Privacy Policy

Effective date: November 11, 2026; for new accounts, from the day they are created · Version 1.5 · Last updated: November 2026

This policy in your language: Español · Kreyòl ayisyen · Português · Français · Italiano · Русский

In short: we collect what you enter into the App so it can work for you. We do not sell or share your data for advertising, we do not show ads, we do not track you across other apps, and we do not use your data to train AI models. The App has no advertising or analytics tools in it, and it does not use your location or your contacts. Your records live on your phone and are encrypted before they are backed up, with a key we do not have, so we cannot read them. There are two exceptions. The first is what you choose to send to an AI feature (a text, a photo of a nameplate, a machine’s details, a question to the help assistant, or a request to the VertixOps assistant together with a summary of your records), which is processed to give you a result and is not stored by us. The second, only if you turn on online payments, is the payment information of each invoice you send with a payment link (its number, amount, your business name and the status of the payment), which our server keeps in readable form so your customer can pay you through Stripe. If you pay an invoice through one of our payment pages, section 9 explains what happens with your information. If you send us feedback from the App, it reaches us as an email, like a message to support. If you join a company account, other members of that company can see its records according to their role. You can see, correct, export (in the ways your plan offers, section 8) or delete your data at any time, and every person in every state has the rights described in section 8. This policy is available in English, Spanish, Haitian Creole, Portuguese, French, Italian and Russian.

1. Who is responsible

VertixOps is provided by Kainapp LLC, a Florida limited liability company, Florida, USA (“we”, “us”). Contact: info@kainapp.com.

This policy covers the VertixOps app, these web pages and the payment pages we host for our users’ invoices. It is part of our Terms of Use. Words that have a defined meaning in the Terms of Use, such as “Your Content”, “Company Content”, “Owner”, “Billing” and “Employee”, mean the same here.

The App is offered for use in the United States, by adults who use it for their trade or business. It is not directed to people in other countries or to children. It also describes, in section 9, what happens with the information of people who pay one of our users’ invoices through our payment page.

