Effective Date: September 15, 2026 | Last Updated: September 15, 2026
DeepMesh Labs ("we," "us," or "our") operates the KikiGenie mobile application and the kikigenie.com website (collectively, the "Service"). This Privacy Policy explains what information we collect, why we collect it, who we share it with, how long we keep it, and the choices you have.
By using KikiGenie, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.
| Data Type | Details | Purpose |
|---|---|---|
| Account information | Name, email address, date of birth, gender | Create and manage your account and confirm you meet the minimum age |
| Profile photo | An image you upload or an avatar you pick | Show who you are to the people you invite |
| Contacts and groups | Names, email addresses, optional phone numbers and optional photos of the people you add, and the groups you organise them into | Invite people to hangouts |
| Home area and saved places | The area you choose for browsing, plus addresses and coordinates you save | Show activities, places, events and movies near you |
| Interests and activity preferences | Categories you select and activities you like or add | Personalise what we show you |
| Hangout details | Title, type, date and times, description, cover image, chosen activities and venues, participant list, RSVP style | Organise and manage your hangouts and send invitations on your behalf |
| Kiki planning conversations | Messages you type, quick ideas you pick, the stops you choose and the plan that results | Generate hangout plans with our AI assistant (see Section 3) |
| Hangout feedback | Ratings, tags and written feedback after a hangout | Improve recommendations and the Service |
| Reports and blocks | Places, activities or events you report, and hosts you block | Keep the Service safe and honour your choices about who can invite you |
| Preferences and consent | Notification settings, advertising consent choices, acceptance of our Terms | Respect your settings and record your agreement |
| Data Type | Details | Purpose |
|---|---|---|
| Device location | Your device's precise location, only while the app is open and only if you grant permission. You can instead set a home area by hand. | Find places, events and movies near you and let Kiki plan around where you are. We do not track your location in the background. |
| Device information | Device model, operating system version, app version, unique device identifiers, push notification tokens | Deliver push notifications and keep the app working on your device |
| Usage analytics | Screens viewed, features used, actions taken, timestamps, an app instance identifier (Firebase Analytics) | Understand how the app is used and improve it |
| Crash and performance data | Crash reports, stack traces, device state at the time of a crash, screen load and network timings (Firebase Crashlytics and Performance Monitoring) | Find and fix bugs and slow spots |
| Log data | IP address, request times, error details | Security monitoring, abuse prevention and troubleshooting |
| Advertising data | Advertising identifier (IDFA on iOS, GAID on Android) where you have allowed it, ads shown and tapped, rewarded ads completed, your consent choices | Show ads that support the free Service (see Section 9) |
When you sign in with Google, Apple or Facebook, we receive your name and email address, and a profile picture if your provider shares one, as permitted by your settings with that provider. We never receive your password for those services.
Parts of the Service involve people who have not signed up:
We use the information we collect to:
Where the GDPR or UK GDPR applies, we rely on the following legal bases:
| Purpose | Legal basis |
|---|---|
| Providing the Service, sending invitations and notifications, Kiki planning | Performance of our contract with you |
| Precise device location, personalised advertising, the advertising identifier | Your consent, which you can withdraw at any time |
| Analytics, crash reporting, improving the Service | Our legitimate interest in understanding and improving the Service; you may object at any time |
| Security, abuse prevention, the 24-hour email record after deletion | Our legitimate interest in keeping the Service safe |
| Responding to legal requests | Compliance with a legal obligation |
We do not sell your personal information for money, and we do not give it to data brokers. We share data only with the service providers below, only for the purposes stated, and only to the extent needed to operate the Service. The one exception is advertising: when ads are personalised, your advertising identifier and ad interaction data are shared with Google for cross-context behavioral advertising, which California law treats as “sharing”. You can opt out at any time - see Do Not Sell or Share My Personal Information.
