Your workspace, your references, your intent.

This policy explains how Airfoil handles information for Kin, including the Kin web app, the Kin Chrome extension, waitlist and onboarding pages, notification systems, and AI-assisted features.

Kin is a visual reference workspace for collecting, organizing, discussing, sharing, and remixing inspiration. Some surfaces are private to you, some are shared with your team or organization, and some become public inside Kin when you choose to publish them.

This policy does not cover websites, services, or content that you choose to capture from the web. Those services have their own privacy practices.

Account and profile data: name, display name, email address, avatar, handle, authentication identifiers, organization membership, role, current workspace, and notification preferences.

Waitlist and access data: email address, approval status, referrer path, approving admin, and timestamps used to manage early access.

Workspace content: assets, uploads, captures, PDFs converted into image sections, shelves, posts, captions, comments, replies, likes, mentions, shares, profile posts, and other information you choose to create or upload.

Capture data: screenshots, saved image bytes, selected regions, selected elements, full-page capture sections, source URL, page title, capture type, viewport and page dimensions, timestamps, selectors, extracted visual styles, generated thumbnails, tags, descriptions, dominant colors, and processing status.

AI and chat data: Ask Kin conversations, prompts, attached images, generated outputs, transform settings, source asset references, generated asset provenance, and artifacts shown in the chat.

Notification data: in-app notifications, email notification queue data, push subscription endpoint and keys, user agent, read and seen status, and unsubscribe or preference settings.

Operational data: IP address, browser, device, request metadata, logs, error reports, security events, performance information, and similar information needed to operate and protect the service.

Local app and extension data: authentication cookies, browser storage, extension settings, and local workflow state used to keep you signed in, remember preferences, and complete capture flows.

We collect information directly from you when you sign in, join the waitlist, upload files, create posts, comment, mention teammates, share content, use Ask Kin, or contact us.

We collect information automatically when you use Kin, such as request logs, device and browser information, authentication state, usage events, and security signals.

We receive information from service providers and integrated services that help us operate Kin, such as authentication, hosting, storage, email, push notifications, AI processing, and design reference services.

We receive website content from the Chrome extension only when you choose to capture, save, upload, or post that content.

We use information to provide Kin: authentication, account creation, waitlist access, uploads, captures, backpack and library organization, feeds, profiles, sharing, comments, mentions, likes, notifications, search, asset detail views, and deletion flows.

We use content and metadata to generate thumbnails, image dimensions, tags, descriptions, color palettes, search indexes, comment summaries, related references, and other product features.

We use prompts, attachments, selected assets, and generated outputs to power Ask Kin and AI transform features such as remixing, variants, diverging, merging, converging, and design assistance.

We use contact and preference data to send product, access, notification, digest, unsubscribe, and support messages.

We use operational information to authenticate users, prevent abuse, troubleshoot issues, maintain security, measure reliability, and comply with legal obligations.

We may use aggregated or de-identified information to understand and improve Kin, provided it does not identify you or your workspace content.

We show your content to other Kin users when the product feature requires it or you choose it, such as publishing to Explore, sharing a post, commenting, mentioning someone, joining a team feed, or using a public profile surface.

Private backpack items and private libraries are intended to be visible only to you and authorized app functionality unless you publish, share, or otherwise change their visibility.

We may transfer information to service providers that help us provide Kin, including hosting, database, private blob storage, image processing, authentication, email delivery, web push, security, observability, AI processing, and design-reference providers.

We may disclose information if required by law, to protect Kin or users, to investigate abuse or security issues, or in connection with a merger, acquisition, financing, or sale of assets.

We do not sell user data. We do not use or transfer user data for personalized advertising, unrelated monetization, creditworthiness, or lending decisions.

Kin uses AI features to describe, tag, summarize, search, and transform visual content. When you use these features, relevant prompts, assets, screenshots, comments, instructions, generated outputs, and context may be processed by Kin and by AI service providers.

AI outputs may be stored in Kin as asset descriptions, tags, summaries, generated images, chat messages, or metadata so the app can display them, let you revisit them, and keep your workspace consistent.

Do not add content to Kin or Ask Kin that you do not have permission to process, upload, or share. You are responsible for the content you choose to provide to AI features.

The Kin Chrome extension uses browser permissions to let you capture the current page, a region, an element, a full page, or an image you select through the context menu.

The extension can run on websites so it can show the in-page capture panel and selection overlays. It transmits captured website content to Kin only when you start a capture, save, upload, or post action.

Captured website content may include screenshots, selected images, source URLs, page titles, website content visible in the capture, dimensions, timestamps, selectors, and extracted visual styles.

The extension does not collect passwords, payment card numbers, health records, keystrokes, or your full browsing history as a background monitoring service. It may store the URL, title, and timestamp of pages you intentionally capture.

The extension package includes its JavaScript code. It does not load remote JavaScript or WebAssembly code to run the extension.

Chrome extension user data is used only to provide or improve Kin's user-facing capture and save features, maintain security, and measure reliability. We do not use Chrome extension data for advertising, unrelated profiling, or monetization.

Humans do not review private Chrome extension user data except with your consent for support, when necessary for security or abuse investigation, to comply with law, or when the data has been aggregated or de-identified for internal operations.

Kin uses cookies and similar browser storage for authentication, session management, security, preferences, and product functionality.

The Chrome extension may use Chrome extension storage for configuration such as the Kin app URL and capture workflow state.

If you block cookies or local storage, parts of Kin may not work, including sign-in, uploads, capture status, notifications, and saved preferences.

You can manage many choices inside Kin, including deleting captures or posts, changing email notification preferences, unsubscribing from notification emails, and controlling whether content stays private or is published.

Depending on where you live, you may have rights to access, correct, delete, export, object to, or restrict certain processing of your personal information.

To make a privacy request, contact us at phil@airfoil.studio. We may need information to verify your identity and protect other users before fulfilling a request.

We retain account, workspace, content, and operational information for as long as needed to provide Kin, maintain security, resolve disputes, comply with legal obligations, and honor your workspace settings.

Deleted content may be removed from active product surfaces before it is fully removed from backups, logs, caches, or derived indexes. We keep those copies only as long as needed for security, reliability, legal, or recovery purposes.

We may retain aggregated or de-identified information that no longer identifies you.

Kin uses safeguards designed to protect information, including HTTPS transport, private asset storage, authenticated API routes, access controls, and operational monitoring.

No internet service can guarantee perfect security. You can help protect your account by keeping your sign-in method secure and limiting access to your browser and devices.

Kin is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

We may update this policy as Kin changes. When we make material changes, we will update the date on this page and provide additional notice when appropriate.

For privacy questions or requests, contact Airfoil at phil@airfoil.studio.