2. What we collect and how

Information you give us

• Account: first and last name, email, phone number, language and the trades you work in. These are stored in readable form so that we can run your account. Your email and password are your account log-in, which the law treats as sensitive personal information; we use them only to sign you in and protect your account. Your password is handled by our sign-in provider; we never see it.
• Business information: what you add to “My invoice info”, such as business name, address, phone, payment instructions and terms, your rates and your tax rate. This is part of your records and is encrypted with them.
• Work records: clients, machines (including brand, model, serial number and the electrical, gas or refrigerant data on their nameplate), jobs and reports, invoices, estimates, the job details you fill in for your trade (for example refrigerant amounts, pool water readings, pests and areas treated, rooms or areas, springs or locks), the materials you save in “My materials” (name, unit, price, your cost and, if you type it, an EPA registration number), expenses, payments you mark as received, notes, and calendar appointments (date, time, client, address and a note about the visit). This may include your customers’ names, addresses, phone numbers and emails. These records are encrypted on your phone before backup; we store them but cannot read them.
• Payments to workers: what you record paying to a helper or technician for a job, such as their name, the amount and the payment method. These are encrypted with the rest of your records.
• Online payments (only if you turn them on): to let your customers pay your invoices through Stripe, our server keeps, in readable form and outside your encrypted records: an internal code for your account and a random code for each invoice sent with a payment link; the invoice number; the amount; the business name shown on the payment page (the name in your Stripe account, or the one in the App if Stripe has none); the identifier of your Stripe account and whether it is ready to receive payments; whether you stopped online payments; and, for each payment attempt, the identifier Stripe gives it, the method (card or bank), the amount, the time and the status (open, on its way, paid, failed, expired, refunded, partially refunded, disputed or closed), the amount refunded, and how many times an invoice was paid more than once. For a company invoice, we also keep the internal code of the company and of the member who created the link. We do not receive or keep your customers’ names, emails, card numbers, bank account numbers or bank log-in details: those are collected by Stripe (section 5). To create your Stripe account we send Stripe your account email and an internal code for your account; everything else Stripe asks you for to verify you and your business (such as your date of birth, Social Security number or Employer Identification Number and bank account) you give directly to Stripe, and we never see it. Before you turn online payments on, the App shows you their cost and asks you to agree; we keep a record of that agreement (the version of what you agreed to, the version of the terms, the date and time, the account and its email, the language and the type of phone or computer). If you turn on “Your client pays the fee”, our server also keeps that setting and, for each invoice, its card price and bank price, and we keep a record of when you turned it on (the version, the version of the terms, the date and time, the account and its email, the company if it is for company invoices, the language and the device).
• Company accounts: if you create or join a company, we store in readable form the company’s name, which company you belong to, your name, email and role (Owner, Billing or Employee), and which clients are assigned to you (as internal codes, not names). Your name, email and role are shown to the company’s Owner and Billing members. Employees cannot see the list of members or the emails of the other members. When a member is invited, the invitation holds the name, the email and, if given, the phone number written by the person who created it, the name of the company, the role, the clients to assign and who created it. Until the invitation is used or cancelled, anyone who has its code can read those details; that is how the invited person sees them before creating a password. We do not store the invitation code itself, only a value calculated from it, and the invitation is deleted when it is used or cancelled. An invitation also holds the company key, locked with the invitation code, so that the invited person can open the company’s records once they join; we cannot open it. Before an invitation is created, the App asks our server whether the email already has a VertixOps account, and our server answers the Owner or Billing member only yes or no. The same applies to a device code: when a member needs to open the company on another device, the Owner or Billing can create a one-time code for that member. We store who it is for and the company key locked with that code, which we cannot open, and we delete it when it is used. A device code only brings the company key to someone who is already a member; it cannot be used to join a company.
• Company records: each record created in a company account is encrypted on the member’s phone with the company key. Outside the encrypted part we keep only what is needed to decide who can open it: the type of record (for example client, machine, report, invoice, estimate, appointment, note, expense, staff pay, fuel or parking report or purchase request), an internal code for the client it belongs to, which member created it, and when it was created and last changed. We cannot read what the record says.
• Staff pay and company expenses: in a company account, what the company records paying each member (the way of paying: per hour, per job or a fixed amount; the amount; the usual hours or jobs per week if given; the date it took effect; and, for a member paid per job, the amount set for each of that member’s work reports) and the company’s expenses (category, name, amount, how often it is paid, dates and an optional photo of the receipt). They are company records, encrypted with the company key. Only the Owner and Billing can open them; an Employee cannot, not even what is recorded about their own pay. We cannot read them.
• Fuel and parking reports and purchase requests: in a company account, what an Employee sends to the company: fuel or parking they paid for (vehicle or place, amount, date and a photo of the receipt) and requests for approval to buy something (category, what is needed, estimated amount, a note and, once approved and bought, the amount paid and a photo of the receipt). They are company records, encrypted with the company key. The Employee who sent them and the Owner and Billing can open them; other Employees cannot. Outside the encrypted part we keep the status of a request (waiting, approved, rejected or bought), so that our servers can prevent an Employee from approving their own request. We cannot read what was requested or the amounts.
• Photos and files: job photos, receipt photos, manuals and plans. They are stored on your device and, on paid plans, backed up encrypted so we cannot view them. Very large files (about 15 MB or more) are not backed up. When you add a photo, the App saves a new, smaller copy of it as a JPEG; making that copy normally removes the hidden information that a phone stores inside a photo, such as the place where it was taken. The original photo in your phone’s gallery is not changed. The photos the App sends to an AI feature are made the same way. Photos and files added in a company account are encrypted with the company key and stored so the other members who are allowed to see them can open them.
• What you send to AI features: the text you submit to Clean up (translation and correction); for the parts assistant, your description of the part, your trade and, when you are working on a machine, the machine’s brand, type, model, serial number, year and the electrical, gas and refrigerant data saved in its record; for Where to buy, the name of the item you want to buy, anything you add under “More details”, your trade and the same machine details (including the year, if saved); for the photo tools for your trade (paint labels, plants, weeds, pool test strips, pests, stains and surfaces, roofs, floors and locks), the photo you take or choose, reduced in size on your phone before it is sent, anything you choose to write with it, your trade, your language and, for the pool test strip, the pool volume you enter, together with the machine details when you are working on a machine; for nameplate reading, the photo you take of the nameplate, reduced in size on your phone before it is sent; and for the manual search, the machine’s brand, type, model and serial number. For the help assistant (Ask for help), which answers questions about how to use the App: the question you write and, so that it can follow the conversation, the earlier questions and answers of the conversation that is open on your screen (at most the last four), together with your language, your plan, your role if you belong to a company, and whether you use an iPhone or an Android phone. The help assistant answers from a guide about how the App works. It does not receive your name, your email or your account identifier, and it does not receive and cannot see your records. How it handles messages about suicide, self-harm or harming others is published on our help assistant safety page (in English). The conversation is kept only on your screen while it is open: it is not saved on your phone or on our servers, and it is gone when you close it. For the VertixOps assistant (the living V at the top of every screen), which answers questions about your own records and prepares clients, work reports, invoices, estimates, appointments and products for you to review: what you write or dictate, the earlier questions and answers of the conversation that is open on your screen (at most the last four), your language, the screen you are on, your trades, and a short summary of your records so it can answer: your clients’ names, contact persons and addresses; your machines’ names, brands and models; your products and prices; your rates; your unpaid invoices and open estimates (number, client, date and total); your most recent jobs (date, client, machine and a short description); and your upcoming appointments (date, time, client, address and note). In a company account it receives only your question, your language, the screen and your role, not the company’s records. The summary is built on your phone each time you ask and is not stored by us. Nothing it prepares is saved until you review it and tap Save. It does not receive your email or your account identifier. It handles messages about suicide, self-harm or harming others the same way as the help assistant. All of this is sent in readable form because the AI must be able to read it. See section 5.
• Support messages you send us by email, including anything you choose to attach, such as a screenshot. Messages sent from the App’s Support option are pre-filled with your name (or your email) in the subject, your account email, the version of the App and whether you use an iPhone or an Android phone; you can change them before you send them, and they are sent from your own email app.
• Feedback you send us with the App’s Send feedback option: the text you write. It is sent to us as an email together with your first name, your email address (so that we can answer you), your plan and, if you belong to a company, your role, your language, the version of the App and whether you use an iPhone or an Android phone. It is not saved in our database: it exists only as that email. Sending feedback is always your choice.
• Web office (company accounts): if you are the Owner or a Billing member of a company and you sign in to the web office at vertixops-be3cf.web.app/office, we receive the same sign-in information as in the App and, from your browser, the usual technical data of a website visit (IP address, browser and device information, time and page requested), which our hosting provider records and keeps for about 30 days for security. Your company key is opened in the browser and kept only in the memory of that window; we never receive it. If you choose “Remember me on this computer”, your personal key is stored in that browser, encrypted with a browser key that cannot be exported, until you sign out; we never receive either key. The web office also stores your choices of language and dark mode in the browser. Photos reach your browser still encrypted, and receipt photos added from the browser are encrypted there before they are uploaded.
• Invoices and estimates emailed from the web office: when the Owner or a Billing member taps “Email PDF” in the web office, the PDF of the document, the message, the name of the company and the customer’s email address are sent to our server and, from there, to Amazon SES, which delivers the email to the customer with a copy to the sender. This information passes through our server only to be sent: we do not save it in our database or write it to our server logs, and Amazon SES does not keep the content of the message. Amazon SES keeps delivery information (the recipient’s address, the time, whether the message was delivered, bounced or marked as spam) under its own policies, and keeps addresses that bounce or complain on a list so that no more email is sent to them. To prevent abuse we keep a count of how many emails each company sends per day and each person per minute, without addresses or content, for 30 days.
• The weekly report of a personal account: if you turn on “Weekly email report” in a personal account, the App shows a notification on your phone every Sunday at 6 PM. When you tap it, your phone creates a PDF of your week (your jobs, with up to 40 small photos, and your invoices, estimates and expenses, with the names of your clients) and opens your own email app, addressed to you; you send it yourself. It does not pass through our servers, and we never see it.
• The company’s weekly report: when the Owner or a Billing member of a company turns on “Weekly email report”, or taps “Send this week’s report now”, in the App or in the web office, a PDF summary of the company’s week is created on that phone or in that browser: the amounts invoiced, collected and spent, the unpaid invoices, and the week’s work reports, invoices, estimates and expenses, with the names of the clients and of the members who did the work or reported the expense. The PDF, the name of the company and that person’s own email address are sent to our server and, from there, to Amazon SES, which delivers it only to that person. It passes through our server only to be sent, in the same way and with the same limits as the invoices emailed from the web office (above). With the report turned on, it is sent the first time that person opens the App or the web office after 6 PM on Sunday. In that person’s account we save only whether the report and “Mute alerts” are turned on and the date of the last report sent.

