Kamsie Privacy Policy
Draft — effective on launch Last updated: October 15, 2026
This Privacy Policy explains what [Kamsie Legal Entity Name] ("Kamsie", "we", "us") collects when you use the Kamsie app and kamsie.app, why, how long we keep it, and the choices and rights you have. Kamsie is built on a simple rule: collect what the live moment needs, and no more.
Our promises, in plain words: we do not sell your personal data. We do not run advertising or ad trackers. We do not build follower counts or public popularity scores. We do not upload your address book — contact matching uses one-way hashes, described below.
1. What we collect
Account and profile
- Your email address (for sign-in codes and account notices). We also store a SHA-256 hash of your email address, used for contact matching.
- A legacy phone number and its hash may be stored if your account was created before email sign-in, or if you added one.
- Your handle, display name, initials, date of birth (used to confirm you are 18+; your age is never displayed), and city if you provide one.
- Your Aura palette — the generative colour identity you choose and that evolves with your use.
Live activity
- Drops: video files recorded in the app (up to 60 seconds, front and/or back camera where your hardware allows), stored by our hosting provider until they expire 60 minutes after the Drop ends, together with Drop metadata (time, approximate area, status).
- Live viewing: when your Circle watches a Drop live, the video is streamed through our streaming provider in real time. Kamsie does not record the stream. Streaming creates transient technical data (session records, track metadata) needed to run and close the session.
- Presence (Pulse): while you are live, your approximate location is reduced to a coarse grid cell (about 0.08° — several kilometres across) and shown to nearby users as presence. We do not publish or sell precise location. Pulse queries and presence heartbeats are recorded with timestamps so rooms and live-time can work.
- Rooms and live time: room membership, heartbeats, accrued live time with each person, Resonate taps, and pair live-seconds — the measurements that decide Circle membership and unlock messages at 30 minutes (1800 seconds) together.
- Keeps, Locks, and waves: which Drops you Kept (one per day), Lock records you created jointly in person, waves sent and returned, and the Evening Gathering attendance needed to run it.
- Messages: message content in threads you have unlocked, delivery metadata, reports, and blocks.
- Safety data: reports you make, blocks, enforcement actions, and the content they concern, kept so bans mean something and appeals can be reviewed.
Contacts (hashed, never uploaded raw)
If you choose to find people you know, the app hashes email addresses and phone numbers from your contacts on your phone using SHA-256, and sends only the hashes. Hashes that match a Kamsie user identify that person to you. Raw names, emails, and numbers from your address book never leave your phone, and we never store a copy of your address book. You can decline contacts access entirely and use handle search and invites instead.
Device and technical
- Push token (Firebase Cloud Messaging) if you turn notifications on, so we can tell you when your Circle is live. You can turn this off in the app or your device settings at any time; a DELETE request removes your token from our server.
- Device model and OS version class, app version, crash and error data, and network (IP) address, used for security, rate limiting, debugging, and abuse prevention.
- Authentication data: sign-in codes are stored only as SHA-256 hashes and expire after 10 minutes. Session tokens are random; only their hashes are stored, and sessions expire after 30 days.
Website
- If you join the waitlist, your email address and your seat number.
- The site's interactive demo stores one thing in your browser's local storage: whether you used the demo Keep today, so the demo can obey the one-Keep-per-day rule. See the Cookie Policy.
2. Why we use it
We use the data above only to: run the live Service (Drops, Pulse, rooms, Circle, messages); authenticate you; measure live time together; enforce the one-Keep-per-day rule and other product laws; keep people safe (moderation, bans, child-safety reporting); send the notifications you asked for; prevent fraud and abuse; comply with the law; and improve reliability. We do not use your data for advertising, and we do not sell it or share it for cross-context behavioural advertising.
3. Who processes data for us
We use a short list of processors, only for the jobs named:
- Cloudflare, Inc. — hosting, database (D1), media storage (R2), and live streaming (Calls/SFU), and email delivery infrastructure where enabled.
- Google LLC (Firebase Cloud Messaging) — delivery of push notifications you enable.
