Kynto

Privacy Policy

Kynto is run by ROBINABC LLC. This page tells you what Kynto collects about you, why, who else receives it and how you delete it.

Kynto is for adults

You must be 18 or older to use Kynto. When you sign up you confirm that you are 18 or older and agree to the terms: on the signup card, or on the step that finishes a signup with Google, Apple, Twitch, Discord or Kick. Kynto does not finish a signup without it. Kynto does not keep a date of birth.

What Kynto collects

Kynto collects what it needs to run your account and the world you are in.

  • Your account. Your email address, your username and a one-way hash of your password. Kynto never stores the password itself. If you sign in with Google, Apple, Twitch, Discord or Kick, Kynto also receives your id at that service, your email address, your name and your profile picture. If you sign in with Apple, Kynto also keeps an encrypted token from Apple, used only to end Kynto's access to your Apple ID when you delete your account.
  • Your profile. What you add to it, such as a picture, your about text, a website and a phone number, and your settings.
  • What you say and make. Your messages, the files you upload, the snapshots you take, your rooms, items, chains, pets and avatar, your friends, the people you block, the reports you send and what you say to an AI character. Kynto keeps the text of a message you delete, for moderation, and stops showing it.
  • Calls and streams. Calls and shares travel between the people in them. Kynto passes them along and does not record them. When you go live, Kynto sends your stream to the destinations you set up and holds the last few seconds so a moderator can check it. It keeps no recording.
  • How you use Kynto. The room you are in, where you last stood, when you sign in, how long you are online and the moderator actions that involve you.
  • Your device and connection. Your IP address, and details of your browser, app and device, such as their versions, your language, your time zone, your screen size and the hardware the device has. Kynto works out your country from your time zone and collects no precise location.
  • Diagnostics. How long the app took to start and the errors it runs into.
  • Payments. What you bought, the amount and Square's id for the payment. For a plan, Square's ids for your customer record, your card and your subscription. Kynto does not receive your card number.
  • Notifications. The push subscription your browser gives Kynto, or the notification token the iPhone or Android app gives Kynto, when you turn notifications on, and a log of the notifications Kynto sent you.
  • Streaming accounts you connect. Their access tokens, API keys and stream keys. Kynto encrypts them before it stores them.
  • If you chat on a streaming platform. If you chat on YouTube, Twitch, Kick, TikTok, Rumble or Discord during a stream that uses Kynto, Kynto reads your public message, shows it in the room with your display name and stores it. For YouTube and TikTok it also shows your profile picture.

Kynto does not sell your data and shows no ads.

What Kynto keeps on your device

Kynto's website sets no cookies. It keeps your sign-in token, your settings and a cache of recent chat in your browser's storage. The handheld site at psp.kynto.io sets one session cookie.

Who else receives your data

Kynto uses other companies to run. These are the kinds of company that receive your data, and what each receives.

  • Hosting. Amazon Web Services hosts Kynto's servers and database and stores uploads. Uploaded files are stored in the United States.
  • Payments. Square takes card payments on the web. Your card details go from your browser to Square. Kynto sends Square the amount, what you bought and your Kynto user id. For a plan it also sends your username.
  • AI. OpenAI checks room chat, usernames, room names and the other text you save for people to read (room descriptions and topics, event titles, the text on items, chain questions and choices, and your profile's about text and signature), profile pictures, avatar headshots and room portraits against the moderation rules. It runs some AI characters, translates a message when no Kynto machine is free, and receives the text of an image or a song you ask for. A partner music service makes the songs. It receives your prompt, your Kynto user id and the room's id. An AI character receives your message, your username, the room's name and the usernames of the people in the room. This applies in a direct message to an AI character too. A translation can include a direct message or a group message you ask to have translated.
  • Kynto's own models. Text to speech, some translation, some moderation and some AI characters run on a computer connected to Kynto by its operators or by the owner of the room you are in. That computer receives the text it works on.
  • Email, text alerts and push notifications. The services that deliver them receive the message they carry and the address it goes to. For the iPhone and Android apps, those are Apple's push notification service and Google's Firebase Cloud Messaging. An email or a notification about a direct message can hold the sender's name and the start of the message. A text alert to Kynto's operators can hold your username, your email address and what you wrote in a report or a support request.
  • The service you sign in with. Google, Apple, Twitch, Discord or Kick learns that you signed in to Kynto.
  • Streaming destinations. When a room owner goes live, the stream goes to the platforms they chose, such as YouTube, Twitch and Kick. Your avatar and your room chat can be in it.
  • Content your browser loads. Fonts, GIFs, embedded videos, the share button and the card form load straight from the companies that provide them. Each one sees your IP address.

What is public

  • What you say in a room. Everyone in the room sees it. It can be read aloud, and it can appear on a stream of that room.
  • Your avatar, your username, your profile picture and where you stand.
  • Your profile: your about text, your pets, and whether you are online if you allow it.
  • A faded copy of your avatar where you stood, for up to a week after you leave a room. You can turn this off with Linger After You Leave.
  • Your timeline posts.
  • A file you upload. It has a long random address, and anyone who has that address can open it.

Direct messages and group chats are private to the people in them. They are stored on Kynto's servers as readable text and are not end to end encrypted.

How long Kynto keeps it

  • Your account and what is on it: until you delete your account.
  • Messages: with no time limit.
  • A signed-in device: 30 days after you last used it.
  • The notification log: 90 days.
  • The payment event log: 400 days. Receipts and plan records have no time limit.
  • Start-up timings, error reports, reports and the moderation log: with no time limit.
  • Backups: Kynto keeps a rolling set of database backups. A backup made before something was deleted still holds it until that backup is replaced.

Delete your account

You can delete your account in the app under Account & Security, Delete account. You can also do it on the web at kynto.io/user/delete-account. In the app, an account with a password asks for it, and an account made with Google, Apple, Twitch, Discord or Kick that never set a password asks you to type your username. The web page asks for your username and password. Both sign you out everywhere.

Deleting your account removes these right away:

  • Your username and your email address. A random name takes their place, on your messages too.
  • The hash of your password, every signed-in device and your links to Google, Apple, Twitch, Discord and Kick. If Kynto holds an Apple token for you, it first asks Apple to end Kynto's access, then removes the token.
  • Your phone number, your website, your about text, your signature and the link to your profile picture.
  • The tokens and API keys for YouTube and Twitch accounts you connected, your browser push subscriptions and the notification tokens of your phone apps.
  • Your pets and your block list.

These stay:

  • The text of your messages and your timeline posts, under the random name. A reply that quoted you keeps the name you had.
  • Your rooms, what you built in them, the files you uploaded and the snapshots you took.
  • Friend entries, reports you sent or received, moderator log entries and your payment records.
  • What you said to an AI character, start-up timings and error reports.
  • The closed account record. It still holds the name your sign-in service gave Kynto, your last IP address, your browser and device details, your settings, your avatar and your kash and apples.
  • Stream destinations you saved, with their encrypted stream keys.

Deleting your account does not cancel a plan. Cancel the plan first.

To have something on that list removed, write to support@kynto.io.

Your choices

  • Safety lists the controls for who can message you, who sees you online and whether your avatar lingers.
  • Kynto sends news by email only if you asked for it. Every such email has an unsubscribe link.
  • To get a copy of your data or to have it corrected, write to support@kynto.io.

Changes

The date at the top of this page shows when it last changed. Kynto tells you in the app before a change that affects how your data is used.

Contact

Kynto is run by ROBINABC LLC. Write to support@kynto.io.