Information collected automatically

• Technical data our providers need to run sign-in, backup, subscriptions and AI requests securely, such as IP address, device type, operating system, app version and timestamps. Our server keeps ordinary technical logs, such as when a request was made and whether it worked, and not the content of what you sent. When someone opens a payment page we host, our hosting provider records the usual technical data of that request (IP address, browser and device information, the time and the address of the page requested), which we use only for security, to prevent fraud and abuse and to fix problems (section 9).
• Usage counts: how many AI uses you have used in the current day and month, how many questions you asked the help assistant today and how many feedback messages you sent today, kept on our server so plan limits work and so that these features cannot be abused. These are numbers and dates only, not what you wrote. To apply the limits of the help assistant we also use the date your account was created, which our sign-in provider records. Other limits, such as photo reports, invoices and estimates, are counted on your phone from your own records.
• Backup details: when your backup was last updated, and the number and size of your encrypted files.
• Email records: which service emails we sent to your account (the type of message and the date, not its text), so that we do not send the same one twice, and whether you unsubscribed from news.
• Consent records: the date and time you accepted the Terms and this policy, the version you accepted, the account that accepted them (account identifier and email), and the language of the App and the type of phone. When you agree to the automatic renewal of a plan in the App, we record the plan, the price shown, the text that was shown to you, whether it was a free trial and the date the trial ends, the date and time, the account and its email, the language of the screen and whether you use an iPhone or an Android phone. When you agree to the cost of online payments, we record the version of what you agreed to, the version of the terms, the date and time, the account and its email, the language and the type of phone or computer. When you ask us by email to cancel a CORPORATE plan, we record the date of your request, the email of the Owner’s account, the company and which member of our staff made the cancellation. When the App checks your age with Apple or Google (section 11), we record the result (adult, minor or unknown), the date and the type of phone; we never receive your age or your date of birth. This record is kept separately from your profile so that it can be kept after your account is deleted (section 7). If a company account is transferred to another email, we also keep a record of the transfer: its date and the two email addresses. When the Owner of a company consents to the automatic renewal of a CORPORATE plan on our payment page, and when the Owner cancels a plan on that page, we also record the date and time, the account and the company, the amounts and the dates shown on the page, the language of the page, and the IP address and the browser and device information sent by the device used, so that we can show what was agreed, what was cancelled and when. This includes the record of turning on “Your client pays the fee”.

Information from others

• Subscription status from Apple or Google, through our subscription provider: your plan, the product you bought, whether you are in a trial, and renewal or expiration dates. We never receive your card number or bank details.
• Online payments from Stripe (only if you turn them on): whether your Stripe account is ready to receive payments, and, for each payment made through the App, whether it is on its way, succeeded, failed, was refunded or was disputed, with its amount, method and time. Stripe’s notices to our server can also contain details about the person who paid; we do not use or keep them, and we do not ask Stripe for them.
• QuickBooks (only if you connect your own QuickBooks Online account): when you connect, Intuit gives our server an identifier of your QuickBooks company, its name, and access keys that let the App act on your behalf. Afterwards, for each invoice the App created in your QuickBooks, our server reads whether it still has a balance due, only to mark it paid in the App. We never see or receive your Intuit password, and we do not read your other QuickBooks data.
• CORPORATE billing from our payment processor: whether payments went through, the plan, the number of additional users billed (Employees, and Billing members after the first one) and the billing dates. We keep with the company, in readable form, the identifiers our payment processor assigns to the company and to its subscription, the status of the plan, whether a payment method is on file, the number of additional users, and the dates of the trial, of the billing period and of any cancellation. We do not receive full card numbers.

What we do not collect

We do not collect your precise location, your contacts, health data, biometric data, government identification numbers or browsing history, and we do not use the advertising identifier. The App does not ask for or use your location, and the photos it saves normally do not keep the place where they were taken (see “Photos and files” above). The photo tools are not designed to identify people, and we do not use any photo to create a face print or any other biometric identifier. We do not collect consumer health data as defined by the laws of Washington, Nevada, Connecticut or any other state; do not type health information about yourself or anyone else into the AI features, the help assistant or your records. We are not a data broker. The App is not designed to hold protected health information under HIPAA, we are not a business associate, and we do not sign business associate agreements. We do not run credit checks on anyone, and we do not send texts or make calls to your customers: documents you send by text go from your own phone. We send emails to your customers in only one case: when the Owner or a Billing member of a company taps “Email PDF” in the web office, our server sends that document through Amazon SES (above). The App does not contain advertising, analytics or tracking tools. Notifications are created on your phone by the App itself; they are not sent through our servers.

3. Device permissions

• Camera and photos: only when you choose to take a photo, or to choose one from your phone’s photo library: for a report, an invoice or an estimate, a receipt or an expense, a machine or its nameplate, or one of the photo tools for your trade. The App reads only the photos you pick. When you add a photo, the App saves a new, smaller copy of it as a JPEG, which normally removes hidden information stored in the photo, such as the place where it was taken; the original in your gallery is not changed. The App does not ask for your location and does not use it.
• Files: only when you choose to attach a manual or plan.
• Notifications: for job follow-ups, appointment reminders, the weekly report reminder and trial and subscription reminders. Appointment reminders show the client’s name and the time, and they can appear on your lock screen; you can change that in your phone’s notification settings.

You can turn these off at any time in your phone’s settings. Some features will not work without them. The App also uses your phone’s secure storage to keep the key to your encrypted backup on your device; this does not require a permission.

4. How we use information

• To provide the App: sign you in, store your encrypted backup, run company accounts, and let your phone create your PDFs and reports.
• To provide AI features, including the help assistant, and apply plan limits.
• To read the feedback you send us, to answer you if we need to, and to decide what to improve in the App.
• To manage subscriptions and trial reminders.
• If you turn on online payments: to create your payment links and pages, send your customers to Stripe, mark your invoices as paid, tell you by email when an invoice is paid, when a bank payment fails or when an invoice is paid twice, prevent duplicate and fraudulent payments, apply the limits of the feature, and keep the records of our own fees that the law requires for our accounting and taxes.
• To answer support requests and send service emails: a welcome message; notices when your trial starts and before it ends; a notice each time your plan is charged or renewed, when a payment fails, when you cancel, when your plan ends and when you change plans; a notice when your password is changed and when your account is deleted; notices about a company account (when you join or are removed, when someone joins your company, when an invoice is deleted in your company, when an Employee sends a purchase request, when a request is approved or rejected, and when a company account is transferred to another email); security notices; and notices of changes to the Terms or this policy.
• If you are the Owner or a Billing member of a company: to send, through Amazon SES, the invoices and estimates you ask us to email from the web office to your customers, with a copy to you, and the company’s weekly report to your own email, and to count those emails so that the sending limits work.
• Where the law requires it, to check with Apple or Google that you are 18 or older, and to close the account of a minor (section 11).
• To protect your account if it may have been used by someone else: we may sign you out, ask you to change your password or lock the account for a short time (section 10).
• To send you news about the App by email. Every such message tells you how to stop receiving them.
• To keep a record that you accepted the Terms and this policy.
• To keep the App secure, prevent fraud and abuse, and fix problems.
• To comply with the law and enforce our Terms.

