Legal

Privacy

Kyncess is a wishlist for the things you save from any store. This page says, in plain words, what we collect to make that work, who else sees it, and what you can do about it.

Who's responsible for this

Kyncess is based in New Zealand, and is responsible for the personal information on this page: what's collected, and why.

What we collect

Only what running Kyncess actually needs:

  • Your account: your name, email address, handle and bio; your password, if you set one, stored only in scrambled (hashed) form; and your settings — the currency you shop in, whether new collections start private or public, and whether you want to hear about price drops, restocks or new followers. We also keep who invited you, who you follow, and how many invites you have left.
  • What you save: your collections, and the products in them — the store, the product, its price and stock, and any size, colour or note you add.
  • Invites: when you invite someone by email, we keep the address you typed, so we can send the invite to it and know when it's been used. If you start joining from an invite link, we hold the name, email address and handle you typed while you finish, for up to 24 hours.
  • Your waitlist entry: your email address, when you joined, when you were invited, and, when we can tell, a rough idea of where you came from — a search engine, an AI assistant, Instagram, Facebook, or somewhere else. We keep only that short label, never the address of the site that sent you.
  • Sessions: a session token that keeps you signed in, plus the IP address and browser your device used to sign in, and when that session expires.

What we don't collect

No advertising or analytics cookies, from us or anyone else. The only cookies Kyncess sets are the ones that keep you signed in.

To stop abuse, Kyncess counts recent requests from each IP address for a short while. Those counts stay in the app's memory and are never saved.

On kyncess.com, we count visits that arrive from AI assistants, and requests from AI crawlers, but only as daily totals for the whole site. There's no per-visitor record, and nothing in those totals is tied to your IP address or to you.

Who processes it

A few other companies handle parts of this for us:

  • Railway hosts Kyncess's app, worker and database.
  • Resend sends Kyncess's emails: sign-in links, password resets, waitlist confirmations, invites (to the address the inviter typed), and a note to the inviter when someone joins from their invite.
  • Google, through Search Console, gives us daily totals of how people find kyncess.com in Google search. Google only sees what a search engine already sees; it doesn't see your account.

Railway and Resend store or process your information outside New Zealand: Railway hosts Kyncess overseas, and Resend sends our emails from its Tokyo region. We choose providers with safeguards comparable to New Zealand's.

The browser extension

When you install the Kyncess browser extension, it looks at each web page you open for product details — name, price, images, and the size or colour you've picked — so it can show a Save button and a count of the products on the page.

That reading happens on your own device only. Nothing about the pages you browse is sent to Kyncess unless you click Save. When you do, the extension sends the page's address, the collection you chose, and any size, colour or note you add, and Kyncess reads the product from the store's page itself. We never receive a record of anywhere else you've been.

The extension stores the sign-in that connects it to your account in your browser, on your device.

How long we keep it, and deleting your data

We keep your account and your saves for as long as your account is open.

An invite nobody uses is marked expired on an hourly check. The invite, including the email address it was sent to, stays on record until the account that sent it is closed. A sign-up started from an invite link and never finished is deleted after 24 hours. Your session ends automatically too, or the moment you sign out.

Kyncess doesn't have a self-serve delete button yet. Until it does, email hey@kyncess.com and we'll delete your account, your saves, your waitlist entry, or an invite sent to your address.

Your rights

Under New Zealand's Privacy Act 2020, you can ask to see the personal information we hold about you, and ask us to correct anything that's wrong. Email hey@kyncess.com and we'll get back to you.

If you're not happy with how we've handled a request, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.

Contact

Kyncess, New Zealand. Email hey@kyncess.com.