Privacy Policy
Kinu (“the App”) is provided by Zhiyun (Chongqing) Housekeeping Co., Ltd. (智云(重庆)家政有限责任公司, “we”, “us”). We take your health and personal information seriously. This policy explains how the App collects, uses, stores and protects information on iPhone and Apple Watch, and how you can manage it. Please read it carefully before using the App, especially the parts in bold. If this English version differs from the Chinese version, the Chinese version prevails.
Your health records are read and processed on your device by default. Only when you use Together and give consent for each item do the summaries you choose pass through our servers to the one person you have connected with and confirmed; and only when you report a missed nap and agree each time is the data for the period you choose uploaded to us to improve nap detection. We do not sell your personal information, do not share data with advertisers, and do not show ads in the App.
1. Information we process
1.1 Health data (processed on device by default)
With your permission in the system prompt, the App reads activity and workouts, heart and vital signs, sleep, body measurements, date of birth and sex, mobility and hearing data from the Health app to build your health overview, trend charts and recovery analysis, and to estimate a body age reference from VO₂ max. When you choose to import health data or start a recording, the App writes the activity, heart rate, sleep and workout data you select to the Health app; when you save your height and weight in your profile, the App writes them to the Health app. The date of birth and sex you enter or that the App reads from Health are kept only on your device and are not uploaded. Health export files you import are also parsed on your device only.
The period dates, flow and symptoms you log in the App are kept only on your device and are not written to the Health app. The App combines these records with sleeping wrist temperature and resting heart rate from Health, on your device, to estimate your next period and fertile window; nothing is uploaded for these estimates.
Except for summaries you actively agree to share in Together and missed-nap feedback you choose to send, health records are not sent to our servers. Health data is not used for advertising or marketing. You can change access at any time in iPhone Settings → Health → Data Access & Devices → Kinu.
1.2 Location (optional)
With your permission, the App uses your approximate location while in use to fetch local weather and environmental information from Apple’s weather service (WeatherKit). Location is handled by Apple; our servers do not receive or store it. Declining does not affect other features.
1.3 Motion & Fitness (optional)
For neck posture features, the App reads head-motion sensor data from AirPods, analyses head posture on your device and gives reminders. This data is not uploaded.
With nap detection on, Kinu on Apple Watch reads the system’s activity type (such as walking or driving) and records wrist acceleration, which the watch summarizes into two numbers per minute (change in wrist angle and fine jitter) to tell whether you are asleep. Raw sensor data is kept by the system on the watch for about 3 days; the per-minute summaries sync to your iPhone and are kept for 4 days for nap replay and feedback. This data is used only on your devices and is not uploaded unless you send missed-nap feedback.
1.4 Kinu account (optional)
You can use the App without signing in. If you choose Sign in with Apple, we process:
- the unique account identifier provided by Apple, and an account identifier generated to link purchases. When you use Sign in with Apple, we do not collect your Apple account name or email address;
- the authorization refresh token returned by Apple (stored encrypted and used only to revoke Sign in with Apple when you delete your account);
- session information for signed-in devices: device name, sign-in time and last-used time;
- the preferences you choose to sync: nickname, avatar icon, appearance mode, metric order and hidden metrics, focus and rest durations, sound and reminder switches. Preferences never contain health data.
1.5 Together (optional)
Together requires a Kinu account and lets you and one mutually confirmed person see recent status and send gestures of care. Each account can connect with one person at a time. If you do not use Together, no Together health summaries are uploaded.
Connection. We process both account identifiers, nicknames and preset avatars, connection and sharing settings, and the status and time of invitations, confirmation, disconnection and blocking. One-time invitation codes are stored only as hashes and are valid for 24 hours. We also record the sharing items you consent to, the time and the policy version.
Summaries you choose to share. Health information is sensitive personal information. Every sharing item is off by default. Your iPhone uploads only the items you select after you give separate consent when first enabling them:
- Body load: a status level and estimation time, without the numerical load index;
- Sleep: the duration, bedtime and wake time of the latest main sleep;
- Resting heart rate and heart rate variability (HRV): the respective values and measurement times;
- Today's steps and Activity ring progress;
- Mood: a mood you pick manually, which expires after 24 hours. It does not come from Health and is not inferred by Kinu;
- Period status: whether you are on your period today and which day it is, or roughly how far off the next one is (such as “in about 5 days” or “could start any day”), with its update time. It is generated on your device from the period records you log in the App and does not include your fertile window, ovulation day, flow, temperature or history;
- Period symptoms: only while you share your period status and are on your period, the symptoms you logged that day (such as cramps or fatigue).
