Privacy Policy

1. Introduction

Kin Health, Inc. ("the Company," "we," "us," or "our") operates meetkinhealth.com and the Kin Health mobile and web application (together, the "Service"). This Privacy Policy explains what information we collect, how we use and protect it, and the choices you have. It applies to information collected through the Service and through direct communications with us.

Kin Health is a consumer tool that records medical visits and turns them into clear, organized summaries so patients and the family members caring for them can remember what was said long after they leave the office. Because our Service is built around audio recordings of health-related conversations, we handle health information as sensitive personal data and take that responsibility seriously.

We are based at 500 Yale Avenue N, Suite 200, Seattle, WA 98109 and can be reached at [email protected].

2. Information We Collect

2.1 Information You Provide

We collect information you submit directly, including:

• Account registration details (name, email address, password);
• Contact and payment information when you subscribe to a paid plan;
• Medical-visit audio recordings you choose to capture using the Kin Health app;
• Notes, labels, or annotations you add to a visit record;
• Caregiver access authorizations, including the name and email of any family member you invite to share your records;
• The content of any support messages or feedback you send us.

2.2 Health Information

The core function of our Service is processing audio recordings of medical appointments. Those recordings and the summaries, transcripts, and action items we generate from them are health-related personal information. We treat this category as sensitive personal information. Specifically:

• Audio content is processed solely to produce your visit summary, transcript, and action item list; it is not used to build advertising profiles or behavioral databases;
• We do not use the content of your medical recordings to train, fine-tune, or improve our AI models without your explicit written consent;
• Visit records are stored in your account and are accessible only to you and any caregivers you explicitly authorize.

Kin Health is a consumer recording and summarization tool. We are not a HIPAA covered entity and do not provide clinical services. Your healthcare providers remain responsible for their own recordkeeping obligations. If your provider uses a separate platform governed by a Business Associate Agreement, that platform's policies apply to those records.

2.3 Information Collected Automatically

When you visit meetkinhealth.com or use the app, we automatically collect limited technical information:

• IP address and approximate location (city/region level);
• Browser type, operating system, device class;
• Pages visited, session duration, referring URLs;
• Cookie and similar identifiers (see Section 5 and our Cookie Policy).

2.4 We Do Not Knowingly Collect Children's Data

The Service is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided information through the Service, contact [email protected] and we will delete it promptly.

3. How We Use Information

We use the information we collect to:

• Provide the core Service: process audio recordings, generate visit summaries, transcripts, and action item lists, and make them available to you and any caregivers you authorize;
• Operate and maintain your account and subscription;
• Respond to support inquiries and customer-care requests;
• Send service-related notifications (appointment reminders, summary ready alerts, security alerts);
• Send marketing communications about Kin Health products and features, where you have not opted out;
• Detect, investigate, and prevent fraud or abuse;
• Improve the reliability and performance of our transcription and summarization technology, using only aggregated, de-identified signals unless you have given explicit written consent for identifiable use;
• Comply with legal obligations.

We do not sell personal information for monetary value. Where applicable state law treats certain advertising arrangements as a "sale" or "share," see Section 9 below.

4. Sharing of Information

We share personal information only as follows:

• Caregivers you invite: if you grant a family member or caregiver access to your records, they can view those records within the Service;
• Service providers: cloud hosting, encrypted storage, email delivery, and analytics providers act on our behalf under contractual confidentiality and data-processing terms;
• Investors and financial reporting: following our angel funding round, certain high-level, aggregated business metrics (not individual user records) may be reviewed by investors under confidentiality obligations;
• Legal compliance: we disclose when required by law, court order, or to protect rights, safety, or property;
• Business transfers: in the event of a merger, acquisition, or asset sale, user data may be transferred to the successor entity, subject to this Policy.

We do not sell personal information to third parties and do not share health-related recordings or summaries with advertisers.

5. Cookies and Tracking

We use cookies and similar technologies to operate the site, remember preferences, and measure usage. For full details and your opt-out options, see our Cookie Policy.

6. Data Retention

We retain personal information only as long as needed for the purposes described. Specific retention windows:

• Visit recordings and summaries: retained in your account until you delete them or close your account, after which they are permanently deleted within 30 days;
• Account information: retained for the life of your account plus 12 months after closure for dispute resolution and legal compliance;
• Marketing list contacts: inactive contacts are purged after 24 months;
• Server access logs: retained 90 days, then aggregated and de-identified;
• Support communications: retained 3 years, then deleted.

7. Security

We apply administrative, technical, and physical safeguards designed to protect your personal information, including TLS encryption for data in transit, AES-256 encryption for recordings at rest, restricted-access databases with least-privilege controls, and regular security reviews. No system is perfectly secure; we cannot guarantee absolute security. If we become aware of a breach affecting your account, we will notify you as required by applicable law.

8. Your General Rights

Depending on your jurisdiction, you may have rights including access to your personal information, correction of inaccuracies, deletion, and the ability to limit certain processing. To make a request, email [email protected]. We respond within the timeframe required by applicable law. You can also delete visit records and close your account directly from within the app at any time.

9. Washington Residents

Washington does not currently have a comprehensive consumer privacy statute. As a matter of policy, the Company extends the following baseline rights to all U.S. residents regardless of state of residence.

9.1 Baseline Rights

• Right to Know: request the categories of personal information we have collected about you.
• Right to Delete: request deletion of personal information you have provided, including visit recordings and summaries.
• Right to Correct: request correction of inaccurate personal information.
• Right to Opt Out of Marketing: unsubscribe from marketing emails using the link in each message or by emailing us directly.

9.2 How to Exercise

Email [email protected] with a description of your request and enough detail for us to verify your identity. We respond within 45 days.

9.3 Sector-Specific Rights

If you are protected by federal sector laws such as HIPAA or GLBA in another context (for example, a separate patient portal operated by your healthcare provider), those laws may give you additional rights with respect to data covered by them. The Kin Health consumer app is not a covered entity under HIPAA; your provider's portal is covered by its own notice of privacy practices.

9.4 California Visitors

If you are a California resident, you may also exercise the rights granted under the California Consumer Privacy Act ("CCPA") and California Privacy Rights Act ("CPRA"), including the right to know, the right to delete, the right to correct, and the right to opt out of sale or sharing. The Company does not sell personal information and does not "share" personal information for cross-context behavioral advertising. To submit a CCPA/CPRA request, email [email protected] with the subject line "California Privacy Request."

10. Changes to This Policy

We may update this Policy from time to time. Material changes will be reflected by a new "Last updated" date at the top of this page and, where appropriate, a notice in the app or by email.

11. Contact

Questions, requests, or complaints about our privacy practices can be sent to:

Kin Health, Inc.
500 Yale Avenue N, Suite 200
Seattle, WA 98109
Email: [email protected]
Phone: +1 (206) 730-0246