Privacy Policy
Effective March 2026
01Our Approach
Kinoto is built on a simple principle: your data is yours. We collect only what is strictly required to operate the service, we do not sell or share your information with third parties, and we do not track your behaviour for advertising or analytics.
This policy covers two distinct contexts (the kinoto.io website and the Orrery), which have very different data profiles and are described separately below.
02Website (kinoto.io)
What we collect
- Email address. Collected when you create an account, contact us, or opt in to launch notifications via the announcement form on the Orrery product page. Used only to send sign-in links, respond to inquiries, or notify you that Orrery has launched (once). Stored until the launch notification has been sent, or until you ask us to remove it. Not used for marketing or shared with any third party.
- IP address and anonymous page views. Your IP address is processed by our server infrastructure for security monitoring, abuse prevention, and protection against denial-of-service attacks. We also use a self-hosted instance of Plausible Analytics to count page views and understand general traffic patterns. Plausible is cookieless and does not track individuals: it aggregates data at the country level and does not build profiles or fingerprints. Your IP address is never stored in analytics. No data is shared with third parties.
- Authentication data. Passkey public identifiers and device certificates, where applicable. Private keys never leave your device.
What we do not collect
- Browsing history or behavioural data
- Device fingerprints
- Location data beyond the broad indication an IP address may provide
- Any data for advertising, retargeting, or profiling of any kind
No third-party tracking
No third-party analytics scripts, advertising pixels, or tracking SDKs are loaded on any page. We do not use Google Analytics, Meta Pixel, or any equivalent service. The analytics we run (Plausible) are self-hosted on our own infrastructure, set no cookies, and share no data with external parties.
Legal basis (GDPR)
- Account email: performance of a contract (providing the service you requested).
- Launch-notification email: explicit consent (the tickbox on the opt-in form). You can withdraw consent at any time by writing to hello@kinoto.io and we'll delete the address.
- IP address: legitimate interest (security and infrastructure protection).
03Application (Orrery)
We collect nothing. The application runs entirely on your device. We have no technical ability to access your data, even if we wished to.
All data processed by the Application, including notes, documents, search indexes, and AI-generated embeddings, is stored locally on your device and never transmitted to Kinoto servers. There is no telemetry, no crash reporting, no analytics, and no background network communication with Kinoto infrastructure during normal use.
The only network activity is direct peer-to-peer communication between your own devices, encrypted end-to-end using the iroh protocol. We do not operate relay infrastructure capable of observing the content of your data.
This is not a policy choice. It is a technical constraint. The architecture of the Application makes centralised data collection structurally impossible.
04Your Rights
Under the GDPR, you have the following rights with respect to your personal data:
- Right of access: obtain a copy of the personal data we hold about you.
- Right to rectification: request correction of inaccurate data.
- Right to erasure: request deletion of your personal data.
- Right to restriction: request that we limit how we use your data.
- Right to data portability: receive your data in a structured, machine-readable format.
- Right to object: object to processing based on legitimate interest.
To exercise any of these rights, contact us at hello@kinoto.io. We will respond within 30 days.
You also have the right to lodge a complaint with the Portuguese data protection authority, CNPD (Comissao Nacional de Protecao de Dados).