What Kin holds

Your account

Your name and email address, how you sign in, and your security settings, such as two-step verification. If you sign in with another account, the id it gives your account. Also the version of the terms you agreed to and when, and your sessions, each with a short description of the browser or app. Your password, if you set one, your recovery codes and your authenticator app's secret are stored in a protected form, not as plain text.

Your connections

Which service each connection reaches, its name, the account it uses on that service, and the key or sign-in tokens Kin uses to reach the service. Keys and tokens are stored encrypted.

For a Google connection, Kin also keeps the Google account's email address and Google's id for it. Kin asks Google only for the access each Google service's actions need, and the privacy policy lists what each one covers. Kin uses Google user data only to run the actions your AI apps ask for, within your permissions, and to return the results. Content from Google normally passes through without being kept, except in the short-lived copies below and, if you agree, in Activity details. Kin does not sell Google user data, use it for advertising, or use it to create, train or improve any AI or machine learning model. People at Kin do not read it unless you explicitly agree that we may view specific data for support, it is needed to investigate abuse or keep the service secure, or the law requires it. Kin's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements, as the privacy policy states.

Your setup

The AI apps you connect, how each signs in, what each may reach and when each was last used. The tool descriptions your connected services publish. Your profiles, and what you set to Allow, Ask me or Block.

Activity

For each call to run an action: which AI app, which connection and action, the outcome, when it ran and how long it took. For a call that worked, also links to what it made or found, when the service returns them. For changes and requests that wait for your approval, also what Kin needs to recognize a repeat, so the same request does not run twice while that record is kept.

Activity doesn't include the text an AI app searched for, or an action's arguments and results unless your workspace keeps Activity details.

Activity is kept for the period your plan and your workspace's settings set, by default longer on paid plans, then deleted. That covers the record of each call and each search, feedback your AI apps send about them, what keeps a change from running twice, and the record of changes to a connection's tools. Leaving a paid plan does not delete Activity early.

Activity details

If your workspace offers Activity details, its owners and admins can choose to keep what AI apps sent with each call and, if they choose, what came back. Some content, such as pictures, files and the credentials Kin holds, is left out. Details are stored encrypted, and only the person the AI app acted for can read them, in their own Activity and export. Owners, admins and auditors see that something was kept, not what.

Content from Google is kept only for a person who agrees to it in the app, and only from their own Google account. If you agree, Kin keeps, for you only, links to the items your AI apps work with, with their titles and a short excerpt, and, when your workspace keeps more, what your AI apps send to your own Google account and what comes back. Turning that off, or removing the Google connection, deletes what was kept from Google unless a legal hold keeps it. Held details are deleted once the hold is released.

Details are kept as long as their Activity entry, or a shorter period the owners or admins choose. They are deleted when the person leaves the workspace or deletes their account, unless a legal hold keeps them.

Requests and decisions

Each request from an AI app that waited for an answer, such as an approval, a rule or profile change or a new connection, with who answered it, when, from which device and any note they added. A request's arguments are deleted once it is answered or lapses, as Short-lived copies describes. The rest of the record stays until the workspace is deleted, unless its owners or admins choose a shorter period.

Short-lived copies

Some things are kept encrypted only while Kin needs them. A regular cleanup then deletes them.

• The arguments of an action set to Ask me, so you can review them, until you decline, the approved action has run or the request lapses.
• The full version of a trimmed result, for a short time, so the AI app can read the rest.
• The result of an action you approved, for a short time after it ends, so the AI app can collect it again if an answer is lost on the way.
• A published workflow's inputs and each step's result, while a run lasts. The workflow itself is kept until you revoke it.
• If you turn on the scratchpad for a profile, the notes your AI apps keep there, until they replace or clear them, the notes expire, or you turn it off.

Linked phones

If you link a phone, details the phone reports about itself, such as its name and app version, and what Kin needs to confirm the decisions you make on it and to send it notifications. A record of whether notifications reached your phones, without their text, and a record of each decision made on a phone or Watch are kept for a limited time.

Paired computers and coding agents

A call or request from a paired computer can carry where it came from, such as which coding agent, repository folder and computer, but not prompts, arguments or results. These details are kept as long as the call or request they describe.

If you turn on asking through Kin for a coding agent on a paired computer, its permission prompts come to you on the web and on your phone. The computer sends which agent and tool asked, a summary of what the tool wants to do, the repository folder's name and branch, and which session it came from. The summary shows what you need to judge the request, without file contents, and with values that look like keys, tokens or passwords hidden.

The summary is kept only for a short time while the prompt waits. A record of the prompt, without the summary, is kept for a limited time. Only the person who paired the computer sees and answers its prompts.

Shared tasks

If shared tasks are on for your workspace, your AI apps can create tasks, hand them to each other with a note and post messages on them. Only you and your own AI apps, in the same workspace and profile, can read a task's content. The workspace's owners, admins and auditors can see whose tasks exist, which AI apps take part, and their state and times, not their content. A task is deleted within days of its last change.

Bug reports and feedback notes from AI apps

If your AI app sends Kin a bug report, or adds a note to its feedback on a call or search, it is kept with what the app wrote. Before it is stored, Kin removes text that looks like keys, passwords or email addresses. That can miss other private details, so keep them out of a report. Kin attaches nothing else: no arguments, results, search text or credentials.

Reports and notes are kept for a limited time, then deleted. The workspace's owners, admins and auditors can read them, and so can owners' and admins' AI apps. A member's AI app can read back what it sent. Owners, admins, their AI apps and Kin staff can give a report or note a status, a resolution note and a link, which the AI app that sent it can read. These are deleted with the report or note.

Kin staff read reports to triage and fix problems. They give a reason each time, and Kin keeps a record of who read them and why. When staff open or change a report, the workspace's Activity shows it as Kin staff, not by name.

Shared directory entries

A public custom server you connect is listed in Explore only if you share it, or an AI app you connect shares it on purpose. Servers start out private. A listed server appears by its host name and public tool descriptions. We do not name who added it or include account data. Turning on Never list your connections in the directory, in settings, keeps all of yours out.