Kendal Privacy Policy — Volveron LLC

1. Scope

This privacy policy describes how Volveron LLC (“Volveron,” “we,” “us,” “our”) collects, uses, and shares information when you use Kendal — our voice-first scheduling assistant for adults with ADHD — on iOS (bundle identifier com.kendalapp.Kendal), Kendal’s SMS text-messaging service, and the backend services that support them.

This policy applies to the Kendal mobile application and Kendal’s SMS text-messaging service. For our separate coaching communications platform (Nexus), see the Volveron Coaching Privacy Policy.

2. What We Collect

Voice and conversation data

Voice audio — what you speak when interacting with Kendal. Transmitted to Deepgram for speech-to-text. Not retained long-term beyond the conversation log.
Conversation transcripts — the text of what you said and what Kendal replied. Stored in your account’s conversation log for up to 30 days, then automatically purged.
Audio clips — temporary clips of Kendal’s spoken replies, stored in Cloudflare R2 to support playback and notifications. Automatically purged within 30 days.

Calendar data

Your iCloud / EventKit calendar events — read-only. Kendal uses event titles, times, and locations as context for scheduling. Kendal does not modify your calendar unless you explicitly ask it to add an event.
A shared partner calendar, if you choose to connect one — read-only, busy-times only. We do not read partner event titles, locations, or attendees.

Account and preferences

Apple identifier via Sign in with Apple, plus the Apple email-relay address you choose to share. We do not receive your real email address unless you share it directly.
Goals and completion history — the goals you set in Kendal and your progress on them.
Preferences — chosen voice, playback speed, notification settings, quiet hours.
Notification engagement metadata — whether a notification was delivered or tapped. Used only to improve reminder timing.

SMS opt-in data

Name and mobile phone number — if you opt in to Kendal’s SMS service through the sign-up form, we collect the first name, last name, and mobile number you submit, together with your consent status and the date of consent.

What we do not collect

Kendal does not collect: precise or coarse location, contacts, photos, health data, advertising identifiers (IDFA), or analytics SDK data. We do not integrate any third-party advertising or analytics SDKs in the Kendal iOS app.

Although Kendal processes your voice, we do not generate or store voice biometric identifiers. Audio is used transiently for speech recognition and discarded; voice is not used for identification or authentication.

3. How We Use This Data

To power the live voice conversation between you and Kendal.
To generate a useful schedule, surface reminders, and track progress on your goals.
To send timely notifications you’ve opted into.
To debug issues you report and improve the app’s reliability.
To detect and prevent abuse or violations of our terms.

We do not use your data to train public AI models, target advertising, sell to data brokers, or build profiles for marketing.

4. SMS / Text Messaging

When you opt in to receive SMS messages from Kendal (Volveron Solutions), the mobile information you provide (including your phone number) will be used solely to deliver the scheduling and assistant messages you request. We do not sell, rent, or share your mobile opt-in information or phone number with third parties or affiliates for marketing or promotional purposes. Message frequency varies. Message and data rates may apply. Reply STOP to unsubscribe at any time, or HELP for assistance. Standard carrier rates apply.

Kendal’s SMS service is two-way and user-initiated: Kendal only sends messages in response to requests you send it, and does not send promotional or marketing broadcasts. We may share your phone number with our messaging platform and mobile carriers strictly as needed to deliver the texts you request; these providers may not use it for their own marketing. You can revoke consent at any time by replying STOP. We retain opt-out records only as required to honor your request and comply with applicable law.

You opt in to Kendal’s SMS service through the sign-up form on the Kendal page. Consent to receive SMS messages is not a condition of purchasing or using any Volveron or Kendal product.

5. Third Parties We Share Data With

To operate Kendal, we share specific data with the following service providers. Each is contractually bound to use the data only to provide its service to us.

