Privacy Policy

1. Information we collect

For text Kites, we record the receiving phone's opt-in or opt-out keyword, the carrier event identifier and time, the consent notice version, and a protected phone fingerprint. These records let us honor your choices and document permission. We do not sell, rent, or share mobile numbers or SMS opt-in data with third parties for marketing or promotional purposes. Messaging providers process the information needed to deliver messages and honor opt-outs.

We may collect information you provide, including your name, email address, telephone number, relationship to the connection, selected subscription, customer-support messages, and connection-verification details such as an incarcerated person’s name, facility, state, booking number, or inmate ID. We may link verified facility identifiers to a private internal recipient profile and dated custody-location history so a transfer or rebooking does not expose or merge separate sponsor accounts. We do not use this feature to store charges or criminal-history details, and we do not offer a public name-only incarcerated-person directory.

When an account owner invites a Trusted Contact, we collect the invited email, stated relationship, Primary designation when selected, invitation status, limited role, acceptance and revocation records, and protected authentication information. The Trusted Contact uses a separate verified mobile account and invitation PIN; the incarcerated person's telephone PIN is not reused.

When an account owner uses Connected Life, we collect only the account, requested capability and provider, request status, consent version and time, operation identifier, and limited audit metadata. A request does not contain or grant us a third-party password, PIN, one-time code, recovery phrase, secret key, bank credential, wallet balance, or full identity document. Provider authorization data, if a supported connection later launches, will be collected through the provider-hosted flow and documented before activation.

When you intentionally use voice features, we may collect the voice message you choose to record, recording and playback identifiers, duration, call-routing metadata, keypad responses, consent records, delivery status, and block or pause preferences. The mobile app requests microphone permission only after you choose to begin recording and provides review and deletion controls before upload. For outside voice intake, we retain the exact source number in protected form only to route a reply to that exact KITE, plus protected fingerprints for rate limiting, security, and abuse prevention. The source number does not establish identity or grant inbox access. SendAKite is designed to record the chosen voice message after an affirmative recording prompt—not the entire facility or recipient call.

KITE Premier members may intentionally attach a supported photo or short video through the protected app or web-app intake. We collect the file, type, size, original filename, exact account binding, consent version and time, optional encrypted caption, screening state, and limited security metadata. A restricted SendAKite owner reviewer may decrypt the caption and download a private, non-cached review copy solely to make the screening decision; the reviewer is instructed to delete that local copy immediately afterward. Format validation and protected screening do not mean a facility or provider accepted or delivered the item. Delivery remains off until every exact-route control passes.

A personal-voice feature may collect a verified speaker's voluntary enrollment sample, speaker-identity and rights confirmation, consent version and time, model or provider reference, revocation state, and disclosure history. That collection remains off until a separate enrollment and deletion flow is operational. A two-minute sample alone is not treated as proof of identity or permission.

Where routed text KITE intake is activated, we collect the text content, the submitted exact routing code, carrier message and event identifiers, timestamps, delivery and playback status, character count, the exact source number encrypted for reply routing, and protected fingerprints used to rate-limit, secure, and audit the source and SendAKite destination. A KITE from a new phone may remain encrypted and bound to its pending sponsor-approval record until it is approved, denied, or removed under the 30-day content limit. Booking or inmate identifiers are not accepted as public message addresses, and the sender's identity is not verified merely because the sender knows a routing code. Media attachments are not accepted to the current text KITE service.

A protected media intake or an approved computer-thread or email-to-message route may process the protected source and destination, dedicated-number reference, message and thread identifiers, text or permitted attachments, file type and size, moderation or malware status, conversion direction, delivery receipts, consent, and retention state. Media intake may record a screening state before route approval; delivery and the other routes remain disabled until the exact facility and communications provider approve them.

If a mobile account holder chooses to enable notifications, we collect an encrypted device push token, device platform, and privacy-preview setting so we can send generic service activity notices. Notifications are optional and are configured not to display private message content.

At signup and through the secure settings page, the adult account holder may provide or change a spoken-language choice, motivation style, horoscope sign or a choice of no horoscope, and an optional faith or spiritual tradition plus vetted reference or theme on the connection's behalf. We keep the authorization version and time and a limited change audit. These choices may reveal sensitive beliefs or interests, so providing faith content and horoscope content is optional.

Our website and service providers may also collect technical information such as IP address, browser and device information, pages visited, timestamps, referral information, cookies, and service or security logs.