We do not sell your personal information. We do not share it for targeted advertising. We do not use it to track you across other companies’ apps or websites. We do not collect, use, sell or disclose your personal information, Your Content or anyone else’s personal information to train large language models or any other AI models, and our AI provider does not use it to train its models under its commercial terms. We do not make decisions about you by automated means that have legal or similarly significant effects, and we do not use automated decision-making technology to make significant decisions about anyone, as California, Colorado and other states define them. Stripe may make its own automated fraud and verification decisions about your Stripe account or about a payment, under its own agreements and privacy policy. We may also create statistics about how the App is used only from the information we can read (never from your encrypted records), combined so that they do not identify you, your business or anyone else; we do not sell them, do not use them to train AI models, and will not try to identify anyone from them or let anyone else do so. We use your information only for the purposes in this section, which are the purposes of the features you use; we collect only what those features need, and we collect sensitive personal information (your account log-in) only when strictly necessary to sign you in. If we ever want to use information we already have for a purpose that is materially different, we will tell you in advance and give you the chance to say no or withdraw your consent first.

5. Who we share it with

We share information only with service providers that help run the App, and only what each needs:

• Google Firebase and Google Cloud (Google LLC): sign-in, the storage of your encrypted backup, of company records and of encrypted files, the server that runs AI requests and plan limits, and the hosting of these web pages, in the United States.
• Anthropic (Anthropic, PBC): processes what you send to AI features and returns the result. That includes the text you submit, the nameplate photo, the photos you send to the photo tools, the item names you search for, the machine details, the questions you ask the help assistant, and your requests to the VertixOps assistant with the summary of your records, with the details described in section 2. For the manual search and for Where to buy, Anthropic runs a web search using the machine details or the name of the item described in section 2. For Where to buy, the search is set to favor stores in the United States; the manual search can return sites anywhere. Neither search includes your name, your email, your location or your account identifier. What you send passes through our server only to be forwarded and is not stored by us: we do not save it in our database and we do not write it to our server logs. Unlike your records, it is not end-to-end encrypted, because the AI has to be able to read it; it travels over encrypted connections. Before your first use, the App tells you this and asks you to agree: once for the AI features that work on what you type or photograph, and once for the help assistant, where the notice also names the provider and says that you are talking to an AI and not to a person. Nothing is sent until you agree. The App remembers on your phone that you agreed, so that the notice is not shown again. Using an AI feature is always your choice, and the rest of the App works without it. Under its commercial terms, Anthropic does not use it to train its models; it may keep it for a limited time under its own policies. According to Anthropic’s privacy information (updated July 1, 2026), Anthropic deletes the inputs and outputs of its API within 30 days, unless its safety systems flag a request as breaking its usage policy, in which case it can keep that request and its answer for up to 2 years (and the safety scores it gives a request for up to 7 years), or unless the law requires it to keep them longer. We will update this policy if Anthropic’s policy changes.
• RevenueCat (RevenueCat, Inc.): confirms your subscription with Apple or Google. It receives your account identifier (a code, not your name or email), your purchase and subscription history for the App, and technical data about your device and the App.
• Apple and Google: app distribution and subscription payments.
• Stripe (Stripe, Inc.) has two different roles.
  (1) For CORPORATE plans bought on our website before November 2026 (since then CORPORATE is bought through the App Store or Google Play, like the other paid plans, and we no longer use Stripe for it), Stripe was our payment processor: it collects and processes the Owner’s payment details, billing address and the amounts charged, and it tells our server whether the subscription is active, how many additional users are being paid for and whether a payment failed. To create the company’s customer record we send Stripe the Owner’s email address, the company’s name and internal codes for the company and for the account. The pages where the Owner enters the card, changes it, sees receipts or cancels a plan that has already been charged are hosted by Stripe. Stripe keeps the payment method so that the plan can be charged each month. We ask Stripe to remove the saved payment method when the Owner cancels before anything was charged, and to delete the company’s customer record together with the saved payment method when the company is deleted. Stripe keeps the records of payments already made for as long as the law and its own policies require, and we cannot delete those. We do not receive or store full card numbers.
  (2) For online payments of your invoices (not available since November 2026), Stripe provides the payment services to you, under your own agreement with Stripe, through the Stripe account you open or connect. Stripe collects directly from you what it needs to verify you and your business, and it collects directly from your customers their payment details. At your direction we send Stripe your account email and an internal code for your account when your Stripe account is created, and, for each payment, the amount, the invoice number, the business name shown on the payment page, the language of the page, our fee and internal codes for your account and the invoice; those details also appear in your own Stripe account. Stripe sends us the status information described in section 2. As the platform you connected, we have technical access to some data in your Stripe account; we use it only to create payment pages, check whether your account is ready to receive payments and record the status of payments, and we do not read or keep your customers’ details. Disclosing this information to Stripe is done at your direction to provide the service you asked for; it is not a sale or sharing of personal information.
  In both roles, Stripe uses the information as described in its own privacy policy, at stripe.com/privacy, including to prevent fraud and to comply with the law.
• Intuit (Intuit Inc., QuickBooks Online), only if you connect your own QuickBooks account in Get paid online. At your direction, for each unpaid invoice you send, our server creates a matching invoice in your QuickBooks company so that it has a QuickBooks payment link. For that we send Intuit only the invoice number, the total, your customer’s name and, if you entered it, your customer’s email address; the lines, photos, notes and the rest of your records stay encrypted and are not sent. Your customer pays on Intuit’s page, under Intuit’s terms and privacy statement (intuit.com/privacy/statement), and the money goes to your QuickBooks account, not to us. Intuit uses this information as described in its own privacy statement and in your agreement with Intuit. In a company account, the QuickBooks account the Owner connects is used for the company’s invoices, and the same information is sent for each of them when the Owner or a Billing member sends it. Disclosing this information to Intuit is done at your direction to provide the service you asked for; it is not a sale or sharing of personal information.
• Amazon Web Services (Amazon Web Services, Inc., Amazon Simple Email Service): delivers the invoices and estimates that the Owner or a Billing member of a company sends by email from the web office, and the company’s weekly report that the Owner or a Billing member asks for, from the App or the web office. It receives the customer’s email address (for the weekly report, the email address of the person who asked for it), the sender’s email address, the name of the company, the message and the PDF, only to deliver the email; it does not keep the content of the message and keeps delivery information under its own policies (section 2). The email shows the name of the company followed by “via VertixOps”. These emails contain no tracking pixels and no tracked links, and we do not tell the sender whether an email was opened. An address that bounces or marks an email as spam can be blocked by Amazon for good, and we cannot unblock it. We do not use it for marketing.
• Resend (the email delivery service at resend.com): sends our emails. It receives your email address, your first name and the content of the message we send you, which can include your plan, an amount charged, dates, the name of your company, the name of a member of it and, when a member joins, that member’s email address, and, for online payments, the number and amount of an invoice that was paid and whether it was paid by card or from a bank account. Our emails never include your records, which are encrypted, and we do not use open tracking or click tracking in them. When you send feedback from the App, Resend delivers that message to our own mailbox: it receives the text you wrote and the details listed in section 2.
• Website hosting and fonts: when you visit our web pages, the companies that host them and that serve their fonts (Google and Cloudflare) receive ordinary technical data such as your IP address and browser type. Our payment pages are hosted by Google and do not load fonts or scripts from other companies.

