Privacy Policy

Kairo is a camera-based alarm and wake-up app for iOS (with limited Android support). This policy explains what we collect, why we collect it, who we share it with, and the choices and rights you have.

Kairo is operated by an independent developer based in Brazil. You can reach us about privacy at eder.rosaaa@gmail.com.

In short: we collect what we need to run your alarms, your account, your subscription, and the social features. Wake-up photos are checked by AI in real time and are not stored. You can delete your account and all associated data at any time from Settings → Delete Account.

• Account and identity: Email, name, and profile photo from Sign in with Apple or Google (Apple may provide a private-relay email), plus an internal user ID and authentication ID — to create and secure your account.
• Profile and onboarding answers: Your handle, display name, avatar configuration, country (derived from your device time zone, not GPS), age range, gender, sleep and wake habits, target wake time, chosen wake mission, and how you found Kairo — to personalize onboarding, your wake-up plan, and the social experience.
• Social graph: Friend requests, friendships, blocks, and abuse reports — to power friends, leagues, and the activity feed, and to keep the community safe.
• Usage and app activity: Alarms, wake-up logs (time, success, time to complete, mission type), streaks, league membership and XP, and alarm lifecycle events — to deliver the core product and track your progress.
• Wake-up photos: When your wake mission is a photo, the image is sent to our AI provider to confirm you're awake. Photos are processed in real time and are not stored by Kairo (see “Wake-up photos and AI” below).
• Device and technical data: Device model, iOS version, app version, locale, time zone, push token, and permission states (notifications, camera, alarm, Screen Time) — to deliver alarms and notifications reliably and to diagnose problems.
• Subscriptions and purchases: Transaction IDs, entitlement, and trial/renewal status from Apple and RevenueCat — to manage your subscription and unlock premium features.
• Notifications: An Expo push token — to deliver alarm, league, friend, and engagement notifications.
• Analytics: Product analytics events and device properties via PostHog — to understand how features are used and improve the app.

Some wake missions ask you to take a photo to prove you're awake. When you do, the photo is sent to our AI inference provider, Groq, which analyzes it in real time and returns a pass/fail result and a confidence score.

We do not store these photos. The image is processed transiently for validation only. Kairo keeps the result of the check — such as whether it passed, the mission type, and a confidence score — but not the picture itself.

Groq processes these images solely as our service provider, to perform the validation we request. Their handling of data submitted through their API is governed by Groq's terms and data processing agreement.

We do not sell your personal data. We share it only with the service providers (sub-processors) we rely on to run Kairo. Each link below goes to that provider's privacy policy.

• Apple — Sign in with Apple, in-app purchases, and push notification delivery.
• Google — Google Sign-In authentication.
• Supabase — Database, authentication, file storage, and server functions (data hosting).
• RevenueCat — Subscription and purchase management.
• PostHog — Product analytics (PostHog Cloud, United States).
• Groq — AI inference used to validate wake-up photos and text.
• Expo (EAS) — App infrastructure and push notification delivery.
• DiceBear — Avatar image generation from a seed.
• Vercel — Website hosting.

You can access, correct, or delete your personal data at any time:

• Delete everything: open the app and go to Settings → Delete Account. This permanently removes your account and the data associated with it.
• Access or correct: most profile data can be edited in the app; for anything else, email us.
• Notifications: turn off push notifications in your iOS Settings, or disable specific categories (such as friend or engagement notifications) in the app.
• Analytics and activity feed: you can opt out of sharing your activity to the feed in the app's settings.

To make a privacy request, email eder.rosaaa@gmail.com. We may need to verify your identity before we act on it.

• Account, profile, social, and usage data: kept until you delete your account, after which it is removed (subject to the limited exceptions below).
• Wake-up photos: not stored — processed transiently for validation only.
• Analytics events: retained by PostHog according to our analytics configuration.
• Subscription and transaction records: retained as long as needed for billing, tax, and fraud-prevention purposes.

After you delete your account, we may retain limited records where required to comply with the law, resolve disputes, or prevent fraud and abuse.

Kairo is operated from Brazil, and several of our providers (including Supabase, PostHog, Groq, RevenueCat, Expo, and Vercel) store and process data on servers in the United States. When your data is transferred internationally, we rely on those providers' safeguards and applicable legal transfer mechanisms.

Kairo is not directed to children under 13, and we do not knowingly collect personal data from children under 13. The minimum age to use Kairo is 13. If you believe a child has provided us with personal data, contact us and we will remove it.

Depending on where you live, you may have additional rights:

• European Economic Area and UK (GDPR): rights to access, rectification, erasure, restriction, portability, and objection, and to lodge a complaint with your data protection authority. Our legal bases are performance of our contract with you, your consent, and our legitimate interests in operating and improving Kairo.
• Brazil (LGPD): rights to confirmation of processing, access, correction, anonymization or deletion, portability, information about sharing, and to withdraw consent at any time.
• California (CCPA/CPRA): rights to know, access, correct, and delete your personal information, and not to be discriminated against for exercising them. We do not sell or share your personal information as those terms are defined under California law (Do Not Sell or Share My Personal Information).

To exercise any of these rights, email eder.rosaaa@gmail.com.

We may update this policy as Kairo evolves. When we make material changes, we'll update the date at the top and, where appropriate, notify you in the app. Continued use of Kairo after an update means you accept the revised policy.

Privacy and data requests: eder.rosaaa@gmail.com.

Terms of UseEULAAccount Deletion