2. Payments

Stripe securely saves payment methods for an authorized future charge and processes SendAKite subscriptions when the verified connection activates. KITE Global LLC receives Stripe identifiers and limited card details such as brand and last four digits for support and reconciliation, but does not receive or store your complete payment-card number. Stripe may collect your contact, billing, device, and payment information under its own privacy policy. Learn more in Stripe’s Privacy Policy.

3. How we use information

We use information to process subscriptions; apply the common identity and safety intake while preserving provider- and facility-specific controls; measure technical operations; activate, operate, personalize, and support services; deliver the account holder's selected language and optional daily content by phone; record and evaluate Connected Life requests; communicate about payments and connection status; prevent fraud or misuse; maintain security; improve SendAKite; comply with law and common safeguards; and establish or defend legal rights.

If a KITE Complete or Premier caller affirmatively accepts the separate resource-guidance recording notice, SendAKite uses automated speech transcription and OpenAI services to classify and minimize the question, search current public official sources, draft a general-information response, and screen the result for safety. SendAKite does not use this feature for emergency, legal, medical, or individualized financial advice. The caller should not include names, booking numbers, phone numbers, medical details, financial details, legal secrets, or other confidential information.

We do not use faith, spiritual, horoscope, language, motivation, financial-connection interest, incarceration status, message content, media, or voice samples for unrelated third-party advertising. Horoscope content is generated for entertainment and reflection, and optional faith-based content is informational encouragement rather than religious authority.

4. How we share information

We may share information only as reasonably necessary with payment processors, hosting and technology providers, customer-support vendors, professional advisers, facilities, government or official record sources, and telephone, text-messaging, text-to-speech, transcription, recording, email, AI, or communications providers involved in verification or service delivery. Telnyx processes SendAKite telephone calls and signed inbound SMS events. OpenAI processes a consented resource-guidance recording or minimized text derived from it to transcribe, classify, search official public sources, and draft the response. For a transactional reply to a KITE, communications providers process the exact approved originating number as the reply destination; SendAKite does not substitute an unrelated account contact. After authentication, SendAKite decrypts a text KITE in memory and sends the text to Telnyx for text-to-speech processing under Telnyx's applicable terms and privacy practices. We may also disclose information when required by law, to protect safety or rights, to investigate misuse, or in connection with a business reorganization or transfer.

We do not sell or share personal information as those terms are defined by applicable privacy law. We do not use personal information for third-party advertising unrelated to SendAKite.

5. Sensitive connection information

Information about an incarcerated person, booking, facility, family connection, financial-service interest, private message, media item, or voice sample may be sensitive. Provide only information necessary for verification and service delivery. Do not submit confidential legal communications, medical information, financial account numbers, provider credentials, passwords, PINs, one-time codes, recovery information, full identity documents, or other information we have not specifically requested through an approved secure flow. Facilities and communications providers may monitor calls and messages, so SendAKite is not a confidential communications channel.

6. Retention and security

Access to an unsent mobile voice draft expires after 30 days. Once a mobile or telephone voice KITE is accepted, playback access ends seven days after authenticated playback and in all cases no later than 90 days after recording or upload; an unplayed KITE whose audio reaches that maximum becomes unavailable. Automated cleanup then deletes the stored audio from SendAKite's object store or the telephone recording provider. A resource-guidance question recording is scheduled for deletion after its response is durably frozen; an unresolved recording expires after 30 days. Text KITE content is automatically deleted 30 days after SendAKite receives it, unless preservation is legally required before deletion occurs. Delivery or an ordinary dispute does not restart that period. Limited non-content event, entitlement, consent, security, billing, and audit metadata may be retained longer when reasonably necessary. Other retention periods vary by information type, account status, facility or provider requirements, customer requests, and applicable legal obligations. A deletion request may not remove records that must be preserved for a security incident, dispute, fraud prevention, or legal hold.

An undelivered protected photo or short-video upload expires after 30 days and is deleted from object storage by automated cleanup. The account holder may withdraw it sooner while it remains eligible for deletion. Limited non-content screening, consent, and audit metadata may remain under the same safety, dispute, fraud-prevention, and legal exceptions described above.

