Effective July 31, 2026

Recipient and project-subject privacy

Someone is making
a private voice gift about you.

This notice explains what we may receive from the organizer and contributors, why we use it, who can access it, and how to exercise your choices.

Notice version 2026-07-31-v8

1. Why you are receiving this notice

An adult organizer is creating a private Kinvoria voice gift about you, or has identified you as an adult recipient, project subject, or intended listener. We may therefore receive personal information about you from that organizer and from invited adult contributors rather than directly from you.

The organizer must give this notice to every project subject before creating the project and confirm that every recipient, project subject, contributor, and intended listener is already at least 18. The service must not be used for a minor, even with a parent or guardian's permission.

2. Controller and contact

This notice describes how personal information about recipients and project subjects is handled through the Kinvoria service. Privacy questions and requests may be sent to the contact published below. Google and Paddle act under their own privacy notices for sign-in and payment services.

Controller and service operatorKinvoriaContact: [email protected]

3. Information and sources

The organizer may provide your name or group name, adult age for a birthday gift, occasion, event date, question, locale, timezone, and project instructions. We do not require or store your full date of birth. Contributors may provide their own name, relationship, voice, and stories or memories about the adult project subjects. A final private MP3 may contain those recordings and chapter information.

We also process limited technical records associated with private links, uploads, playback, security, deletion, and support. Do not include medical, financial, government-identifier, precise-location, or other unnecessary sensitive information, or any minor's name, voice, story, image, or other personal information.

4. Purposes and legal bases

We use the information to collect authorized adult contributions, assemble and deliver the requested private voice gift, provide private playback and download, process removal requests, secure the service, prevent abuse, troubleshoot failures, and answer support requests.

Depending on the person and applicable law, processing is necessary to perform or prepare the organizer's service contract, to act on a contributor's request, to comply with legal obligations, or for our legitimate interests in delivering a limited private gift securely. Where consent is required for a particular use, it is requested separately. We do not sell the information, use it for targeted advertising, train AI models with private voices or stories, identify speakers biometrically, or make solely automated decisions with legal or similarly significant effects.

5. Who receives it and where

The organizer can manage contributions and access the completed radio. A person holding a valid private contribution link can view the limited project details made available through that link and gives one explicit set of confirmations when finally submitting. Adult intended listeners with the private listening link can access the final gift only after the adult-access gate. Anyone who receives a private link may be able to use it, so links must be kept confidential.

Service providers may process limited information for their assigned work: cloud infrastructure and private storage providers for core service operation and audio storage in Singapore; Google for organizer sign-in; Paddle for checkout; and a transactional email provider for essential service messages. Provider-managed processing may occur in the locations described in each provider's privacy documentation, including outside your country. Where transfer rules apply, we use an available legal mechanism and provide further safeguard information on request.

6. Retention and deletion

Original uploads are queued for deletion 30 days after the first final render. The processed radio is hosted for 90 days and then queued for deletion. An unpaid unfinished project is redacted and its audio queued for deletion 30 days after the collection deadline. Project deletion revokes links immediately, redacts principal personal fields, and triggers durable media deletion; a later pass removes remaining project content after physical cleanup is confirmed.

Some transaction, consent, security, dispute, and deletion records may be retained for a separate period required for accounting, consumer protection, fraud prevention, legal claims, or a legal hold. The full retention table is in the general Privacy Notice.

7. Your choices and rights

Depending on your location, you may ask to access, receive, correct, delete, restrict, or object to processing of your information, withdraw consent for future processing, use an authorized agent, or appeal a decision. You may also complain to your local privacy regulator. We will not discriminate against you for making a privacy request.

Use the private removal link if you contributed a recording, ask the organizer to delete the project, or contact us and describe your relationship to the project. We may verify your identity or possession of the relevant private link. A downloaded copy held by another person cannot be remotely recalled.