Kismet

Privacy Policy

Effective Date: April 5, 2026

This Privacy Policy describes how ADG Systems, Inc. ("we," "us," or "our") collects, uses, and shares information when you use the Kismet mobile application, website at gokismet.app, and related services (collectively, the "Service").

1. Information We Collect

1.1 Account Information

When you create an account, we collect your name, email address, and profile photo through Google or Apple OAuth. You may optionally set an account password as an alternative login method; passwords are stored using industry-standard one-way hashing (bcrypt) and cannot be viewed by anyone, including us.

1.2 Gmail Data (Trip Detection)

If you grant Gmail access, we use a read-only scope to scan your inbox for travel-related booking confirmations (flights, hotels, car rentals). We extract trip details (destination, dates) and discard the rest. We do not read, store, or share the full content of your emails. Email parsing is performed by Anthropic's Claude AI solely for structured data extraction; no email content is retained by Anthropic after processing.

You can also create trips manually without granting email access.

1.3 Calendar Data (Trip Detection)

If you grant calendar access, Kismet reads your device calendar (via the operating system) or Google Calendar (via a read-only OAuth scope) to detect upcoming trips. We extract event titles, dates, and locations to identify travel. We do not read, modify, or delete your calendar events. Only detected trip details (destination, dates) are stored on our servers. You can revoke calendar access at any time from your device settings or the Kismet app settings.

1.4 Contact Data

To help you find friends on Kismet, you may optionally import contacts from Gmail (web) or your device's native address book (mobile). Contact email addresses and phone numbers are hashed using SHA-256 before being compared against existing users. We store contact names temporarily to display friend suggestions, but we do not store raw email addresses or phone numbers — only their hashes. Hashes are used only for matching and are not shared with third parties. Stored contact data is deleted when you delete your account.

1.5 Location Data

We collect your home city (entered by you) and trip destinations. These are geocoded via the Google Maps API to obtain coordinates for matching purposes. Coordinates are stored server-side only and are never exposed to other users. Other users see only fuzzy distance buckets (e.g., "nearby" or "within 50 miles"), not exact locations.

1.6 Device and Usage Data

We collect standard analytics data including device type, operating system, app version, screen views, and interaction events through PostHog. We also collect push notification tokens (via Expo Push API / Firebase Cloud Messaging) to deliver notifications.

1.7 User-Generated Content

This includes your username, bio, trip details, sharing preferences, friend connections, group memberships, and in-app feedback submissions.

2. How We Use Your Information

  • Trip Matching: Detecting trips from email and calendar, matching you with friends traveling to the same city at overlapping times, and notifying both parties.
  • Friend Discovery: Using hashed contacts to suggest people you may know who are already on Kismet.
  • Notifications: Sending push and email notifications about matches, friend requests, and other activity.
  • Service Improvement: Analyzing usage patterns to improve features and fix bugs.
  • Account Management: Authenticating you, managing your preferences, and providing customer support.

3. How We Share Your Information

We do not sell your personal information. We share data only with the following categories of service providers, solely to operate the Service:

  • Authentication: Google and Apple (OAuth sign-in)
  • Hosting & Infrastructure: Vercel (application hosting), Neon (PostgreSQL database, US East region)
  • Email Services: Resend (transactional email delivery)
  • Analytics: PostHog (product analytics)
  • AI Processing: Anthropic / Claude (email parsing for trip extraction — no data retained after processing)
  • Background Jobs: Inngest (task orchestration)
  • Push Notifications: Expo Push API, Firebase Cloud Messaging
  • Geocoding: Google Maps API

We may also disclose information if required by law, legal process, or to protect the rights, safety, or property of our users or the public.

4. Your Sharing Controls

Kismet gives you granular control over who sees your trips. You can set each trip's visibility to Private, Friends-only, or Public. You can also set a default sharing preference. Friend groups allow you to share trips with specific subsets of your connections.

5. Data Retention

  • Account data: Retained while your account is active. Deleted within 30 days of account deletion request.
  • Trip data: Retained while your account is active. Past trips are archived but remain accessible to you.
  • Email content: Not retained. Only extracted trip details (destination, dates) are stored.
  • Calendar data: Not retained. Only detected trip details (destination, dates) are stored. Calendar events themselves are not copied to our servers.
  • Contact hashes: Retained while your account is active for ongoing friend matching. Deleted upon account deletion.
  • Analytics data: Retained per PostHog's data retention policies.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate information.
  • Delete your account and associated data. You can request account deletion from the Settings screen in the app or by emailing support@gokismet.app.
  • Export your data in a portable format.
  • Withdraw consent for optional data processing (e.g., Gmail access, calendar access, contact import) at any time through your device or account settings.
  • Opt out of email notifications through the unsubscribe link or app settings.

6.1 GDPR (European Economic Area)

If you are located in the EEA, our legal bases for processing are: consent (Gmail access, calendar access, contact import), contract performance (providing the Service), and legitimate interest (analytics, security). You may contact us to exercise your GDPR rights at support@gokismet.app.

6.2 CCPA (California)

If you are a California resident, you have the right to know what personal information we collect, request its deletion, and opt out of any sale of personal information. We do not sell personal information. To exercise your CCPA rights, contact support@gokismet.app.

7. Cookies and Tracking

Our website uses essential cookies for authentication and session management. PostHog may use cookies or similar technologies for analytics. We do not use third-party advertising cookies. You can control cookie preferences through your browser settings.

8. Security

We use industry-standard measures to protect your data, including encrypted connections (TLS), OAuth-based authentication, hashed contact data, and access controls on our infrastructure. However, no method of electronic storage or transmission is 100% secure.

9. Children's Privacy

Kismet is not intended for children under 13 (or under 16 in the EEA). We do not knowingly collect personal information from children. If we learn that we have collected data from a child under the applicable age, we will delete it promptly. If you believe a child has provided us with personal information, please contact support@gokismet.app.

10. International Data Transfers

Your data is processed and stored in the United States (Vercel hosting, Neon PostgreSQL in US East). If you are located outside the United States, your information is transferred to the US for processing. We rely on standard contractual clauses and other appropriate safeguards for international transfers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice in the app or sending an email. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or your data, contact us at:

  • Email: support@gokismet.app
  • ADG Systems, Inc.
  • ADG Systems, Inc., Delaware