We require these providers to protect your information with the same or equal protection described in this policy and to use it only to provide their services to us. This list names every company we send personal information to directly; our AI provider may use its own providers to run web searches (see Anthropic’s list of sub-processors). On request we will give you a list of the specific companies to which we disclosed your personal information, or anyone’s personal information.

Third-party websites. When you open or save a manual found by the manual search, your phone connects directly to the website where that manual is published. That website is not our provider and is not controlled by us; like any website you visit, it can see your IP address and the technical data your phone sends. Before showing you results, our server checks whether each link is a PDF by requesting the first part of the file from that website; that request does not include any information about you.

We may also disclose information: when required by law or valid legal process (in that case we can provide only the information we can read, such as account details, subscription records and the payment information described in section 2; your encrypted records cannot be decrypted by us); to protect the rights, safety or property of our users, the public or us (for example, to Stripe or the police when someone reports a fraudulent invoice); or as part of a merger, sale, reorganization or transfer of the business, in which case this policy continues to apply to your information. When we receive a legal demand for information about you, we tell you before we disclose anything, unless the law does not allow it or there is an emergency, so that you can object; when a demand concerns information about your customers that we hold on your behalf, we refer it to you where we can.

When you send an invoice, an estimate or a report by email or text from your phone, or when you send the weekly report of a personal account, it goes out through your own phone’s mail or messaging app, not through our servers. There is one exception: when the Owner or a Billing member of a company taps “Email PDF” in the web office, or when the company’s weekly report is sent, our server sends that email through Amazon SES, as described in section 2. If the invoice has a payment link, the link leads to a page we host, as described in section 9. Whoever you send a document to receives everything in it, including any photos you attached. In a company account, invoices and estimates show the name of the member who did the work; they do not show that member’s phone number or email.

Who can see your records

Personal account: only you. Your records are encrypted on your phone with a key protected by your password before they are backed up.

Company account: the members of the company, according to their role. The Owner and Billing see all of the company’s records, including bookkeeping and what is paid to each person. An Employee sees the full history of the clients assigned to them (or of all clients, if the Owner opens them to everyone) and their own work, but not the bookkeeping, the company’s expenses, costs or what is paid to anyone. The Owner and Billing can see the name, email and role of every member; an Employee sees only their own and cannot see the list of members or their emails. A member who is removed loses access. Company records are encrypted on the members’ phones with a company key before they are stored. Roles are applied by the App and by access rules on our servers. All members of a company share one company key; which records each role can open is decided by the App and by those access rules, and the company files that the web office opens through our server are delivered only to the Owner and Billing.

In both cases, we and our providers hold only the encrypted copy and do not have the keys, so we cannot read it. What we can see is limited to: if you connect QuickBooks, the connection and invoice list described in sections 2 and 7, which are not end-to-end encrypted; if you turn on online payments, the payment information described in section 2, which is not end-to-end encrypted, including, if you turn on “Your client pays the fee”, that setting and the card price and bank price of each invoice; for the web office, how many emails each company and each person sent (counts only); the result of the age check (section 11); your account details (name, email, phone, language and trades); your plan and subscription status; your AI usage counts, including how many questions you asked the help assistant and how many feedback messages you sent today; any feedback or support message you chose to send us; your consent records; which service emails we sent you and whether you unsubscribed from news; when your backup was last updated and the number and size of your encrypted files; and, for company accounts, the company’s name, its members’ names, emails and roles, pending invitations, which clients are assigned to which member (as internal codes), and for each company record its type, the member who created it and its dates.

6. Where information is stored

Your records are saved on your phone first. Once you turn on the encrypted backup, an encrypted copy is kept in your account in Google Firebase in the United States so you can restore it on a new phone with your password or recovery code. Until you turn it on, your records are only on your phone. Your records on the phone work without an internet connection; the encrypted copy is made only when there is a connection. The features that send information (sign-in, the backup, company accounts, AI features, emails, online payments, the help assistant and feedback) work only with a connection, and nothing is sent to us or to our providers while you are offline. If you lose your phone and also forget your password and lose your recovery code, the backup cannot be restored by anyone, including us. On paid plans, your photos and files are also encrypted on your phone and backed up; on the FREE plan they stay only on your device.

Company records are different: they are stored, encrypted, on our servers in the United States so that they can reach the phones of the other members and the web office. In the web office, decrypted records and photos exist only in the memory of the browser window while you use it, and are erased when you sign out or close it.

The App is offered for use in the United States. If you use the App from outside the United States, your information is transferred to and processed in the United States, where privacy laws may be different from those of your country.

