Last updated: January 2025
KiteMail collects only the information necessary to operate the Service:
All data is stored securely in a Supabase database with row-level security. Security question answers are stored in normalized (lowercased, trimmed) form — not in plaintext exactly as typed, which adds a layer of abstraction.
Kites are stored indefinitely unless manually removed by our team for policy violations. We may introduce optional expiry features in the future, which will be communicated clearly.
We use the following third-party services to operate KiteMail:
Each of these services has their own privacy policies. We share only the minimum data required for operation.
If you wish to have a kite you sent removed, contact us at privacy@kitemail.app with your Kite ID. We will process removal requests within 7 business days.
KiteMail is not intended for users under the age of 13. We do not knowingly collect information from children.
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date.
Privacy questions: privacy@kitemail.app