California Consumer Privacy Act (CCPA) Rights

Last updated: April 6, 2026

1. Your Rights

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with the following rights regarding your personal information:

Right to Know: You have the right to request that we disclose the categories of personal information we have collected about you, the categories of sources from which we collected it, our business purpose for collecting it, the categories of third parties with whom we share it, and the specific pieces of personal information we have collected about you.
Right to Delete: You have the right to request that we delete the personal information we have collected from you, subject to certain exceptions. We may deny your deletion request if retaining the information is necessary for us or our service providers to complete a transaction, detect security incidents, comply with legal obligations, or engage in other lawful internal uses compatible with the context in which you provided the information.
Right to Opt-Out: You have the right to opt out of the sale of your personal information. KinKeep does not sell your personal information to third parties.
Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights. We will not deny you goods or services, charge you different prices or rates, provide you with a different level or quality of goods or services, or suggest that you may receive a different price or rate for goods or services as a result of exercising your CCPA rights.

2. Categories of Personal Information Collected

Category	Examples	Business Purpose	Sold?
Identifiers	Name, email address, IP address	Account management, service delivery, security	No
Financial Information	Bank account metadata, transaction history	Financial oversight, fraud detection, subscription tracking	No
Health Information	Medications, symptoms, emergency profile data	Health monitoring, drug interaction checking, care coordination	No
Internet/Device Information	User agent, activity logs	Security, service improvement, debugging	No
Geolocation	State-level only	Compliance with state-specific regulations	No

3. Categories of Personal Information Disclosed

Category Disclosed	Disclosed To	Purpose
Identifiers (name, email)	Stripe, Resend, Twilio	Payment processing, email delivery, SMS notifications
Financial data	Plaid	Bank account linking and transaction retrieval
Health and medication data	Anthropic (Claude)	AI-powered drug interaction analysis and health scoring
Email and mail content	Anthropic (Claude)	AI-powered fraud and scam scanning
All stored data	Neon (database), Vercel (hosting)	Data storage and service infrastructure
IP addresses, request metadata	Upstash	Rate limiting and abuse prevention

4. Exercising Your Rights

To exercise any of your CCPA rights, you may submit a request by emailing privacy@trykinkeep.com.

We will verify your identity before processing your request to protect your privacy and security. We will respond to your request within 45 calendar days. If we need additional time, we will notify you of the reason and the extension period (up to an additional 45 days).

5. Do Not Sell My Personal Information

We do not sell your personal information. KinKeep has never sold personal information and has no plans to do so. We share data with sub-processors solely for the purpose of providing and operating the KinKeep service.

6. Contact

If you have any questions about your CCPA rights or wish to submit a request, please contact us at privacy@trykinkeep.com.