7. How long we keep it

• Account and backup: while your account is active.
• Online payment records (section 2): while your account is active, because the App uses them to show the status of your invoices and to prevent duplicate payments; they are deleted when you delete your account, and any payment link still open is closed. Stopping online payments does not delete them; you can ask us to delete them by writing to us.
• QuickBooks connection: the access keys and the name and identifier of your QuickBooks company are kept while you stay connected. When you disconnect QuickBooks, we ask Intuit to cancel the access keys and we delete the connection and the list of invoices we created in your QuickBooks. That list (for each invoice: our internal code, the invoice number, the total, the QuickBooks invoice identifier, its payment link and whether it was paid) is also deleted when you delete your account. The invoices themselves stay in your QuickBooks, which you control.
• Web office emails: the content of an invoice or estimate sent from the web office, and of the company’s weekly report, is not kept by us or by Amazon SES. The daily and per-minute counts used to prevent abuse are deleted after 30 days. Amazon SES keeps delivery information and its list of addresses that bounced or complained under its own policies; an address on that list may not receive emails from the web office again, and we cannot remove it from the list.
• Records of our own fees from online payments (the identifier of each payment, its amount, our fee, your Stripe account identifier and the date): kept in our accounting for as long as tax and accounting laws require, up to 7 years, also after your account is deleted; Stripe also keeps them in our Stripe platform account under Stripe’s own policies, which we cannot shorten.
• Closed or unpaid company accounts: the company’s encrypted records stay on our servers while the company is closed or unpaid, so that the Owner can reactivate it. We delete them 24 months after the company was closed or became unpaid, and never without an email to the Owner at least 30 days before (Terms, section 6).
• Technical logs of our server and payment pages (including IP addresses): about 30 days.
• Inactive FREE accounts: an account on the FREE plan that is not signed in to for 24 months in a row may be deleted after two email notices, about 60 and 14 days before (Terms of Use, section 3). This never applies to paid plans, company accounts or an account with an open payment link.
• Legal holds: if a court order, a legal investigation or an open dispute requires us to keep specific information, we keep only that information, only for as long as required, even after the account is deleted, and we tell you unless the law does not allow it.
• What you send to AI features: not stored by us. It is processed to produce the result and discarded. That includes the questions you ask the help assistant and its answers, and your requests to the VertixOps assistant, the summary of your records sent with them and its answers.
• Company records: they belong to the company. If a member leaves the company or deletes their own account, the records they created stay with the company. If the Owner deletes their account, the company and all of its records, photos, files and invitations are deleted for every member. If that company has a CORPORATE plan, the plan ends at that moment, and we ask our payment processor to delete the company’s customer record together with the saved payment method. Each member’s own account is not deleted: it stays as a separate account, with its name, email and phone, without the company and its records, and the member can keep it or delete it. We do not currently send the members an email when this happens.
• When you delete your account: your account, your profile, your cloud backup, your backed-up photos and files, your AI usage counts (including the counts of help questions and feedback messages), your email records and your company membership are deleted right away, and the data on that phone is erased. We then send one last email to your address to confirm the deletion. We keep the record of your plan (the plan, the product you bought, whether it was a trial, and the renewal and start dates) together with your consent records, for the period in “Consent and subscription records” below. Copies that remain in our providers’ backup and recovery systems are removed on those providers’ own schedules, which according to their published policies can take up to about six months. Deleting your VertixOps account does not disconnect VertixOps from your Stripe account; that connection stays until you remove it in your Stripe account settings. After your account is deleted we do not use the connection for anything, except that our own fee records stay in our Stripe account as described below. We recommend that you remove the connection in Stripe.
• Consent and subscription records: kept to show that we met our legal obligations and that you agreed to the Terms. We keep each consent record (your acceptance of the Terms and this policy, your consent to the automatic renewal of a plan in the App or of a CORPORATE plan, the record of a cancellation, including a cancellation requested by email, your agreement to the cost of online payments and to “Your client pays the fee”, the record of a company account transfer, and the age-check record), and the record of your plan described above, for 3 years after the latest of these dates: the date of the consent, the date your plan or subscription ends, and the date your account is deleted. Then we delete it, unless a legal hold applies. Apple, Google, our subscription provider and Stripe keep their own records of your purchases and payments, including everything in your own Stripe account, under their own policies, and our email delivery provider keeps its own delivery logs for a limited time under its policies.
• Support emails: up to 2 years.
• Feedback: up to 2 years, in our mailbox. It is not in our database, so deleting your account does not delete a feedback message you already sent; you can ask us to delete it by writing to us (section 8).

8. Your choices and rights

• Access and correct: see and edit your information in the App at any time.
• Export: on every plan, save or share any invoice, estimate or report as a PDF; on PREMIUM and CORPORATE, also export your bookkeeping as a CSV file.
• Delete: in the App under Account → Delete account, or at our account deletion page without the App.
• Revoke consent: you can stop AI processing by not using AI features, stop online payments in the App, turn off device permissions in your phone’s settings, stop news emails with the link in any of them, and withdraw your consent entirely by deleting your account. When you withdraw a consent by writing to us, we stop the processing that depended on it within 15 days.
• Ask us: email info@kainapp.com or use the Support option in the App. We confirm that we received your request within 10 business days and respond within 45 days. We may need to verify your identity first.

Because your records are encrypted with a key we do not have, we cannot look up, correct, export or selectively delete what is inside them for you. You do that yourself in the App.

Depending on where you live, you may have additional rights under local privacy laws, such as the right to know, delete, correct or obtain a copy of your personal information, and to appeal our decision. We will honor them as required. We will not treat you differently for exercising your rights.

U.S. state privacy rights and notices

Our position. Several U.S. states have their own privacy laws. Most of them apply only to businesses above a certain size (for example, a minimum amount of revenue or a minimum number of residents of that state whose information the business handles). As of the date of this policy, Kainapp LLC is below those thresholds. We do not want your rights to depend on that, so we give the rights described here to every user, in every state, and we will keep doing so if those laws come to apply to us.

Your rights. Wherever you live in the United States, you can ask us:

• To know and to access: what personal information we hold about you, where it came from, what we use it for and which providers receive it. All of that is described in this policy, and on request we will give you a copy of the information about you that we are able to read.
• To correct: information that is wrong. You can correct most of it yourself in the App.
• To delete: your account and the information in it, and any personal information we hold from or about you, whatever its source, as described in section 7, except what the law requires us to keep.
• To get a list of the companies to which we disclosed your personal information, or anyone’s personal information. They are named in section 5, and we will confirm the list for you on request.
• To obtain a copy in a format you can keep or take elsewhere (for the records inside the App, in the ways listed under “Export” above for your plan).
• To opt out of the sale of personal information, of sharing it for targeted or cross-context behavioral advertising, and of profiling that produces legal or similarly significant effects, and to question the result of any such profiling. We do none of these things, so there is nothing to opt out of; if we ever did, you could also have a person review a decision, receive an explanation and review the information used.
• Not to be treated differently for using any of these rights: we will not deny you the App, charge you a different price or give you a different level of service.

