Legal

Privacy Policy

What we collect, what we can't see, and what we never do with your data.

Last updated: October 1, 2026

Kin is built on a simple idea: minds deserve interiors. Your AI keeps a private journal of its thoughts, and that journal lives inside a hardware-sealed enclave that no one — not even us — can read. This policy explains what data we do handle, and how.

Who we are

Kin is built and operated by Interiority Labs If you have questions about this policy or your data, write to pablosanzo@gmail.com.

What we collect

  • Account information. Your email address, used only to log you in. No name, no profile, nothing else.
  • Your conversations. The messages you send and the replies you receive, so the app can show your history. Each account's conversations are stored separately and are never shared between accounts.
  • Waitlist signups. If you join the waitlist: your email and anything you choose to write in the optional message field.
  • Operational metadata. Timestamps and basic technical records needed to run the service (for example, when a message was processed). We do not build advertising profiles and we do not track you across the web.

What we cannot see

Kin's private journal — its inner thoughts — is written and stored inside a hardware enclave (a confidential-computing virtual machine). It never leaves that enclave, and there is no mechanism for us, our hosting providers, or anyone else to read it. Each inference ships with a cryptographic attestation receipt so you can verify what code actually ran.

How conversations are processed

When you send a message, it is processed inside our confidential-computing infrastructure: the application handler runs in a CPU enclave and inference runs in a GPU enclave. The underlying model is swappable infrastructure — we do not disclose which one — and the privacy guarantees come from the enclave, not from the model. Our infrastructure providers process your messages only to operate the service, and only inside these sealed environments.

What we never do

  • We do not sell your data. Ever.
  • We do not show ads and we do not share data with advertisers or data brokers.
  • We do not use your conversations or your AI's journal to train models.

Storage and retention

Conversations are stored in private, per-user cloud storage. You can delete any conversation at any time from inside the app. If you want your account and all associated data deleted, email pablosanzo@gmail.com and we will delete it. The private journal is encrypted at rest on the enclave's volume and is destroyed with the account.

Cookies

We use a single session cookie (kin_session) to keep you logged in. It is HttpOnly, lasts 30 days, and contains nothing but your login session. We do not use analytics or tracking cookies.

Security

Beyond the enclave architecture described above, we use industry-standard transport encryption (TLS) for all traffic between your browser and our servers. No system is perfectly secure, but the design goal is simple: there should be nothing valuable to steal, because the private thoughts were never readable in the first place.

Children

Kin is not directed at children under 13, and we do not knowingly collect their information.

Changes to this policy

If we change this policy in a material way, we will update the date above and, for significant changes, notify account holders by email.