We built WhoKin on a simple belief: your relationships are yours. Here's exactly what we collect, why, and how we protect it.
The short version: WhoKin encrypts your relationship data on your device before it ever leaves. We don't sell your data. We don't use it for advertising. The AI features run on your interactions only to help you — never to profile you. You can delete everything at any time.
WhoKin is operated by WhoKin Ltd ("WhoKin", "we", "us", or "our"). We provide a personal relationship management app designed to help you stay meaningfully connected with the people who matter most.
For privacy questions or requests, contact our privacy team at privacy@whokin.app.
We collect only what's necessary to provide the service.
| Category | Examples | Purpose | Encrypted? |
|---|---|---|---|
| Account data | Email address, display name | Authentication and account recovery | In transit (TLS) |
| Kin profiles | Names, phone numbers, emails, notes, relationship type, birthday | Core app functionality | ✅ AES on device + in transit |
| Interactions | Interaction type, date, notes you log | Pulse tracking, AI features | ✅ AES on device + in transit |
| AI insights | Facts, preferences, milestones extracted from your notes | Brief me, Catch-up, memory features | ✅ Stored encrypted |
| Usage data | Feature interactions (anonymous), crash reports | App improvement, bug fixing | Anonymised / no PII |
| Device data | OS version, app version, device model | Crash diagnostics, compatibility | No PII |
| Purchase data | Subscription tier, purchase timestamp | Feature access, billing | Handled by App Store / Play Store |
WhoKin uses end-to-end AES encryption for all relationship content (kin profiles, interactions, notes, and AI insights). Encryption and decryption happen exclusively on your device using a key derived from your account credentials. This means:
WhoKin uses AI to power three features: AI Catch-Up, Memory Extraction, and Smart Reach-Out Drafts. To provide these features, we send anonymised, encrypted excerpts of your notes to third-party AI providers.
| Provider | Feature | Data shared | Retention by provider |
|---|---|---|---|
| Anthropic (Claude) | Catch-Up Briefs, Smart Reach-Out Drafts | Interaction notes and kin context (decrypted in transit for this request only) | Per Anthropic's API data policy — no training on your data |
| OpenAI | Memory Extraction (fallback) | Interaction notes | Per OpenAI's API data policy — zero data retention option enabled |
AI requests are made only when you trigger an AI feature. We do not batch-process your data in the background. We have data processing agreements (DPAs) with all AI providers. Your data is not used to train any AI models.
The pulse scoring system (warm / cooling / cold classification) runs entirely on-device using a lightweight TFLite model. No data is sent to any server for this feature.
When you invite a partner or family member to share a kin profile, both parties can view each other's logged interactions and AI insights for that specific person. By accepting a share invitation, you agree that the invitee will have read access to that kin's history within WhoKin.
Shared relationship data remains encrypted with the same guarantees as personal data. You can revoke sharing at any time from the kin's profile.
We use your data strictly for the following purposes:
| Purpose | Legal basis (GDPR) |
|---|---|
| Providing the WhoKin service and its features | Contract performance |
| Sending push notifications for cold pulses and birthdays (if enabled) | Consent (per-kin toggle) |
| Processing subscription payments via App Store / Play Store | Contract performance |
| Improving the app using anonymised usage data | Legitimate interest |
| Responding to your support requests | Legitimate interest / contract |
| Complying with legal obligations | Legal obligation |
We do not sell, rent, or license your personal data to any third party for commercial purposes. We do not use your relationship data for advertising of any kind.
We retain your data for as long as your account is active. When you delete your account:
Depending on your location, you have the following rights over your personal data. To exercise any of them, email privacy@whokin.app.
We will respond to all privacy requests within 30 days (GDPR) or 45 days (CCPA).
WhoKin is not directed at children under the age of 13 (or 16 in the EU/UK). We do not knowingly collect personal data from anyone under these ages. If we become aware that a child has provided us with personal data, we will delete it promptly. If you believe a child has provided us with their data, please contact privacy@whokin.app.
WhoKin operates globally. Your encrypted data may be stored on servers located outside your home country. Where data is transferred from the EEA, UK, or Switzerland to countries without an adequacy decision, we rely on:
We may update this privacy policy from time to time. Material changes will be notified to you via in-app notification or email at least 14 days before they take effect. The "Last updated" date at the top of this page will always reflect the current version.
Continued use of WhoKin after a policy update constitutes acceptance of the revised policy.
Our privacy team is happy to help. We aim to respond within 2 business days.
privacy@whokin.app