In short
- We never sell your personal data, and there are no ads.
- We collect only what Kinokora needs; each item and its purpose is in the table below.
- Some features use services outside India — listed below, so you can choose.
- Delete your account any time, in the app or on the web.
- Kinokora is for people aged 18 and over.
Who we are
Kinokora is made by KARTYKK LLP, registered in India (“we”, “us”). For your personal data we are the Data Fiduciary under India's Digital Personal Data Protection Act, 2023 and its Rules.
What we collect
| Data | Why | Needed? | Kept in | Shared with | Kept for |
|---|---|---|---|---|---|
| Name and email address | Your account and sign-in | Optional | Our server in India (DigitalOcean, Bengaluru) | — | Until you delete your account |
| Google account ID | Sign in with Google (if you choose it) | Optional | Our server in India (DigitalOcean, Bengaluru) | Until you delete your account | |
| Year of birth | Confirm you are 18 or older | Yes | Your phone | — | Until you erase app data |
| Farm location pin | Weather for your farm | Optional | Your phone | Open-Meteo | Until you remove it |
| Crops, stages, tasks and notes | Run your crop plan | Yes | Your phone; Our server in India (DigitalOcean, Bengaluru) if you sign in | — | Until you delete it or your account |
| Crop photos | Journal and plant-health checks | Optional | Your phone | Google Gemini (only for a plant-health check) | Until you delete them |
| Voice questions | Turn your spoken question into text | Optional | Not stored by us | Your phone's speech service (Google or Apple) | Not kept by Kinokora |
| Questions to the grow assistant | Answer your question | Optional | Your phone | Google Gemini | Until you clear the chat |
| Box readings and equipment states | Graphs, alarms and remote control | Optional | Your box; Our server in India (DigitalOcean, Bengaluru) if the box is linked to your account | — | 365 days, or until you delete your account |
| Push notification token | Send alarms to your phone | Optional | Our server in India (DigitalOcean, Bengaluru) | Expo | Until you sign out or delete your account |
| Subscription status | Unlock paid features | Optional | RevenueCat, Google Play / App Store | RevenueCat | As long as the store requires for purchases |
Phone permissions
Kinokora asks for a permission only when you use the feature that needs it. You can turn any of them off in your phone settings.
| Permission | Why | When |
|---|---|---|
| Camera | Take photos of your crop for the journal and plant-health checks. | Only when you tap the camera button. |
| Photos | Attach existing photos to your journal. | Only when you choose a photo. |
| Location (while using the app) | Show weather for your farm. | Only when you set your farm pin. Never in the background. |
| Microphone + speech recognition | Ask the grow assistant a question by voice. | Only while you hold the mic button. |
| Local network | Talk to your Kinokora box on your farm Wi-Fi. | When you add or open a box. |
| Face ID / fingerprint | Unlock your box instead of typing its PIN. | Only if you turn it on. |
| Notifications | Alarms when your room goes out of range, and task reminders. | After you allow them. |
Services we use
These companies process data for us, only to run Kinokora:
| Service | What for | Data | Where |
|---|---|---|---|
| DigitalOcean | Hosts our server and database | Account, farm and box data (if you sign in) | India (Bengaluru) |
| Google (Gemini API) | Grow assistant, plant-health checks, translation | Your question, photo and crop context | Outside India |
| OpenAI / DeepSeek | Backup translation of app text | Text being translated | Outside India |
| Google Sign-In | Sign in with Google | Name, email, Google ID | Outside India |
| Open-Meteo | Weather forecast | Farm location (rounded) | Outside India (EU) |
| OpenStreetMap Nominatim / Photon | Find a place on the map | The place name you type | Outside India (EU) |
| Esri / Google Maps | Map and satellite tiles | Map area you view | Outside India |
| Expo | Deliver push notifications | Push token, alarm text | Outside India (USA) |
| RevenueCat | Manage subscriptions | Anonymous purchase ID, subscription status | Outside India (USA) |
| Google Play / Apple App Store | Payments and app delivery | Purchase details (handled by the store) | Outside India |
Data outside India
Our own server is in India. These services process some data outside India: Google (Gemini API), OpenAI / DeepSeek, Google Sign-In, Open-Meteo, OpenStreetMap Nominatim / Photon, Esri / Google Maps, Expo, RevenueCat, Google Play / Apple App Store. We use them only for the purpose shown, and only when you use that feature.
AI features
Grow assistant chat (text or voice), Plant-health check from a photo, Translation of crop guides. These send your question or photo to Google Gemini. AI answers can be wrong. Details: AI in Kinokora.
Sharing
- We do not sell or rent personal data, and we do not share it for advertising.
- We share data only with the services listed above, to run the app.
- We disclose data if Indian law, a court or a government authority requires it.
- If KARTYKK LLP is merged or sold, your data moves only under this policy, and we tell you first.
Consent and choices
We ask for your consent in clear words before optional features use your data. You can withdraw it any time — in the app's settings or with the Your rights form — and withdrawing is as easy as giving it. Withdrawing does not affect what was done before.
How long we keep data
Each data type's retention is in the table above. After your account is deleted:
| What we keep | Why | How long |
|---|---|---|
| Invoices and payment records | Indian tax and LLP accounting law | Up to 8 years |
| A record that you asked for deletion | Proof that we did it | 3 years |
| Server backups | Deleted data drops out as backups roll over | Up to 30 days |
Security
- All connections to our server use HTTPS.
- Passwords are stored only as salted hashes.
- Your box is protected by a PIN; each box gets its own login to our server.
- Only staff who need it can access account data, and access is logged.
If a personal data breach affects you, we will tell you and the Data Protection Board of India as the law requires.
Your rights
You can ask for a summary of your data, correct it, delete it, withdraw consent, nominate someone to act for you, and complain. Use the Your rights page.
Children
Kinokora is for adults aged 18 and over. We ask your year of birth on first use. We do not knowingly collect data from anyone younger. If you think a child has used Kinokora, write to privacy@kartykk.com and we will delete the data.
Deleting your account
In the app: Open Kinokora → Tap More → Tap Account → Tap Delete account and confirm. Without the app: delete-account page. We finish within 30 days.
This website
This website uses no cookies, no analytics and no trackers. Forms send your answer to Google Forms, which we use only to reply. Our web host keeps short server logs (IP address, browser) for security.
Changes
If we change this policy in a way that matters, we tell you in the app before it applies.
| Version | Date | What changed |
|---|---|---|
| 0.9-draft | 30 September 2026 | First draft generated from the app's real permissions and services. |
Contact
KARTYKK LLP, India. LLPIN ACZ-6296.
Privacy questions: privacy@kartykk.com · Support: support@kinokora.com
Grievance Officer: (name to be published), privacy@kartykk.com, Monday–Saturday, 10:00–18:00 IST. Or use the Your rights form.