Provider	Purpose	Data shared
Anthropic Privacy policy	Large language model — generates Kendal’s responses	Conversation transcripts, schedule snapshots, your goals
Deepgram Privacy policy	Speech-to-text — turns your voice into text	Raw audio of your speech (not retained by Deepgram)
Cartesia Privacy policy	Text-to-speech — turns Kendal’s replies into audio	Kendal’s text responses
Cloudflare R2 Privacy policy	Object storage — stores short-lived audio clips and operational logs	Audio clips (purged within 30 days); JSONL operational logs
Fly.io Privacy policy	Backend hosting — runs our application servers and Managed Postgres database	All Kendal account data processed by our backend
Apple Privacy policy	Sign in with Apple, push notifications (APNs), EventKit calendar access — handled on-device under Apple’s terms	Apple identifier; APNs device token; calendar permissions
Telnyx Privacy policy	SMS delivery — sends and receives Kendal’s text messages (used only if you opt in to SMS)	Your mobile phone number and message content, used solely to deliver the texts you request; not used for its own marketing

We do not share your data with advertising networks, do not embed analytics SDKs in the Kendal app, and do not sell or rent your data.

6. Data Retention

Conversation transcripts: 30 days, then automatically purged.
Audio clips in storage: 30 days, then automatically purged by R2 lifecycle policy.
Account data (goals, schedule, preferences, Apple identifier): retained until you delete your account.
Session tokens (JWT): 7-day lifetime, rotated on each reconnect; invalidated immediately on account deletion or Sign in with Apple revocation.
Operational logs: retained briefly for reliability and abuse prevention (typically under 30 days).
SMS opt-in records and message logs: your consent status and phone number are retained while you remain opted in. If you reply STOP, we keep your opt-out record only as long as needed to honor the request and comply with law.

7. How to Delete Your Data

You can delete your Kendal account and all associated data at any time:

In the app: Settings → Account → Delete Account. This permanently removes your account and all associated records from our database and object storage. The action cannot be undone.
By email: contact hello@volveron.com from the address tied to your Sign in with Apple account and we will delete your account on request.
SMS-only users: if you use only Kendal’s SMS service and have no app account, reply STOP to opt out, or email hello@volveron.com from the number you signed up with to have your phone number and SMS records deleted.

8. How to Revoke Consent

Microphone, calendar, notifications: revoke at any time in iOS Settings → Kendal.
Sign in with Apple: revoke in iOS Settings → Apple ID → Sign in with Apple → Kendal → Stop Using Apple ID. This bumps your server-side session version and invalidates any active session.
Partner calendar: disconnect in Kendal’s Settings → Partner.
You can also delete your account entirely (see above) to revoke all consent at once.

9. Children

Kendal is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with information, contact us and we will delete it.

10. California Residents (CCPA / CPRA)

Categories of personal information we collect:

Identifiers: Apple ID, Apple email-relay address, and mobile phone number if you opt in to SMS (Yes)
Audio recordings: voice input during conversations (Yes, transient)
Internet or other electronic activity: No
Geolocation: No
Biometric information: No — voice is processed transiently and not used for identification
Inferences: goal- and scheduling-related preferences derived from your interactions (Yes)

You have the right to know what we collect, delete it, correct it, and opt out of any “sale” or “sharing.” We do not sell or share personal information for cross-context behavioral advertising. To exercise any right, email hello@volveron.com.

11. EU/UK Residents (GDPR / UK GDPR)

The lawful bases for our processing are:

Consent — for microphone access, calendar access, partner-calendar access, and notifications.
Performance of a contract — to provide the Kendal service you have signed up for.
Legitimate interests — limited operational logging needed to keep the service running and secure.

You have the right to access, rectify, erase, restrict, port, and object to processing of your personal data, and to lodge a complaint with a supervisory authority. To exercise these rights, email hello@volveron.com.

12. Security

We use industry-standard administrative, technical, and physical safeguards to protect your information, including TLS in transit, access controls, and encryption at rest where supported by our infrastructure providers. No system is perfectly secure, however, and we cannot guarantee absolute security.

13. Changes to This Policy

We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date above and providing notice in the app. If we change the categories of data we collect or the third parties we share with, we will provide notice in the app before the change takes effect.

14. Contact

Volveron LLC
2108 N St, Suite N
Sacramento, CA 95816
Email: hello@volveron.com