- The data goes to **your chosen provider, not to us**. We do not see, store,
  collect, or relay any of this data.
- You must **explicitly agree** to this data sharing in-app before a remote
  provider can be used, and you can **revoke consent at any time** (Settings →
  Remote AI Config → toggle off). Revoking disables the remote AI; the
  on-device AI is unaffected.
- Please review your chosen provider's privacy policy to understand how they
  handle data.

## 4. Permissions

| Permission | Purpose |
|---|---|
| Microphone | Voice input when you talk to the companion |
| Speech Recognition | Convert your voice to text |
| Photo Library | Choose a photo for your avatar (only when you tap to change it) |

We do **not** use: location, contacts, camera, HealthKit, tracking/advertising
identifiers (IDFA), or background tracking.

## 5. No tracking, no advertising

KinetSoul contains **no advertising** and **no tracking SDKs**. We do not track
you across apps or websites.

## 6. Deleting your data

Everything is on your device. To delete it:
- Clear all chats: **Settings → About → Clear all conversations**
- Delete the whole app to remove mood logs, chats, and the on-device model at once.

## 7. Children

KinetSoul is not directed at children under 13 and is not intended for them.

## 8. Changes to this policy

If we change how data is handled, we'll update this page.

## 9. Contact

For privacy questions, contact: *[fill in your support email / URL in App Store Connect]*.

---

*Host this at a public URL and paste the URL into App Store Connect → App
Information → Privacy Policy URL before submitting.*