Our servers keep only the latest summary for each item, replacing the previous one. We do not upload raw health records, historical charts, or other health data such as blood oxygen, respiratory rate or wrist temperature. Summaries are linked to your account and connection and provided to your confirmed partner. This is not end-to-end encryption: our servers can process these summaries.
Gestures of care. We record the type, asset identifier, sender, recipient and time of taps, built-in stickers and fixed short phrases to deliver them and display the last 7 days of interactions. Free-form chat and photo uploads are not supported.
Push notifications. Device push tokens are stored encrypted and linked to accounts, device types and sign-in sessions. Gestures are delivered through the Apple Push Notification service (APNs). Notifications contain the sender's nickname, gesture type and event identifier, without health values or health summaries. You can turn off receiving alerts in Together or disable notifications in system Settings.
Apple Watch. Enabling Together on your watch issues a restricted watch session linked to the iPhone sign-in session, for reading Together summaries, sending and receiving gestures and managing watch notifications. It cannot change sharing settings. Health summaries are uploaded by iPhone.
Reports and feedback. We process the accounts involved in a report, its reason, any note you choose to provide, and the types and times of interactions from the last 7 days for review and action. Reports do not automatically include health summaries, and the reported person is not notified. If you contact us by email, we also process the contact details and content you provide. Please avoid sending health information unrelated to your request.
Withdraw sharing. You can turn off any item, pause sharing, disconnect or delete your account. Once the action succeeds, our servers stop providing and delete the relevant summaries. Content on the other person's device may remain until the next refresh, and longer while offline. We cannot take back anything they have already seen, screenshotted or passed on.
1.6 Missed-nap feedback (optional)
If you slept but Kinu recorded nothing, you can report it from nap detection settings (open them from the watch nap detection status under Daytime naps on the Sleep page). Feedback requires a Kinu account and your separate agreement before every submission; the App lists what will be uploaded before you agree. Health records cover only the period you choose plus an hour either side (up to 6 hours). Collection diagnostics needed to investigate missing data are also included:
- heart rate readings, walking and workout periods, and per-minute wrist motion summaries for that period;
- start and end times and source app names of sleep already in the Health app for that period;
- the personal baselines used for detection (sleeping and quiet waking heart rate, wrist stillness limits) and Kinu’s detection result for that period;
- the period you chose, your optional note (up to 200 characters), app version and time zone;
- watch collection diagnostics: watch app version, nap setting, activity and sensor-recording permissions, recording request times, summary progress, gaps and returned counts, and recording requests and skip reasons, raw sample counts, summary filtering counts, and gap retries, recovery, abandonment and expiry associated with the feedback period. Detailed diagnostics are kept on-device for 4 days, filtered to the selected period plus related preceding recording requests before upload, and marked if incomplete due to capacity limits. Raw acceleration values are not uploaded.
Feedback is linked to your account, used only to analyse and improve nap detection, visible only to administrators we authorize, and each view is logged. It is deleted automatically after 180 days; you can delete any submission at any time from the feedback page, and deleting your Kinu account deletes it too.
1.7 Purchase information
Payments are handled by Apple; we never receive your card or payment details. The App verifies App Store receipts on your device to unlock membership. If you are signed in to a Kinu account, we store Apple-signed transaction information (original transaction ID, product, environment and expiry date) to link your membership across devices.
1.8 Usage statistics (on by default, can be turned off)
To understand stability and usage and to improve the App, we collect the following by default, linked to a randomly generated install identifier and, if you are signed in, to your Kinu account:
- device and app information: device model, OS version, app version, language, appearance mode;
- Apple Watch pairing state, model and OS version, and watch complication usage;
- permission states: whether Health access has been requested (the system does not let apps know whether you allowed specific data) and location permission state;
- subscription state and plan, and onboarding completion;
- usage: events such as launches, screen views, purchase results and API errors, plus foreground time and number of opens.
Usage statistics never include health values, your nickname or any text you enter, nor Together summaries, moods, interaction content or the other person’s personal information. You can turn them off in Me → Data & Sync → Privacy → Usage Statistics. Reporting stops immediately and unsent events on the device are cleared.
Feedback
When you submit feedback, we receive your text, Kinu account identifier, app version and submission time to address issues and improve the app. Only authorized administrators can view it; access and review actions are audited. Do not include health records, passwords or other sensitive information. Deleting your Kinu account also deletes its feedback.