These processors act on our instructions and their own security commitments. We do not share your data with data brokers, ad networks, or analytics resellers. We may disclose data where the law requires it (for example, a valid court order), to report child-safety violations to NCMEC or law enforcement, or to protect someone from serious harm.
4. How long we keep it
| Data | Retention |
|---|---|
| Drop video files | Until 60 minutes after the Drop ends, then deleted from storage |
| Live stream sessions | Transient; session records closed at Drop end |
| Sign-in codes | 10 minutes (stored hashed) |
| Session tokens | 30 days, hashed; revoked on sign-out or deletion |
| Account and profile data | While your account exists; deleted on account deletion except as below |
| Pair live-time, Circle, Keeps, Locks | While your account exists (they are the product's memory) |
| Messages | While your account exists or until you or the other participant deletes the thread/account |
| Push tokens | Until you turn notifications off, sign out, or delete your account |
| Reports, blocks, enforcement records | [Up to 2 years] after the account or report, to enforce bans and comply with law |
| Server and security logs | [Up to 30 days], unless needed for an active investigation |
| Waitlist email | Until launch invitations are complete or you ask us to remove it |
Account deletion in the app deletes your account, profile, Drops, Keeps, messages, and push tokens, and ends your sessions. Content another user Kept of their own Drops is theirs; your own Drops that others Kept are removed when you delete your account, as described in the Terms. Some records (for example, child-safety reports, fraud and ban records, and records the law requires) may be retained for the periods above even after deletion, and are never used to rebuild your profile.
5. Your choices and rights
- In the app: edit your profile, turn push on or off, manage blocks, download nothing because there is nothing to download — your Keeps and Locks live in the app — and delete your account permanently (You → Leave Kamsie).
- Access and copies: email privacy@kamsie.app to request a copy of the personal data we hold about you.
- Correction and deletion: you can correct most profile data in the app; for anything else, email privacy@kamsie.app.
- Opt out of "sale"/"sharing": we do not sell or share your personal data as those terms are defined in California law, and we never will. There is no toggle because there is nothing to toggle.
- California (CCPA/CPRA): you have the right to know, delete, correct, and not be discriminated against for exercising your rights. We do not sell or share personal information, do not use sensitive personal information beyond what is needed to provide the Service (precise location is not collected; coarse presence is described above), and do not knowingly collect data from anyone under 18 — Kamsie is adults-only.
- EEA/UK (GDPR): our legal bases are contract (running the Service you signed up for), legitimate interests (safety, security, abuse prevention), consent (contacts access, push notifications, waitlist email), and legal obligation. You have rights of access, rectification, erasure, restriction, portability, and objection, and the right to complain to your supervisory authority. Contact privacy@kamsie.app.
- We respond to verified requests within the time the applicable law requires (generally 30–45 days). We may need to confirm you control the account's email address.
6. Location, specifically
Pulse shows coarse presence: your location is snapped to a grid cell of about 0.08° before it is shown to anyone, which places you in a neighbourhood-scale area, not at an address. We do not display your precise GPS location to other users, and we do not sell location data. If you deny location permission, Pulse and nearby features will not work, and that is a perfectly good way to use — or not use — Kamsie.
7. Children
Kamsie is for adults 18 and older. We do not knowingly allow accounts for anyone under 18. If you believe someone under 18 has an account, contact privacy@kamsie.app or report the account in the app. See the Child Safety Policy for our zero-tolerance approach to child sexual abuse material.
8. Security
We use hashed credentials and codes, encrypted transport, access controls, and rate limits. No system is perfectly secure; if we learn of a breach affecting your personal data, we will notify you and regulators as the law requires.
9. International transfers
Our processors operate globally. If you use Kamsie outside the United States, your data is transferred to and processed in the United States and other countries where our processors operate, under the safeguards those processors provide.
10. Changes and contact
We will announce material changes to this Policy in the app or by email before they take effect, and update the date above.
[Kamsie Legal Entity Name] · [Mailing Address] privacy@kamsie.app · legal@kamsie.app · support@kamsie.app