Kendal Privacy Policy — Volveron LLC

1. Scope

This privacy policy describes how Volveron LLC (“Volveron,” “we,” “us,” “our”) collects, uses, and shares information when you use Kendal — our voice-first scheduling app for adults with ADHD — on iOS (bundle identifier com.kendalapp.Kendal) and the backend services that support it.

This policy applies only to the Kendal mobile application. For our coaching communications platform (Nexus), see the Volveron Coaching Privacy Policy.

2. What We Collect

Voice and conversation data

Voice audio — what you speak when interacting with Kendal. Transmitted to Deepgram for speech-to-text. Not retained long-term beyond the conversation log.
Conversation transcripts — the text of what you said and what Kendal replied. Stored in your account’s conversation log for up to 30 days, then automatically purged.
Audio clips — temporary clips of Kendal’s spoken replies, stored in Cloudflare R2 to support playback and notifications. Automatically purged within 30 days.

Calendar data

Your iCloud / EventKit calendar events — read-only. Kendal uses event titles, times, and locations as context for scheduling. Kendal does not modify your calendar unless you explicitly ask it to add an event.
A shared partner calendar, if you choose to connect one — read-only, busy-times only. We do not read partner event titles, locations, or attendees.

Account and preferences

Apple identifier via Sign in with Apple, plus the Apple email-relay address you choose to share. We do not receive your real email address unless you share it directly.
Goals and completion history — the goals you set in Kendal and your progress on them.
Preferences — chosen voice, playback speed, notification settings, quiet hours.
Notification engagement metadata — whether a notification was delivered or tapped. Used only to improve reminder timing.

What we do not collect

Kendal does not collect: precise or coarse location, contacts, photos, health data, advertising identifiers (IDFA), or analytics SDK data. We do not integrate any third-party advertising or analytics SDKs in the Kendal iOS app.

Although Kendal processes your voice, we do not generate or store voice biometric identifiers. Audio is used transiently for speech recognition and discarded; voice is not used for identification or authentication.

3. How We Use This Data

To power the live voice conversation between you and Kendal.
To generate a useful schedule, surface reminders, and track progress on your goals.
To send timely notifications you’ve opted into.
To debug issues you report and improve the app’s reliability.
To detect and prevent abuse or violations of our terms.

We do not use your data to train public AI models, target advertising, sell to data brokers, or build profiles for marketing.

4. Third Parties We Share Data With

To operate Kendal, we share specific data with the following service providers. Each is contractually bound to use the data only to provide its service to us.

Provider	Purpose	Data shared
Anthropic Privacy policy	Large language model — generates Kendal’s responses	Conversation transcripts, schedule snapshots, your goals
Deepgram Privacy policy	Speech-to-text — turns your voice into text	Raw audio of your speech (not retained by Deepgram)
Cartesia Privacy policy	Text-to-speech — turns Kendal’s replies into audio	Kendal’s text responses
Cloudflare R2 Privacy policy	Object storage — stores short-lived audio clips and operational logs	Audio clips (purged within 30 days); JSONL operational logs
Fly.io Privacy policy	Backend hosting — runs our application servers and Managed Postgres database	All Kendal account data processed by our backend
Apple Privacy policy	Sign in with Apple, push notifications (APNs), EventKit calendar access — handled on-device under Apple’s terms	Apple identifier; APNs device token; calendar permissions

We do not share your data with advertising networks, do not embed analytics SDKs in the Kendal app, and do not sell or rent your data.

5. Data Retention

Conversation transcripts: 30 days, then automatically purged.
Audio clips in storage: 30 days, then automatically purged by R2 lifecycle policy.
Account data (goals, schedule, preferences, Apple identifier): retained until you delete your account.
Session tokens (JWT): 7-day lifetime, rotated on each reconnect; invalidated immediately on account deletion or Sign in with Apple revocation.
Operational logs: retained briefly for reliability and abuse prevention (typically under 30 days).

6. How to Delete Your Data

You can delete your Kendal account and all associated data at any time:

In the app: Settings → Account → Delete Account. This permanently removes your account and all associated records from our database and object storage. The action cannot be undone.
By email: contact hello@volveron.com from the address tied to your Sign in with Apple account and we will delete your account on request.

7. How to Revoke Consent

Microphone, calendar, notifications: revoke at any time in iOS Settings → Kendal.
Sign in with Apple: revoke in iOS Settings → Apple ID → Sign in with Apple → Kendal → Stop Using Apple ID. This bumps your server-side session version and invalidates any active session.
Partner calendar: disconnect in Kendal’s Settings → Partner.
You can also delete your account entirely (see above) to revoke all consent at once.

8. Children

Kendal is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with information, contact us and we will delete it.

9. California Residents (CCPA / CPRA)

Categories of personal information we collect:

Identifiers: Apple ID, Apple email-relay address (Yes)
Audio recordings: voice input during conversations (Yes, transient)
Internet or other electronic activity: No
Geolocation: No
Biometric information: No — voice is processed transiently and not used for identification
Inferences: goal- and scheduling-related preferences derived from your interactions (Yes)

You have the right to know what we collect, delete it, correct it, and opt out of any “sale” or “sharing.” We do not sell or share personal information for cross-context behavioral advertising. To exercise any right, email hello@volveron.com.

10. EU/UK Residents (GDPR / UK GDPR)

The lawful bases for our processing are:

Consent — for microphone access, calendar access, partner-calendar access, and notifications.
Performance of a contract — to provide the Kendal service you have signed up for.
Legitimate interests — limited operational logging needed to keep the service running and secure.

You have the right to access, rectify, erase, restrict, port, and object to processing of your personal data, and to lodge a complaint with a supervisory authority. To exercise these rights, email hello@volveron.com.

11. Security

We use industry-standard administrative, technical, and physical safeguards to protect your information, including TLS in transit, access controls, and encryption at rest where supported by our infrastructure providers. No system is perfectly secure, however, and we cannot guarantee absolute security.

12. Changes to This Policy

We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date above and providing notice in the app. If we change the categories of data we collect or the third parties we share with, we will provide notice in the app before the change takes effect.

13. Contact

Volveron LLC
2108 N St, Suite N
Sacramento, CA 95816
Email: hello@volveron.com