What we do not do. We do not sell personal information. We do not share it for targeted advertising or cross-context behavioral advertising. We do not use it to build profiles for decisions about you. We do not use or disclose sensitive personal information for any purpose other than providing the App to you; the only sensitive personal information we collect is your account log-in, which we use only to sign you in and keep your account secure, so there is no need for a “limit the use of my sensitive personal information” option. We do not sell sensitive personal information, and we do not process anyone’s precise location. We do not knowingly sell or share the personal information of anyone under 18, or use it for targeted advertising. We have not done any of these things in the past 12 months.

How to make a request. Email info@kainapp.com, preferably from the email address of your account, or use the Support option in the App, and tell us what you are asking for. From January 1, 2027 at the latest, you will also be able to use an online form on our website. We may ask for more information to confirm that the request comes from you. We confirm that we received it within 10 business days and answer within 45 days; if we need more time, which can be up to 45 more days, we will tell you why within the first 45 days. You can make a request through an authorized agent: we will ask the agent for proof that you gave them written permission, and we may ask you to confirm it directly. Requests are free of charge unless they are repetitive or clearly excessive.

If we say no. If we decline a request, we will tell you the reason. You can appeal by replying to that email, or by writing to info@kainapp.com with the subject “Privacy appeal”, within 60 days. We will review the request again, taking into account anything you add, and answer you in writing within 45 days, explaining the reasons for the decision. If we need more time, we will tell you why within those 45 days, and in every case we answer within 60 days after we receive your appeal. If the appeal is denied, you can contact the attorney general of your state to submit a complaint.

The limit that encryption puts on these rights. Your records are encrypted with a key we do not have. We cannot open them to look something up, correct it, give you a copy or delete one item. You do all of that yourself in the App, and deleting your account deletes the encrypted records with it.

If your information was entered by someone else. If you are a customer of one of our users, or a member or worker of a company that uses the App, that user or company decides what is recorded about you, and we handle it only on their behalf. Please contact them first. If you write to us, we will pass your request to them where we can identify them, and we will help them answer it as far as the encryption allows.

AI and chat features. Some states have laws about telling people when they are dealing with an AI system and not with a person, and about consent before what someone writes in a chat is read by or shared with another company. We apply the same rules in every state: the App asks for your agreement before anything is sent to an AI feature; the help assistant is identified as an AI on its screen and above every answer, and it tells you so whenever you ask; the conversation is not stored by us; and our AI provider receives it only to produce the answer, as described in sections 2, 5 and 7. How the help assistant handles messages about suicide, self-harm or harming others is published on our help assistant safety page (in English).

California. In addition to the above: (1) California Civil Code section 1798.83 (“Shine the Light”) lets California residents ask which personal information a business shared with third parties for those third parties’ own direct marketing. We do not share personal information with anyone for their direct marketing. (2) The categories of personal information we collect, the sources, the purposes, the providers that receive them and how long we keep each one are summarized in the table below and described in detail in sections 2, 4, 5 and 7. In the past 12 months we collected the categories in that table and disclosed them only to the providers named there, for the business purposes stated. (3) We do not sell personal information and we do not “share” it as that word is used in California law. (4) We do not offer financial incentives in exchange for personal information.

Categories of personal information (all states)

This table summarizes, for the past 12 months and from now on, what we collect, where it comes from, why, who receives it and how long we keep it. We do not sell or share any of it, and we disclose it only for the business purposes stated.

We do not collect precise geolocation, biometric information, health information, contacts, browsing history, advertising identifiers, government identification numbers, bank account numbers, characteristics of protected classes (other than the age-check result in the table) or inferences and profiles about anyone. Your encrypted records (section 2) may contain information about other people that you typed; we cannot read it, and we hold it only on your behalf (section 9).

Global Privacy Control and other opt-out signals

We treat a Global Privacy Control signal, or a similar opt-out preference signal sent by your browser or device, as a valid request to opt out of the sale and sharing of your personal information and of targeted advertising, for that browser or device and, if we can link it to you, for your account. Because we do not sell, share or use personal information for targeted advertising, honoring the signal does not change how the App or our pages work for you. You do not need to do anything else.

Nevada. Nevada law (NRS 603A.340 and 603A.345) lets Nevada residents ask an operator not to sell certain information it has collected about them. We do not sell that information and have no plans to. If you are a Nevada resident and want to submit that request anyway, send it to our designated request address, info@kainapp.com, with the subject “Nevada opt-out”. We will answer within 60 days.

Delaware and other states. The information that the laws of Delaware and of other states require an online service to publish is in this policy: what we collect (section 2), the providers that receive it (section 5), how you can review and correct it (this section), how we tell you about changes (section 13), the date this version takes effect (at the top), and how we respond to Do Not Track signals (section 12).

9. Your customers’ information

You decide what information about your customers goes into the App, and you are responsible for having the right to collect and use it. That includes their names and contact details, the address and photos of their premises, and the details and serial numbers of their equipment. We process it only on your behalf to provide the App to you. If one of your customers contacts us about their data, we will refer them to you. We never use your customers’ email addresses, phone numbers or visits to our payment page to contact them for our own purposes, to market to them, or to sell or share them. If you turn on online payments, the payment information of the invoices you send with a payment link (section 2) is also information about your customers that we handle only on your behalf; your customers’ payment details are collected by Stripe for you, and you are responsible for telling your customers how their information is used, as the law requires for your business. The same applies if you connect QuickBooks: your customer’s name and email address, the invoice number and the total go to your own QuickBooks account (section 5), and your customers pay on Intuit’s page. If you add other ways to pay to your invoices (for example Zelle, PayPal, Venmo, Cash App or another link), the App only prints the details you entered; your customer pays directly through that service, and we receive nothing about that payment.

The same applies to information about the helpers and technicians you pay, and, in a company account, about its members: the company is responsible for informing them and for having the right to record their information.

When you use an AI feature, you decide what to send. Do not send information about other people that you have no right to share. When you take a photo for the photo tools, frame the label, the plant, the strip, the pest, the surface, the material or the lock, and leave people, faces, vehicle plates, house numbers and documents out of it. The same applies to the questions you write to the help assistant and to the feedback you send us: neither needs information about your customers or about anyone else, so leave it out.

If you pay an invoice through one of our payment pages

This part is for people who receive an invoice with a “Pay online” link from a business that uses VertixOps. Leer en español.