2. How we use information
- to show your health overview, trends and analysis on your device;
- to provide weather, posture reminders, focus timer and other features;
- to provide sign-in, preference sync across devices and device management;
- to unlock, restore and link membership;
- with your consent to use Together, to provide selected summaries, mood and gestures of care, and handle reports and service feedback;
- when you send missed-nap feedback and agree, to analyse that period’s data and improve nap detection;
- to measure usage, troubleshoot problems and improve the product;
- to keep accounts and services secure and to meet legal obligations.
We do not use your information for purposes not described here. If that changes, we will ask for your consent first.
3. Third-party services
The App does not include third-party advertising or analytics SDKs. The following services are provided by Apple and governed by the Apple Privacy Policy: Health (HealthKit), Sign in with Apple, App Store purchases (StoreKit), Weather (WeatherKit) and the Apple Push Notification service (APNs).
Our servers and database are hosted on Alibaba Cloud within the People’s Republic of China. The cloud provider only supplies infrastructure and does not use your information for other purposes.
The person you choose to share with. Together provides the summaries, mood, nickname and avatar you agree to share to the one mutually confirmed user. Otherwise, except for the processing necessary to provide the services described above, legal requirements or protecting personal and property safety, we do not share, transfer or publicly disclose your personal information to third parties.
4. Storage and retention
- Raw health records stay on your device and in Health. Together servers store only the latest summaries you consent to share and delete relevant summaries once turning off an item, pausing sharing, disconnection or account deletion succeeds;
- Mood becomes unavailable after 24 hours and is deleted by periodic cleanup; gestures and related push delivery records are kept for 7 days; invitation codes stop working once used or expired and invitation records are kept for 30 days;
- Blocks are kept until removed or a related account is deleted; reports are kept for 180 days for review and are deleted when an account associated with them is deleted;
- Push tokens are linked to sign-in sessions and removed when the device unregisters, the related session is revoked or cleaned up, or the account is deleted. Watch sessions are valid for up to 30 days, can be revoked by iPhone and are cleaned up after expiry;
- account, preferences, device sessions and purchase links are kept until you delete your Kinu account; sign-in sessions are valid for 30 days;
- usage events are kept for 180 days, and daily activity records and device information for 400 days, after which they are deleted automatically;
- missed-nap feedback is kept for 180 days and then deleted automatically; you can delete it at any time;
- our servers and database are located within the People’s Republic of China. If you choose to share with a Together partner abroad, selected content is provided to that person’s device. When you use Apple services, related information is processed by Apple under its privacy policy.
5. Security
Traffic between the App and our servers is encrypted with HTTPS; Apple authorization tokens are stored encrypted; and only hashes of session tokens are stored, and push tokens are stored encrypted. Together summaries are sent over HTTPS, but this is not end-to-end encryption. Access is limited on a least-privilege basis. No system on the internet is perfectly secure; if a security incident affecting personal information occurs, we will notify you and take remedial action as required by law.
6. Your rights
- Access and correction: view and edit your nickname, avatar and other preferences, and see your signed-in devices in the App;
- Withdraw permission: turn off Health, Location or Motion & Fitness access in system Settings, and turn off usage statistics;
- Delete nap feedback: on the nap feedback page you can see what you have sent and delete any submission, which also deletes it from our servers;
- Manage Together: in Me → Together you can view and adjust shared items, turn individual items off, pause sharing, turn off receiving alerts, disconnect or block the other person;
- Sign out and manage devices: sign out of the current device or remove sessions on other devices;
- Delete your account: delete your Kinu account in Me → My Account. This deletes your account, preferences, device sessions, purchase links, device statistics, Together connection, summaries, gestures, push tokens, watch sessions, nap feedback and reports associated with that account from our servers, unlinks past usage events from the account, and attempts to revoke Sign in with Apple. Deleting the account does not delete records in the Health app and does not cancel App Store subscriptions — please cancel them in your Apple subscription settings;
- To obtain a copy of your personal information, exercise other rights or make a complaint, contact us below. We will reply within 15 business days.
7. Children
The App is intended mainly for adults. If you are under 14, please read this policy with a parent or guardian and use the App only with their consent. Because Together involves sharing health information with another person, children under 14 should not use that feature. A guardian who believes a child has provided personal information without consent may contact us to have it deleted.
8. Health notice
Health trends, scores and reference ranges shown in the App are for understanding your own records only and are not a medical diagnosis or treatment advice. If you feel unwell, please consult a healthcare professional.
9. Changes to this policy
We may update this policy as the product or the law changes. Updates will be published on this page with a new date, and material changes will be highlighted in the App.
10. Contact us
Operator: Zhiyun (Chongqing) Housekeeping Co., Ltd. (智云(重庆)家政有限责任公司)
Email: kinu@spact.com