Privacy Policy

Effective Date: March 7, 2026 | Last Updated: March 9, 2026

DeepMesh Labs ("we," "us," or "our") operates the KikiGenie mobile application and website (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using KikiGenie, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

1. Information We Collect

1.1 Information You Provide Directly

Data Type	Details	Purpose
Account information	Name, email address, date of birth, gender	Create and manage your account
Phone number	Mobile phone number	Contact coordination for hangouts
Profile photo	Image you upload	Display your profile to contacts
Contacts	Names, emails, phone numbers of people you add	Invite friends to hangouts
Saved locations	Addresses and geographic coordinates	Suggest nearby activities and venues
Activity preferences	Interests and preferred activity types	Personalize activity recommendations
Hangout details	Event titles, descriptions, dates, locations, participant lists	Organize and manage your hangouts
User-generated content	Custom activity descriptions, group names	Enable personalized hangout planning

1.2 Information Collected Automatically

Data Type	Details	Purpose
Device information	Device model, operating system, unique device identifiers, push notification tokens	Deliver push notifications and ensure compatibility
Usage data	Features used, actions taken, timestamps	Improve the Service and fix issues
Log data	IP address, browser type, access times, error logs	Security monitoring and troubleshooting
Advertising data	Advertising identifiers (IDFA/GAID), ad interaction data	Display relevant advertisements via Google AdMob

1.3 Information from Third Parties

When you sign in with a third-party authentication provider (e.g., Google, Apple), we receive your name and email address as authorized by your provider settings.

2. How We Use Your Information

We use the information we collect to:

Provide the Service — create your account, manage hangouts, deliver notifications, and enable social coordination.
Personalize your experience — suggest activities, venues, and hangout ideas based on your preferences and location.
Generate AI-powered suggestions — use your preferences and hangout context to provide intelligent activity recommendations via our AI features.
Communicate with you — send hangout invitations, RSVP confirmations, reminders, and service announcements.
Improve the Service — analyze usage patterns, fix bugs, and develop new features.
Ensure safety — detect abuse, filter inappropriate content, and enforce our terms of service.

3. Data Sharing and Third Parties

We do not sell your personal information. We share data only with the following categories of service providers, solely to operate the Service:

Provider	Purpose	Data Shared
Firebase / Google	Authentication, push notifications (FCM), advertising (AdMob)	Email, device tokens, authentication tokens, advertising identifiers (IDFA/GAID), ad interaction data
Amazon Web Services (AWS)	Cloud hosting, data storage, serverless compute, AI features (Bedrock)	All Service data (stored encrypted)
Mapbox	Map display and location search	Location queries, coordinates

We may also disclose your information if required by law, to protect our rights, or to comply with a judicial proceeding, court order, or legal process.

4. Data Storage and Security

Your data is stored on secure AWS infrastructure in the United States. We protect your data with:

Encryption at rest (AES-256) for all stored data
Encryption in transit (TLS/HTTPS) for all communications
JWT-based authentication for all API requests
Least-privilege access controls on all infrastructure
No public access to data storage — all access is through authenticated APIs

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. Specific retention periods:

Data Type	Retention Period
Account data	Until you delete your account
Hangout data	Until you delete your account
Contacts and groups	Until you delete your account
Photos (profile, hangout, contact)	Until you delete your account
Device tokens	Until you unregister the device or delete your account
Email tombstone (after deletion)	Retained for fraud prevention (legitimate interest)
Server logs	90 days

6. Account Deletion

You have the right to delete your account at any time. Our deletion process works as follows:

Request deletion — Use the account deletion option in the app settings.
Grace period — Deletion is scheduled to process after a 24-hour grace period, during which you can contact us to cancel the request.
Comprehensive deletion — Once processed, we permanently delete:
- Your profile data and profile photos
- All contacts and contact photos
- All groups and group photos
- All activity preferences and interests
- All custom activities
- All hangout data (both created and received invitations)
Tombstone record — We retain only your email address for a limited period to prevent fraudulent re-registration. No other personal data is retained.
Re-registration — You may create a new account after a 24-hour waiting period following deletion.

7. Your Rights

Depending on your jurisdiction, you may have the following rights:

All Users

Access — Request a copy of the personal data we hold about you.
Deletion — Request deletion of your account and personal data (see Section 6).
Correction — Update or correct your personal information via the app settings.
Notification preferences — Manage push notification and email preferences in the app.
Withdraw consent — Opt out of non-essential communications at any time.

GDPR Rights (European Economic Area Users)

If you are located in the EEA, you additionally have the right to:

Data portability — Receive your data in a structured, machine-readable format.
Restrict processing — Request that we limit the processing of your data.
Object — Object to the processing of your personal data for certain purposes.
Lodge a complaint — File a complaint with your local data protection authority.

Our legal bases for processing your data under the GDPR include: performance of a contract (providing the Service), legitimate interests (security, fraud prevention), and consent (where applicable).

CCPA Rights (California Residents)

If you are a California resident, you have the right to:

Know — Request what personal information we collect, use, and disclose.
Delete — Request deletion of your personal information.
Non-discrimination — We will not discriminate against you for exercising your privacy rights.
Opt-out of sale — We do not sell personal information. No opt-out is necessary.

To exercise any of these rights, contact us at the email address provided in Section 12 below.

8. Children's Privacy

KikiGenie is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13 in compliance with the Children's Online Privacy Protection Act (COPPA).

If you are a parent or guardian and believe your child under 13 has provided us with personal information, please contact us immediately. We will promptly delete such information from our systems.

Users between the ages of 13 and 17 may use the Service only with the consent and supervision of a parent or legal guardian.

9. Cookies and Tracking Technologies

Our website (kikigenie.com) does not use cookies for tracking or advertising. We use only:

Essential functionality — Standard web technologies required for the website to function (e.g., form submission).
Analytics — We may use privacy-respecting analytics to understand website traffic. No personally identifiable information is collected through analytics.

Mobile Advertising

Our mobile application uses Google AdMob to display advertisements. AdMob may collect and use the following data to serve personalized or contextual ads:

Device identifiers — Advertising ID (IDFA on iOS, GAID on Android)
Device information — Device model, operating system version, screen size
Ad interaction data — Ads viewed, tapped, or dismissed
IP address — Used for approximate location-based ad targeting

We use the Google User Messaging Platform (UMP) SDK to obtain your consent before serving personalized ads, in compliance with GDPR and other applicable regulations. You can manage your ad preferences or withdraw consent at any time through the app settings.

For more information about how Google uses data from AdMob, see Google's Privacy Policy and How Google uses information from sites or apps that use our services.

Our mobile application does not use tracking pixels.

10. International Data Transfers

Your data is processed and stored in the United States. If you are accessing the Service from outside the United States, your data will be transferred to, stored, and processed in the United States. We take appropriate safeguards to ensure your data is treated securely and in accordance with this Privacy Policy.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

Posting the updated policy on this page with a new "Last Updated" date.
Sending a notification through the app for significant changes.

Your continued use of the Service after changes are posted constitutes acceptance of the updated Privacy Policy.

12. Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about your data, please contact us:

Email: [email protected]
Website: https://kikigenie.com
Company: DeepMesh Labs

We aim to respond to all privacy inquiries within 30 days.