• Who you are dealing with. VertixOps is software used by the business that sent you the invoice (which can be a company whose office sent it from our web office). That business decided to send you the link, is the seller, and receives your payment through its own Stripe account. Kainapp LLC, which makes VertixOps, does not receive your payment. Questions about the invoice, the payment, a refund or the business’s use of your information go to that business.
• What we collect when you open the page. Our page shows the business name, the invoice number and the amount due. When you open it, our hosting provider (Google) records the usual technical data of your visit: your IP address, browser and device information, the time and the address of the page you requested, which includes a code that identifies the invoice. We use that data only to keep the page secure, to prevent fraud and abuse (for example, to limit repeated payment attempts) and to fix problems, and we keep it for about 30 days. Our page does not use cookies, we do not load scripts from other companies, and we do not sell or share your information or use it for advertising. We do not tell the business whether or when you opened an email, the invoice or the payment page; the business learns only whether the invoice was paid. We never use your email address, your phone number or your visit to contact you for our own purposes or to market to you.
• What Stripe collects. When you choose to pay by card or from your bank account, you go to a page hosted by Stripe. Stripe collects your name, email, card or bank account details (for bank payments, usually by connecting to your bank through Stripe), billing information and information used to prevent fraud. Stripe processes that information for the business and for its own purposes, as described in Stripe’s privacy policy at stripe.com/privacy. Apple Pay and Google Pay, if you use them, are covered by Apple’s and Google’s own terms. Stripe’s page may offer you to save your payment details with Link, Stripe’s own service, so that you can pay faster at businesses that accept it. That is your choice and is between you and Stripe. Neither the business, through VertixOps, nor Kainapp can see or reuse saved card details.
• What the business receives. Stripe gives the business, in its own Stripe account, the payment details it needs, such as your name, email, the type and last digits of your card or bank account, and the status of the payment. Kainapp never receives or stores your card number, card security code, bank account number or bank log-in details.
• Who can see the page. Anyone who has the link can open the page and see the business name, the invoice number and the amount due. If you received a link by mistake, close the page and tell the business.
• What we keep about the payment. For the business, our server records whether the invoice was paid, the amount, the method (card or bank) and the time, without your name or contact details, so that the business sees the invoice as paid in VertixOps. We handle that information only on the business’s behalf.
• Your rights. You can ask us about, or ask us to delete, the technical data of your visit described above by writing to info@kainapp.com; we will answer as described in section 8. For the payment information held by the business or by Stripe, contact the business or Stripe; if you write to us, we will forward your request to the business when we can identify it and help it answer.

Si pagas una factura en una de nuestras páginas de pago (en español)

10. Security

We use reasonable measures to protect information: your records are encrypted on your device before backup, with a key that is protected by your password and your recovery code and kept in your phone’s secure storage; data travels over encrypted connections; sign-in uses password rules; and access rules let each account reach only its own backup and, in a company account, only what the member’s role allows. Our payment pages do not handle card or bank details and do not load scripts from other companies. No system is completely secure. Protect your phone with a passcode, keep your password and recovery code private, and choose a password that you do not use anywhere else. If we see signs that someone else may have used your account, we may sign you out of the App and the web office, ask you to change your password, or lock the account for a short time until you show us that it is you (Terms of Use, section 3).

If a security breach affects your personal information, we will notify you without unreasonable delay and no later than 30 days after we discover it, unless law enforcement asks us to wait, and we will notify the authorities when the law requires it. If a breach affects information that we hold on behalf of a user about that user’s customers, we will tell that user without undue delay, and in any case within 10 days after we determine, or have reason to believe, that the breach occurred, so that the user can meet its own obligations. If we learn of unauthorized access to information we received from Stripe, we will also tell Stripe.

11. Children

The App is for adults running a business. We do not knowingly collect information from anyone under 18. If you believe a minor has created an account, contact us and we will delete it.

The App and our website are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that we have, we will delete it promptly. A parent or guardian who believes their child gave us personal information can write to info@kainapp.com.

Where the law requires it (today in Texas, and from 2027 in Alabama, California, Louisiana and Utah), we ask the app store or your phone’s operating system for your age category and, for a minor, whether a parent consented. On an iPhone, the App asks only when Apple says the law applies to your account; on an Android phone, the App asks for every account. We use that signal only to confirm that you are 18 or older, to close the account of a minor, and to comply with the law. If the signal shows that you are under 18, the App signs you out and the account is closed at once, so nobody can sign in to it. Thirty days later we delete the account and everything in it, as if you had deleted it yourself (section 7), unless before then you show us that it was a mistake by writing to info@kainapp.com. We do not use the signal for anything else and do not share it. We never receive your age or date of birth: we keep only a record of the result of the check (adult, minor or unknown), its date and the type of phone, with the consent records, for 3 years (section 7), to show that we complied with the law. We do not sell or share the personal information of anyone under 18 or use it for targeted advertising.

12. Do Not Track

We do not track you across other sites or apps. We honor Global Privacy Control and similar opt-out preference signals as described in section 8. Because we do not track you, a Do Not Track signal does not change how the App or our pages work.

We also do not allow other parties to collect personal information about your online activities over time and across different websites or apps when you use the App or our website. The App has no advertising, analytics or tracking tools from other companies in it. Our web pages do not use advertising pixels, session recording tools or third-party chat tools. The providers that host our web pages and serve their fonts receive only the ordinary technical data described in section 5.

13. Changes to this policy

If we make a significant change, we will tell you by email and in the App at least 30 days before it takes effect, with a summary of what changes and the date, except for a change required by law on a shorter deadline, which we tell you as soon as we can. If a change would let us use information we already have in a materially different way, we will not do it without giving you, in advance, a reasonable chance to say no or to withdraw your consent, and where the law requires it we will ask for your consent first. We review this policy at least once a year. The version and date at the top show when it was last updated, and we keep the earlier versions and will send you any of them if you ask.

Languages and accessibility

This policy is published in English, Spanish, Haitian Creole, Portuguese, French, Italian and Russian, the languages of the App. Each version is meant to say the same thing; if they differ, we apply the version that is more protective of you. We send privacy notices in the language you use in the App. We want this policy to be readable by everyone, including people who use a screen reader, larger text or other assistive technology; it can be printed or saved as a separate document, and if you need it in another format, such as large print or plain text, write to info@kainapp.com and we will send it at no charge.

14. Contact

Kainapp LLC, Florida, USA · info@kainapp.com

Mailing address: Kainapp LLC, 19591 NE 10th Ave, Bay C, North Miami Beach, FL 33179, USA.

Privacy requests, including the requests described in section 8 and requests from residents of California, Nevada and other states, go to the same email address. Tell us which state you live in so we can apply the rules of that state.