What we collect
We keep the situation you enter, the drafts we create, and the recipient’s email address when you send one. The situation itself may contain personal details, so please leave out anything that isn’t needed. If a recipient reports a notice or opts out, we keep that choice and any details they provide.
Our hosting and security tools may also receive basic technical information, such as an IP address, browser type and the pages requested. We don’t use that information to build an advertising profile.
How we use it
We use your information to create drafts, deliver the notice, show its status, prevent duplicate sends, honour opt-outs, review reports, fix problems and keep Kindly Note safe.
Recipient email addresses are used only to deliver notices and handle the essentials connected to that delivery, such as delivery status, opt-outs and abuse reports. We never sell, rent or trade email addresses, and we never share them for advertising or marketing. We disclose an address only to the provider that delivers the email for us, or if the law requires us to.
Limits and abuse prevention
When you draft or send a notice, we set one cookie, kn_device, holding a random ID. We also record a scrambled form of that ID and of your IP address with each draft and send. We store these as keyed hashes, never the ID or IP address itself, and use them only to apply daily limits and act on reports. They’re never shown to recipients. We don’t use advertising or analytics cookies.
Who helps us
We use a small group of trusted service providers to keep Kindly Note running:
- OpenAI helps generate notice drafts from the situation you provide.
- Resend delivers notices by email and receives the notice and recipient’s email address for that purpose.
- Railway hosts and runs the Kindly Note application.
- Neon hosts the database where service information is stored.
- Cloudflare provides Turnstile, which helps us detect bots and prevent abuse.
Security tools such as Turnstile, and the content delivery networks that serve some site files, may receive basic technical details such as your IP address, browser type and interaction data. We give providers only the information they need to perform their part of the service.
How long we keep it
Choosing Start over shreds an unsent notice and its drafts. Once a notice has been sent, we keep the notice and delivery record as long as reasonably needed to handle reports, opt-outs and misuse. We keep an opt-out until the recipient opts back in or it is no longer needed.
We may also keep and review notice text to improve the prompts, quality checks and algorithms that generate future notices. We don’t use recipient email addresses or report details for this purpose.
About anonymity
We don’t put the sender’s identity in the email, and we don’t ask for a sender account. Still, the details in a situation can be revealing. Avoid names, addresses, health information and anything else that could identify you or another person unnecessarily.
Your choices
Senders can delete an unsent notice with Start over. Every recipient email includes links to report the notice or stop future notices. The recipient can opt back in from the same private link.