Privacy Policy for Kindly

Effective date: August 26, 2026

Chatterbox I.T. ("we", "us") operates the Kindly mobile app. This page explains what data Kindly collects and how it's used.

Data collection

Kindly works fully offline, without an account, if you choose to skip sign-in. Your to-do list and gratitude journal are always stored in your device's local app storage — they never leave your device, and we never see them, whether or not you sign in.

If you choose to sign in (optional, via Google or email/password), we collect the minimum needed to identify your account:

• Your email address
• Your display name and profile photo, if you sign in with Google
• A unique account ID assigned by our authentication provider, Firebase Authentication (a Google service)

This information is used only to let you sign in and to support the optional backup feature described below. It is not sold, and it is not shared with any third party except Firebase/Google, who act as our authentication and cloud storage service provider. We do not use analytics or advertising SDKs of any kind.

Encrypted backup

If you choose to back up your data, your tasks and gratitude journal entries are encrypted on your device before they're ever sent anywhere, using a key derived from a recovery phrase that only you see and hold. We store only unreadable encrypted data — we do not have your recovery phrase and cannot read your backed-up content, and neither can anyone who gains access to our database. If you lose your recovery phrase, that backup cannot be recovered by us or by anyone else.

Backup is entirely optional and off by default. If you never use it, no task or journal content ever leaves your device.

Reminders and notifications

If you turn on a reminder for a task, it's scheduled entirely on your device's operating system. No task content, reminder time, or notification data is ever sent to us or to any third party.

App lock

If you turn on the optional biometric or PIN app lock, your fingerprint/face data or PIN is handled entirely by your device's operating system. We never see or store it.

Permissions

Kindly may request the following device permissions, only when relevant to a feature you use:

• Notifications — to show you task reminders you've set.
• Exact alarms (Android) — so reminders ring at the time you chose, rather than being delayed.
• Internet access — needed only if you choose to sign in or use encrypted backup.
• Biometric hardware (Android) — only if you turn on the optional fingerprint/face app lock.

Kindly does not request any permissions beyond these.

Data deletion

If you signed in and want your account deleted, you can:

• Delete it from within the app (open the account panel and choose "Delete account"), or
• Visit our account deletion page and sign in to delete your account without installing the app.

Deleting your account permanently removes your email, name, and account ID from our authentication provider. It does not affect your local to-do list, which stays on your device — clear it from within the app, or uninstall the app, if you'd like to remove it too.

If you never signed in, there is no account data to delete — your tasks have only ever existed on your device.

Children's privacy

Kindly does not knowingly collect any information from anyone, including children.

Changes to this policy

If this policy changes, the updated version will be posted at this same URL with a revised effective date.

Contact

Questions about this policy can be sent to: replytokindly@gmail.com