Privacy Policy

This Privacy Policy explains how Kyndo ("we," "our," or "us"), a product of Thrice M Financial Consulting, LLC (Minneapolis, MN), collects, uses, and protects information when you use the Kyndo mobile application and website (collectively, the "Service"). By using Kyndo, you agree to the practices described in this policy.

01 Information We Collect

Information you provide directly

• Account credentials — email address and password used to create and access your account
• Display name — the name you enter during onboarding
• Financial data you enter — income amounts, income streams, budget categories, debt accounts, financial account balances, savings goals, and net worth snapshots
• Credit score — if you choose to enter it manually
• Daily mood check-ins — your self-reported financial wellness entries
• Invoice records — client names, amounts, and expected payment dates you track in the app
• Household and partner data — if you use the household features, income and expense split details you provide

Information collected automatically

• App usage data — features used, screens visited, and session timestamps (collected anonymously)
• Device information — operating system version, app version, and device type for diagnostic purposes
• Crash reports — technical error data to help us fix bugs

Bank account connection (optional)

Kyndo includes an optional bank account linking feature powered by Plaid. If you choose to connect a bank account, Plaid will access your institution name, account type, and account balance on your behalf. This connection is entirely optional — Kyndo's core features work without it. See the Plaid section under Third-Party Services below for full details.

Information we do NOT collect

• We do not collect Social Security numbers, tax ID numbers, or government identifiers
• We do not access your contacts, microphone, or location
• We only access your camera or photo library if you explicitly grant permission for profile photo upload

02 How We Use Your Data

We use the information we collect solely to provide and improve the Kyndo Service:

• To authenticate your account and keep it secure
• To power the Forecast, Budget, Debt, Net Worth, and Goals features with your entered data
• To calculate your income mode (Lean/Normal/Surge), tax reserve recommendations, and famine buffer targets
• To generate personalized AI coaching responses through Vee (see Section 5)
• To send you push notifications about income mode changes, overdue invoices, and upcoming tax deadlines — only if you enable notifications
• To improve app performance and fix errors based on aggregated, anonymized usage patterns
• To comply with legal obligations

We do not use your financial data for advertising, profiling, or sale to third parties.

03 Data Storage & Security

Your account data is stored securely using Supabase, a cloud database platform, on servers located in the United States (us-east-1). Supabase encrypts data at rest and in transit using industry-standard protocols (AES-256 and TLS 1.2+).

Your financial data entered in the app is also stored locally on your device using AsyncStorage (the standard React Native local storage layer). This means your data remains available offline, and a copy is synced to our secure cloud database when you are connected. We recommend using a device passcode or biometric lock to protect your device, as local app storage is protected by your device's sandbox but is not independently encrypted by Kyndo.

We implement the following security measures:

• All API communication uses HTTPS/TLS encryption
• Passwords are hashed and never stored in plain text
• API keys and secrets are stored as environment variables, never in app code
• Access to production data is restricted to authorized personnel only
• We do not log sensitive financial data to external analytics systems

While we take reasonable precautions, no system is 100% secure. If you believe your account has been compromised, contact us immediately at info@thricemfinancial.com.

04 Third-Party Services

Kyndo integrates with the following third-party services to deliver its features. Each has its own privacy policy:

Supabase (Authentication & Database)

Supabase processes your email address and account data to authenticate you and store your Kyndo data. Supabase is SOC 2 Type II certified. See supabase.com/privacy.

Anthropic (AI Coaching — Vee)

When you interact with Vee, your financial snapshot (income, budgets, debts, goals, forecast summary) and chat messages are sent to Anthropic's Claude API to generate a response. Anthropic does not use API data to train its models by default. See anthropic.com/privacy and Section 5 below.

Plaid (Optional Bank Account Linking)

If you choose to connect a bank account, Kyndo uses Plaid to establish that connection. Plaid accesses your bank's read-only data (institution name, account type, and balance) on your behalf. Kyndo receives only the data necessary to display your account balance in the Net Worth feature. Plaid is regulated under applicable financial data laws. Connecting a bank account is entirely optional. See plaid.com/legal. Plaid requires you to agree to their End User Privacy Policy at the time of account linking.

Apple (App Distribution)

Kyndo is distributed through the Apple App Store. Apple may collect device analytics per their own privacy policy. See apple.com/legal/privacy.

Google Fonts

Our website uses Plus Jakarta Sans from Google Fonts, which may log your IP address. See Google's privacy policy.

05 AI Coaching (Vee)

Vee is Kyndo's AI financial coach, powered by Anthropic's Claude API routed through our secure server proxy at kyndo-api.vercel.app. When you send a message to Vee:

• A financial snapshot of your current data (income mode, monthly income, budget categories, debt balances, goals, and forecast summary) is included as context with each request
• Your full conversation history for the current session is re-sent with each message so Vee can maintain context across a conversation. This history is not stored in Kyndo's database but is transmitted to Anthropic on each turn
• Your message, context, and conversation history are transmitted over HTTPS to our secure proxy server, then to the Anthropic API
• Your Anthropic API key is never exposed to your device — all AI requests go through our server
• Vee's responses are generated in real time and are not stored in our database (only displayed in your app session). You can clear your chat history at any time using the Clear button in the Vee screen
• Anthropic does not use API data to train its models by default per their API terms
• We do not use your Vee conversations to train AI models

Vee provides general financial guidance based on your entered data. It is not a licensed financial advisor, and nothing Vee says constitutes professional financial, tax, or legal advice. Always consult a qualified professional for major financial decisions.

06 Data Sharing

We do not sell, rent, or trade your personal information. We share data only in these limited circumstances:

• Service providers — Supabase and Anthropic as described above, solely to operate the Service
• Legal requirements — if required by law, regulation, court order, or to protect the safety of our users or the public
• Business transfer — if Thrice M Financial Consulting, LLC is acquired or merges, your data may transfer to the successor entity under the same privacy protections
• With your consent — we will ask before sharing your data for any purpose not described here

07 Your Rights

You have the following rights regarding your data:

• Access — request a copy of the personal data we hold about you
• Correction — update or correct inaccurate data at any time within the app
• Deletion — request deletion of your account and all associated data by emailing info@thricemfinancial.com. We will process deletion requests within 30 days.
• Portability — request an export of your data in a machine-readable format
• Opt-out of notifications — disable push notifications at any time in your device settings or the Kyndo app

If you are a resident of California, the EU, or another jurisdiction with specific privacy laws, additional rights may apply. Contact us to exercise them.

08 Data Retention

We retain your account data for as long as your account is active. If you delete your account:

• Your profile and financial data are deleted from our database within 30 days
• Aggregated, anonymized analytics data (not linked to you) may be retained indefinitely
• We may retain minimal records for legal compliance purposes for up to 7 years

Data stored locally on your device is removed when you uninstall the app.

09 Children's Privacy

Kyndo is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have collected data from a child under 13, we will delete it promptly. If you believe a child has provided us with personal information, contact us at info@thricemfinancial.com.

10 Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by:

• Updating the "Last updated" date at the top of this page
• Sending a push notification or in-app message for significant changes

Your continued use of Kyndo after changes are posted constitutes your acceptance of the updated policy.

11 Contact Us

If you have questions about this Privacy Policy or your data, please reach out:

• Email: info@thricemfinancial.com
• Phone: 612-541-8422
• Address: Thrice M Financial Consulting, LLC, Minneapolis, MN
• Hours: Monday–Friday, 9:00 AM – 6:00 PM CT