What happens to your data

1. What Kindling processes

2. Data stored on your device

Kindling stores trip and moment structure, place labels and coordinates, your notes, private tags, prompt answers, voice recordings, import state, and sharing preferences in the app's private storage. Protected, optimized media copies keep saved trails useful even when an original is temporarily unavailable.

Kindling does not operate an account or cloud synchronization service. The first memory release does not continuously scan your library, track your location, identify faces, or upload personal media for AI processing.

3. Photos, microphone, maps, and sharing

The system photo picker lets you choose specific photos and videos without giving Kindling broad library access. Kindling reads available metadata from selected items to propose dates, moments, and places. Removing an item in Kindling never deletes the original from Photos.

Microphone access is requested only when you tap record. Voice files stay in protected app storage. Apple map and geocoding services may receive coordinates to return map tiles or place labels under Apple's privacy terms. Network failure never prevents you from saving a trail.

Sharing is user initiated. A privacy preview lets you choose whether an exported card includes the title, dates, places, notes, or sensitive moments. The system share sheet sends the finished artifact only to the destination you choose.

4. Product analytics

Kindling uses TelemetryDeck for fixed events such as picker opening, import completion, Trail viewing, feature use, export success, search result-count buckets, purchase outcomes, and notification opens.

Kindling does not send photos, videos, audio, filenames, coordinates, place names, trip titles, notes, tags, prompt answers, search text, persistent memory identifiers, receipts, or free-form errors to analytics. It does not use analytics for advertising, diagnosis inference, or individual profiling.

5. Purchases and Apple

Apple processes Kindling Pro payments, renewals, refunds, taxes, and subscription status. Kindling reads product and entitlement status through StoreKit. It does not receive your payment-card number or operate a purchase server.

6. Notifications and diagnostics

Optional Postcards From Your Past use generic lock-screen text. The app checks local privacy flags before choosing a memory; sensitive, hidden, archived, deleted, and excluded moments are not eligible.

Kindling does not include a third-party crash-reporting SDK. Apple may provide diagnostics if you choose to share analytics with developers in iOS Settings. Support requests are user initiated; do not email personal media or memory details unless needed for your request.

7. Website and service providers

This static website does not install advertising trackers or collect memory content. Vercel may process standard request information to deliver and protect the site. Relevant providers are Apple for system services and billing, TelemetryDeck for content-free analytics, Vercel for website hosting, and your email providers when you contact support.

8. Export, deletion, and your choices

• Use the bundled sample without sharing any personal photos.
• Decline microphone or notification permission without losing the core Trail.
• Hide a moment, mark it sensitive, or prevent resurfacing.
• Export your memory text and structure as JSON from Settings.
• Delete one trail or all Kindling data without contacting support.
• Clear disposable previews and exports without deleting memories.

Deleting the app removes its current local data from the iPhone. Apple device backups may retain an earlier encrypted copy under Apple's backup controls.

9. Children, changes, and contact

Kindling is not directed to children under 13. We may update this policy when the product or law changes and will post a revised effective date. Questions can be sent to hello@gentlelooplabs.com.