| Provider | Purpose | Data Shared |
|---|---|---|
| Google (Firebase) | Sign-in, push notifications (Firebase Cloud Messaging, which delivers to iOS devices through Apple's push service), usage analytics, crash and performance reporting, advertising (AdMob) and ad consent (User Messaging Platform) | Email, authentication tokens, device tokens, analytics events, crash and performance data, advertising identifier and ad interaction data |
| Apple | Sign in with Apple, delivery of push notifications to iOS devices | Authentication tokens, device tokens |
| Meta (Facebook) | Facebook Login, if you choose it | Authentication tokens; Meta shares your name and email with us |
| Amazon Web Services (AWS) | Cloud hosting, databases, file storage, email delivery, and the AI models behind Kiki (Amazon Bedrock, running Amazon Nova models) | All Service data, stored encrypted. Kiki receives your messages, chosen stops and approximate location. Under AWS's terms your inputs are not used to train these models. |
| Mapbox | Map display and address search | Search text and coordinates you look up |
| Ticketmaster | Ticketed events near you | Approximate coordinates and a search radius for nearby searches; an event identifier when you open an event |
| The Movie Database (TMDB) | Movies now playing and where they stream | No personal data; we request listings by region |
| Cloudflare (Turnstile) | Bot protection on the public share page | Browser and network signals, including IP address, evaluated by Cloudflare when someone submits a join request |
We may also disclose information if required by law, to protect our rights or the safety of our users, or in connection with a merger or acquisition of DeepMesh Labs, in which case this policy continues to apply to your data.
Your data is stored on AWS infrastructure in the United States. We protect it with:
No system is perfectly secure. If we learn of a breach affecting your data we will notify you as required by applicable law.
We keep your personal data for as long as your account is active, and for the shorter periods below where they apply.
| Data Type | Retention Period |
|---|---|
| Account, profile, contacts, groups, hangouts, preferences, photos | Until you delete your account (see Section 6) |
| Kiki planning conversations | 7 days after the last message in a conversation, then removed automatically; all of them are removed when you delete your account |
| Public share links | 30 days from creation, or earlier if the host revokes the link |
| Device registrations and push tokens | 90 days after the device was last registered, or earlier if you sign out, unregister the device or delete your account |
| Hangout feedback, reports and blocks | Until you delete your account |
| Ad consent choices | On your device until you change them |
| Server logs | 90 days |
| Email record after deletion | 24 hours (see Section 6) |
| Website waitlist email | 12 months after the app launches, or earlier if you ask us to remove it |
You can delete your account at any time from Settings → Delete Account in the app. The process works as follows:
Deletion cannot be undone once the grace period has passed.
If you are in the EEA or the UK you additionally have the right to data portability, to restrict or object to processing, to withdraw consent at any time without affecting earlier processing, and to lodge a complaint with your data protection authority. Our legal bases are performance of a contract (providing the Service), legitimate interests (security, fraud prevention, improving the Service) and consent (personalised advertising, precise location).
This section applies if you are a California resident, and is provided under the California Consumer Privacy Act as amended by the California Privacy Rights Act. It also describes the choices we make available to all US users.
We do not sell your personal information for money. However, KikiGenie shows advertising through Google AdMob, and when advertising is personalised we share your device's advertising identifier (IDFA on iOS, GAID on Android) and ad interaction data with Google. Under the CPRA this counts as “sharing” personal information for cross-context behavioral advertising, and you have the right to opt out of it.
How to opt out: open the KikiGenie app and go to Settings → Privacy → Do Not Sell or Share My Personal Information, and turn the setting on. The change takes effect immediately and applies to every ad request from that point onward. You can also email [email protected] and we will apply it for you.
Opting out does not remove ads and does not reduce any feature of the Service - you will continue to see ads, but they will be selected without using your advertising identifier. We do not discriminate against users who exercise this right.
Our website does not use advertising or tracking cookies at all (see Section 9), so there is no website activity for an opt-out preference signal such as Global Privacy Control to act on. The opt-out described above covers the advertising in our mobile app, which is the only place we share personal information for advertising.
In the preceding twelve months we have collected the following categories of personal information. “Shared” below means shared for cross-context behavioral advertising, as described above.
| Category (Cal. Civ. Code §1798.140(v)) | Examples we collect | Source | Disclosed to | Shared for advertising? |
|---|---|---|---|---|
| Identifiers | Name, email address, phone number, account ID, device identifiers, IP address, advertising ID | You; your device; your sign-in provider | Google (Firebase, AdMob), Apple, Meta, AWS, Cloudflare | Advertising ID and IP address only |
| Customer records | Profile details, date of birth, gender, profile photo | You | AWS | No |
| Commercial information | Hangouts created and attended, activity preferences, saved locations | You | AWS | No |
| Internet or network activity | Features used, screens viewed, ads viewed or tapped, error logs | Your device | Google (Firebase, AdMob), AWS, Cloudflare | Ad interaction data only |
| Geolocation data | Precise device location; addresses you save | You; your device (with your permission) | AWS, Mapbox, Ticketmaster (approximate coordinates only) | No |
| Audio, visual or similar | Photos you upload | You | AWS | No |
| Inferences | Suggested activities and venues generated from your preferences and location | Derived by us | AWS (Bedrock) | No |
We collect this information for the business and commercial purposes set out in Section 2, and we retain each category for the periods set out in Section 5. We do not knowingly sell or share the personal information of consumers under 16 years of age. See Section 8.
