Privacy policy
Last updated 8 November 2026
This policy explains what personal information Kinavoy collects, why, who we share it with and the choices you have. We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth). If you live in the UK or the European Union, the summary of your rights below also applies.
Who is responsible
Kinavoy is operated by Damien Eric Martial Moodley (trading as Tech Builders), ABN 55 681 998 305, based in Queensland, Australia. Postal address: 2 Cedarton Dr, Cedarton 4514. Email: support@kinavoy.com. You can email support at any time. In these pages, “we”, “us” and “Kinavoy” mean the operator, and “you” means the person using Kinavoy.
What we collect
Account details: your name, email address and sign-in information. Workspace information you choose to enter: journey settings such as countries and estimated dates, each parent’s country of birth and nationality, budgets and payment records, tasks, notes, provider contacts, travel plans, and details of documents and translations. Billing details: your plan, subscription status and the country your payment comes from. Card details are handled by Stripe, not us. Technical information needed to run and protect the service, such as your approximate country (to show prices in your currency), security logs and request counts.
Sensitive information
Surrogacy planning can involve health, family and identity information. We only collect what you choose to enter, and you consent to us handling it so we can provide Kinavoy to you and the people you invite. Please keep it to what you need. Don’t enter passport numbers, medical results or similar details unless you need them in your plan. Only enter information about other people, such as your surrogate, if you are entitled to.
How we use it
To provide your workspace and share it with the people you invite; to process subscriptions; to send service emails such as sign-in codes and renewal reminders; to provide support; to keep Kinavoy secure and prevent misuse; and to meet legal obligations. We do not sell your personal information, use it for advertising, or use your records to train AI models.
Filling in records from a document
When you upload a document on Annual, it is sent once to an AI service (OpenAI, through Vercel’s AI Gateway) to suggest budget items, tasks and provider contacts. The AI is instructed to ignore identity and account numbers, medical details and personal details of private individuals, and Kinavoy removes identifier-like text from its suggestions. The service is configured not to retain the document or use it for training. Kinavoy does not save the document: it is discarded once the suggestions are ready. Only the suggestions you approve are saved to your workspace. The AI processing may take place outside Australia, including in the United States.
Ask Kinavoy
If you use Ask Kinavoy when it is available, your question and the relevant guide material are sent to the same AI service under the same no-retention, no-training settings. A summary of your journey is only included if you approve it for that question. Conversations are not saved in your records. We keep usage counts and a record of any summary approvals.
Who we share it with
People you invite to your workspace. Service providers who run Kinavoy on our behalf: Vercel (hosting, with application servers in Sydney), Neon (database, Sydney), Clerk (accounts and sign-in, United States), Stripe (payments), OpenAI via Vercel AI Gateway (document reading and Ask Kinavoy), Resend (service emails), Apple iCloud Mail (support email) and Google Cloud (encrypted backups, Sydney). These providers may process information in Australia, the United States and other countries. We choose reputable providers and only share what each needs. We may also disclose information where the law requires it.
Cookies and tracking
Kinavoy uses only the cookies needed for sign-in and security. We do not use advertising or analytics tracking. The demo saves its fictional records in your own browser.
How long we keep it
We keep your account and workspace while you use Kinavoy. Unfinished setup drafts are deleted after 30 days. If you close a workspace, it can be reopened or exported for 30 days. When you ask us to delete your account, we delete your records from our live systems and confirm when that is done; encrypted backup copies are removed as those backups expire, within 35 days. We keep billing records for as long as tax law requires.
Security
Each request is checked against your verified identity and workspace role, data is encrypted in transit and at rest, and backups are encrypted. No online service can be completely secure. If a data breach is likely to cause you serious harm, we will notify you and the relevant regulator as the law requires.
Your choices and rights
You can view, correct and export your information in the app at any time. You can also ask us for access to, correction of, or deletion of your personal information by emailing support@kinavoy.com. If you are in the UK or EU, you can also object to or restrict certain processing and ask for your data in a portable format. We will respond within 30 days.
Children
Kinavoy is for adults planning a family. It is not intended for anyone under 18.
Complaints and changes
If you have a privacy concern, email support@kinavoy.com and we will respond within 30 days. If you are not satisfied, you can contact the Office of the Australian Information Commissioner (oaic.gov.au) or your local data protection authority. We will tell you about material changes to this policy before they take effect.