This Privacy Policy explains what KŌINIsee collects, how it is used, where it is stored, and the choices and rights you have. KŌINIsee is a monitoring and anti-theft tool you install on your own device. It is built to keep as much as possible on your device and to upload only what is necessary to alert you.
The data controller is [LEGAL ENTITY NAME, as verified on Google Play], organized in the State of Michigan, USA ("KŌINI," "we," "us"). Contact: support@koini.io.
For individuals in the EU/EEA and the UK, our appointed representatives under Article 27 GDPR and UK GDPR are:
KŌINIsee is for adults (18+) using their own device. It is offered worldwide except that it is not available to residents of Illinois, USA, and not in jurisdictions where its features would be unlawful. The app itself is not directed to children; a child may only appear in the Service if an adult account holder chooses to enroll that child as a trusted person, with the consent described in Section 5.
| Data | Why | Where it is stored |
|---|---|---|
| Google account identifier and email | Create your account; sign you in; send alert emails | Our servers (Firebase) |
| Trusted-face templates (embeddings) | Recognize your enrolled household on device so they never trigger an alert | Your device only — encrypted, never uploaded |
| Enrollment photos of trusted people | Create the templates above | On device during enrollment; deleted once templates are created |
| Photos of unrecognized people | The evidence the Service exists to give you | Our servers (Firebase), encrypted; visible only to you |
| Event metadata: watched app name, time, match score, device identifier | Label each alert so you know what was opened and when | Our servers (Firebase) |
| Watched-app selections (package names) | Know which apps to watch | Your device and your account |
| Foreground-app signal (via Usage Access) | Detect when a watched app opens | Used on device in the moment; not stored as a browsing history and not transmitted to us |
| Crash and diagnostic data (Firebase Crashlytics) | Find and fix crashes, especially device-specific failures | Firebase; no photos or face data included |
| Subscription status | Give you access to the Service | Google Play processes payment; we store only whether your subscription is active. We never receive your card details. |
We want to be direct about this. KŌINIsee photographs whoever opens a watched app — not only strangers. If a guest, a repair technician, a family member who has not been enrolled, or any other person opens a watched app on your device, their photo will be taken, and if they are not recognized it will be uploaded to your private account. The photo is encrypted, accessible only to you, and subject to the retention and deletion rules below. You are responsible for using the Service lawfully, as described in our Terms of Service.
To recognize your trusted household, the app converts enrollment photos into a mathematical template ("embedding") and compares faces to it on the device. These templates are a form of biometric data and are treated with care:
We use the data above only to: provide the Service (detect watched-app opens, match faces on device, alert you, show your evidence); operate your account and subscription; keep the Service secure and working across devices; diagnose and fix crashes; and comply with law. We do not sell your data, use it for advertising, or use your photos or face data to train any model.
Where the GDPR or UK GDPR applies, we rely on: performance of a contract (to provide the Service you subscribed to); your consent (for enrolling trusted faces, and for camera and notification permissions, which you can withdraw at any time); our legitimate interests (securing the Service and preventing unauthorized access to your high-value apps); and legal obligation where applicable. You may withdraw consent or object to processing as described in Section 11.
We do not sell personal data and do not share it for others' marketing. We use service providers that process data on our behalf under contract, principally Google / Firebase (authentication, encrypted storage, push notifications, crash reporting) and Google Play (payment). We may disclose data if required by law or valid legal process, or to protect rights and safety — and we will narrow any such disclosure to what is required.
Our servers and processors store data in the United States. If you are in the EU/EEA or UK, your data is transferred to the US under appropriate safeguards (such as the Standard Contractual Clauses) with our processors. Trusted-face templates are not transferred because they never leave your device.
You can delete individual evidence any time in the app or at the web portal. To delete your entire account and associated data, use the in-app "Delete account" option, the delete option in the web portal at see.koini.io, or email support@koini.io. Account deletion removes your uploaded photos and event metadata from our servers; trusted-face templates are removed from your device when you uninstall the app or delete the person.
Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise these, use the in-app controls or contact support@koini.io.
Uploaded photos are encrypted at rest, and access is scoped to your account so that only you, when signed in, can open them. We use reputable infrastructure (Firebase) and apply access controls and encryption in transit and at rest. No system is perfectly secure; please note that account access depends on the security of your Google sign-in. Access control is enforced at the account level — this is not end-to-end encryption in which only your device holds the key.
The app asks only for what it needs, and explains each before the system prompt: notifications (to show the persistent "watching is on" notice and to alert you), camera (to take the photo when a watched app opens), and Usage Access (to detect when a watched app comes to the foreground). The app does not request location, and does not use accessibility services or device-admin permissions.
We may update this policy. If changes are material, we will give reasonable notice in the app or by email. The "Last updated" date above shows the current version.
Questions or requests about your privacy: support@koini.io.