Precise geolocation is “sensitive personal information” under the CPRA. We use it only to provide the Service you asked for - finding activities, venues and events near you - and for the purposes permitted by Cal. Code Regs. tit. 11 §7027(m). We do not use or disclose it to infer characteristics about you, and we never share it for advertising. Because our use is limited to those permitted purposes, the right to limit the use of sensitive personal information does not apply; you can still stop this collection entirely by turning off location permission for KikiGenie in your device settings.
Email [email protected] from the email address on your KikiGenie account, stating which right you wish to exercise. You can also use the in-app controls described above for deletion, correction and opt-out, which take effect immediately and require no verification beyond being signed in.
To protect your account we verify emailed requests by confirming that the request comes from the email address registered to the account, and we may ask you to confirm additional details already on the account before we act on a request to know or delete. We cannot act on a request we are unable to verify.
We will acknowledge your request within 10 business days and respond within 45 calendar days. If we need more time we will tell you why, and may extend by a further 45 days, for a maximum of 90 days from the date we received the request.
Authorized agents. You may use an authorized agent to submit a request on your behalf. The agent must provide written permission signed by you, and we may contact you directly to confirm that you gave that permission and to verify your identity. An agent holding a valid power of attorney under Cal. Prob. Code §§4000-4465 need not provide separate written permission.
KikiGenie is not intended for children under 13. We ask for your date of birth when you sign up, whichever sign-in method you use, and do not create accounts for anyone under 13, in line with the Children's Online Privacy Protection Act (COPPA). If you believe a child under 13 has given us personal information, contact us and we will delete it promptly.
Users aged 13 to 17 may use the Service only with the consent and supervision of a parent or legal guardian.
Advertising to users under 16. California law (Cal. Civ. Code §1798.120(c)) prohibits selling or sharing the personal information of a consumer under 16 without opt-in consent. We do not seek that consent. Instead, accounts belonging to users under 16 are automatically excluded from personalised advertising: their advertising identifier is not used to select ads or to build an advertising profile, and we signal to Google that the user is below the age of consent so that Google applies the same restriction. The same exclusion applies to any account for which we do not hold a date of birth. This happens automatically and requires no action from you or a parent.
The app is free and supported by advertising served through Google AdMob. Ads appear between sections of the Home screen and in a few other places, and you can choose to watch a rewarded ad to earn an extra Kiki planning session. AdMob may collect your advertising identifier, device information, IP address (for approximate location) and ad interaction data.
Before any personalised ad is shown we ask for your consent through the Google User Messaging Platform, and on iOS through Apple's App Tracking Transparency prompt. If you decline, you still see ads, but they are not personalised to you. You can change your choice at any time under Settings → Privacy in the app, using Do Not Sell or Share My Personal Information or, where it is offered, Ad Consent Preferences, or in your device settings.
For more about how Google uses this data see Google's Privacy Policy and How Google uses information from sites or apps that use our services.
kikigenie.com does not use advertising or tracking cookies. The waitlist and contact forms send only what you type. We may use privacy-respecting, aggregate analytics to understand site traffic; no personal information is collected through them. Our public hangout pages use Cloudflare Turnstile for bot protection, as described in Section 3.
We are based in the United States and process and store data there. If you use the Service from elsewhere, your data is transferred to and processed in the United States, where privacy laws may differ from those of your country. Our main providers, Google and Amazon Web Services, participate in the EU-US Data Privacy Framework and its UK extension, and we rely on that framework and on the contractual protections in our agreements with providers to safeguard transferred data.
We may update this policy from time to time. When we do, we will post the new version here with a new "Last Updated" date, and for material changes we will also notify you in the app. Continued use of the Service after a change takes effect means you accept the updated policy.
If you have questions about this Privacy Policy, want to exercise your rights, or have a concern about your data, contact us:
We aim to respond to all privacy inquiries within 30 days. Requests made under the CCPA/CPRA are answered within the statutory period described in Section 7 - 45 calendar days, extendable once by a further 45 days where necessary.