Privacy policy

Google sign-in and account information

When you choose Google sign-in, Google provides the account identifier and basic profile information associated with that sign-in, such as your name, email address and profile image. We use this information to authenticate you, maintain your Kitsune account, associate your activity with that account, and apply invitations, roles and access permissions.

Google handles your Google password; Kitsune does not receive it. Google sign-in does not itself grant Kitsune access to your Gmail messages, Google Drive files or calendar. Any separate integration that requests additional permissions needs its own authorization and explanation.

We do not sell Google sign-in information or use it for personalized advertising. Our handling of information received from Google is subject to the Google API Services User Data Policy, including applicable Limited Use requirements.

Information you choose to contribute

Depending on the utility you use, your contributions may include journal notes, images, audio, video, messages, invitations, task activity, and context about a Place, Space, Thing or Moment. Marker scans and check-ins may create records linking an action to its physical or digital context.

Camera, microphone and location features depend on the permissions you grant and the actions you take. You can manage those permissions in your device or browser. An uploaded file may contain additional information, including location or other metadata; consider its contents before sharing it.

How information is used

We use information to operate accounts and utilities, provide the activities you request, organize contributions in context, produce requested processing results and engagement records, deliver account and invitation messages, respond to support requests, and maintain security and reliability.

A utility may produce findings, Perspectives or a Master Engagement Record from contributed information. These outputs can have a different retention period from the original capture.

Visibility, sharing and processing

Who can access a contribution depends on the utility, its Moment type, the governing System of Things, and the roles and sharing settings for that activity. Authorized owners, administrators or participants may have access within that context. Review the audience before contributing; a public activity can make information publicly accessible.

We use service providers to operate the service. Google Firebase and Google Cloud provide services such as authentication, hosting, databases and file storage. Pages that display maps may contact Mapbox. Providers receive the information needed to perform their functions and may process technical request information such as IP addresses.

Where an enabled utility uses an AI processor, relevant contributions and context may be processed locally or sent to a configured cloud processor, including Google Gemini, to provide the requested result. The processors available depend on the utility and its configuration. Review the processing choices and any provider notices before submitting sensitive material.

Information may also be disclosed when needed to comply with applicable legal requirements or investigate security incidents and abuse.

Storage and retention

Features labelled “72-hour ephemeral” use a limited working window for the applicable captures or review records. Expiry and deletion processing may take time; do not rely on an ephemeral workspace as an archive. Download material you want to preserve while it is available.

Retained journals, authorized findings, Perspectives, engagement records, account records and security logs have different purposes and lifecycles. Expiry of a source capture does not automatically delete a separately retained record or a copy another participant has downloaded. Service-provider logs and backups may also follow separate retention schedules.

Information may be processed in the countries where Kitsune and its service providers operate. We use access controls and other safeguards, but no storage or transmission method can guarantee absolute security.

Browser storage and technical information

The service may use cookies or browser storage for sign-in state, session continuity and preferences. Hosting, authentication and other providers may receive browser and device information, request times, IP addresses and diagnostic logs needed to deliver, secure and troubleshoot their services.

Your choices and deletion requests

You can decline optional capture permissions, manage sharing where controls are available, and revoke Kitsune’s Google authorization through your Google Account connections. Revoking that authorization does not by itself delete information already stored by Kitsune.

To request access, correction, export or deletion of your account or information, email tomas@kitsuneaisystem.com. Include the email associated with your account and describe the request. We may need to verify your identity. Information in a shared or organization-owned System of Things may also require coordination with its responsible administrator, and some records may need to be retained for security or legal purposes.

Children and classroom activities

Schools, parents and guardians should contact us before including children’s personal information so that the permissions and arrangements for the particular activity can be confirmed. Do not put a child’s personal information in a public Moment. A classroom or supervised activity may require an additional, specific privacy notice.

Changes and contact

We will update the date above when this policy changes. If a new use of Google account information requires additional consent, we will request it before that use. Privacy questions and requests can be sent to tomas@kitsuneaisystem.com.