Personalization choices remain attached to the connection while needed to deliver the selected experience or preserve account continuity. They are sponsor-selected content settings and are not treated as a verified statement of the recipient's religious beliefs. The account holder may request a change or removal, subject to identity verification and records we must keep for consent, fraud prevention, a dispute, or legal compliance. Release does not by itself make prior messages permanently available, and a facility transfer may require updated route activation; access remains subject to the active account, plan, retention rules, and applicable restrictions.

Text KITE content is encrypted at rest with authenticated encryption and bound to the exact account and carrier event. The messaging store uses keyed fingerprints and an encrypted reply destination rather than a plain sender or destination. After routing-code and PIN authentication, message content is decrypted in memory and sent to Telnyx for text-to-speech playback; message content is not written to call-command or webhook logs. To place a reply call, SendAKite decrypts the exact destination and includes it in a durable carrier command only for dispatch, bounded retry, and outcome reconciliation. Definitively sent, rejected, or cancelled delivery commands erase that command payload; an ambiguous carrier outcome may retain it until operational reconciliation. Telnyx and SendAKite call records also process routing metadata as described above. This is not end-to-end encryption.

We use reasonable administrative, technical, and organizational safeguards, including authenticated private playback and suppression of future SendAKite delivery after a block or active pause. No system or transmission method can be guaranteed completely secure.

7. Your choices and rights

You may unsubscribe from marketing communications while continuing to receive necessary service messages. A recipient can permanently block SendAKite-mediated contact or pause it for 7 or 10 days from an incoming delivery call. The separate authenticated call-in menu requires the routing code and private PIN. Restoring contact requires an additional verified email link. These settings do not control direct calls made by a correctional facility or its existing provider.

Changing the signup mobile still requires verification and consent. Separately, each reply call goes only to the number that submitted the exact KITE being answered; sending from another number affects only KITES sent from that number and does not change the signup mobile. That exact reply callback asks for the connection's eight-digit routing code and does not request the private inbox PIN.

The verified signup email holder can change language and optional personalization choices through the secure settings page using the routing code, private PIN, and a short-lived one-time email link.

The account owner may invite or revoke a Trusted Contact for one exact connection. A Trusted Contact can view limited connection activity and update personalization, but cannot read or send private KITES, view routing credentials, change contact controls, manage billing, invite other members, export the account, transfer ownership, or delete the account.

The account owner may withdraw a pending Connected Life request. Deleting the mobile login withdraws pending Connected Life interest created by that login before access is revoked. A future personal-voice enrollment must provide a direct revocation and deletion control; revocation prevents new synthesis but may not erase limited consent, safety, fraud-prevention, dispute, or legal records that must be retained.

A mobile account holder can request deletion inside the app or through the secure mobile account deletion page. That request anonymizes the mobile profile, withdraws its pending Connected Life interest, revokes active sessions, disables notification devices, deletes verification codes, unsent voice drafts, and undelivered protected media objects, removes stored media captions, and revokes mobile memberships and invitations. Deleting a mobile login does not automatically cancel an active paid service, and some billing, delivery, consent, withdrawn Connected Life request, safety, fraud-prevention, dispute, or legal records may be retained as described above.

Depending on where you live, you may have rights to request access, correction, deletion, or a copy of certain personal information, or to object to certain uses. We may need to verify your identity before completing a request.

Send privacy requests to support@sendakitenow.com.

8. Children

SendAKite subscriptions are intended for adults. We do not knowingly collect personal information directly from children under 13 through the website. If you believe a child has submitted information to us, contact us so we can review and address it.

9. External links and updates

Our website may link to Stripe, government databases, facility websites, or other third parties. Their privacy practices are outside our control. We may update this policy as SendAKite develops. Material changes will be posted here and, when appropriate, communicated directly.

10. Contact

Privacy questions may be sent to KITE Global LLC at support@sendakitenow.com or by fax at (502) 251-0729.

11. Artist profiles and store submissions

Artist studio submissions include the artist name and story, artwork descriptions, proposed prices, photographs, videos, portraits, signatures and requests for AI assistance. Drafts and original profile uploads are private to the submitting account and the store owner. Approved listings and the selected portrait and signature appear publicly in the art and craft store. Submit only material you created or have permission to share on the artist's behalf.

You can remove uploads or archive profiles and listings in the studio. Archiving hides the work while retaining the private draft. Deleting the SendAKite app login that created a profile also removes its studio profiles and uploads when account cleanup completes. AI requests are reviewed by the store owner; requesting help does not automatically send an image to an AI provider. AI concept images and refined portraits or signatures are labeled when published.