This policy explains what personal information DriftKin collects, why we collect it, who we share it with, how long we keep it, and the choices and rights you have. We’ve tried to write it in plain language. If something is unclear, ask us at support@driftkin.app.
Who we are
DriftKin is run by Rahul Ankola, an individual (sole proprietor) based in Pennsylvania, United States. It is not a company. In this policy, “DriftKin”, “we”, “us” and “our” mean Rahul Ankola, operating as DriftKin.
This policy covers the website at driftkin.app and the DriftKin apps for iOS and Android (together, the “Service”). DriftKin is offered only in the United States and is intended for people there. You can reach us about anything in this policy at support@driftkin.app.
The short version
- We collect what we need to run the Service, and we tell you below exactly what that is.
- We do not sell your personal information, and we do not share it for advertising.
- There are no ads, ad trackers, advertising IDs or analytics tools in the website or the apps.
- The website uses no tracking cookies. See the Cookie Policy.
- Some features only work by sending data to other companies: maps go to Google Maps Platform, Drifty goes to Google’s Gemini API, and weather goes to Open-Meteo. They are listed in section 6.
- You can delete your account and its data at any time, in the app or at driftkin.app/delete-account.
What we collect
When you use a form on this website
- Waitlist: your email address.
- Beta sign-up: your full name and the email address of your Apple ID. We need both because Apple’s TestFlight service uses them to send you the beta invitation.
- Contact form: your name, email address, the topic, subject and message you write, and any file you choose to attach.
- Reviews: your star rating and, if you write one, your note. If you happen to be signed in to DriftKin in the same browser, the review is linked to your account ID. We don’t ask for your name.
When you create and use an account in the app
- Account details: email address, password and an optional username. Passwords are stored in hashed form by our database provider, and we cannot read them. If you sign in with Apple or Google, we receive the name and email address that provider shares with us, which may be a private relay address.
- Your agreement to our policies: which version of the Terms of Service and Privacy Policy you accepted, when, and whether it was at sign-up or after an update.
- Trips you create: origins, destinations, stops, dates, times, notes, checklists and the list of people on a shared trip.
- Files you attach: photos and documents you add to a trip (for example tickets or confirmations) and images you add to support tickets. We only access your camera or photo library when you choose to attach something.
- Activity in the app: stamps, visited parks and badges you earn, and your settings (theme, distance units, preferred maps app).
- Support tickets: the messages you send us through in-app support and our replies.
- Membership: whether your account is Free or Pro, when a trial or plan started and ends, and how it was granted (for example a trial or promo code).
Location
If you allow it, the app uses your device’s precise location while you are using the app to set your starting point and show nearby stops. We do not collect your location in the background, and we do not keep a history of where you have been. Your current location is not stored on our servers unless you save it as part of a trip, for example as a starting point. You can turn location access off at any time in your device settings, and you can still type in addresses by hand.
Drifty, the AI assistant
When you use Drifty, the messages you send and the trip details Drifty can see (such as stop names, addresses, dates and notes) are sent to Google’s Gemini API to generate a reply. We do not store the text of your Drifty conversations on our servers. To enforce Drifty’s hourly usage limit, we briefly record your account ID, the time of each request and which part of the app it came from. It contains no message text, and records older than an hour are deleted automatically. Section 4 explains what Google does with this data.
Payments
DriftKin does not take payments today. When paid plans launch, purchases in the app will be handled by Apple or Google, and any purchases on our website will be handled by a payment processor. We will receive confirmation of what you bought and when, but we never receive or store your full card number.
Collected automatically
Like any website, driftkin.app is delivered through servers that receive your IP address, browser and device type, the page you asked for, the referring page and the time. Our hosting provider, Cloudflare, processes this to deliver pages and protect the site against attacks and abuse, and may collect network error reports from your browser for the same purpose. Our database provider, Supabase, keeps similar logs of requests made by the app. We do not use these logs to build profiles of you.
We do not use analytics tools, advertising SDKs, advertising identifiers, session recording, fingerprinting or cross-site tracking in the website or the apps.
What we don’t collect
We don’t collect your contacts, microphone input, health data, background location, government ID numbers or payment card numbers. Please don’t put sensitive information (for example health, financial or identity details) in trip notes, Drifty messages or support messages.
How Google handles Drifty data
Please read this before using Drifty. Drifty currently runs on Google’s unpaid Gemini API service. Under Google’s terms for unpaid services, Google may use the messages you send to Drifty, the trip details sent with them, and Drifty’s responses to provide, improve and develop Google’s products and machine-learning technologies. Human reviewers at Google may read, annotate and process them. Google says it takes steps to protect privacy during this review, including disconnecting the data from your Google account, API key and Cloud project.
Because of this, do not send Drifty anything confidential or sensitive, and don’t use Drifty if you’re not comfortable with this. Everything else in DriftKin works without it. Details are in the Gemini API Additional Terms of Service.
We plan to move Drifty to Google’s paid Gemini service, under which Google does not use prompts or responses to improve its products. We will update this section when we do.
How we use it
We use personal information only to:
- create your account, save and sync your trips, let you share trips, and run Drifty, maps, routes, weather and park features;
- email you when DriftKin launches, if you joined the waitlist (you can withdraw this at any time);
- run the beta programme and send your TestFlight invite, if you signed up for it;
- reply to contact-form messages and support tickets;
- read reviews and feedback to fix problems and improve DriftKin;
- send service messages, such as sign-in emails, security notices and changes to these policies;
- keep the Service secure, enforce usage limits, and prevent fraud and abuse; and
- comply with the law, respond to lawful requests, and establish or defend legal claims.
We don’t make decisions about you based solely on automated processing that have legal or similarly significant effects. Drifty’s suggestions are only suggestions.
We will only email you about launch news if you joined the waitlist or beta. Every marketing email will include a way to unsubscribe, and you can also email support@driftkin.app at any time.
Where your data is processed
DriftKin is run from the United States and is offered only to people in the United States. Our providers store and process data mainly in the United States, and some may process it in other countries under their own safeguards. If you use DriftKin from outside the U.S. anyway, your information will be processed in the U.S., where data protection laws may differ from yours.
How long we keep it
We keep personal information only as long as we need it for the purposes above:
| Data | Kept for |
|---|---|
| Account, trips, attachments, stamps, preferences | Until you delete them or delete your account. |
| Record of which Terms and Privacy Policy versions you accepted | Until you delete your account. |
| Support tickets and their attachments | For the life of your account, then deleted with it. |
| Waitlist email | Until you unsubscribe or ask us to remove it, and in any case no longer than 12 months after DriftKin's public launch. |
| Beta tester name and Apple ID email | Until the beta programme ends or you leave it, plus up to 90 days to wind it down. |
| Contact-form messages | Up to 24 months after the conversation ends, so we can follow up on the same issue. |
| Reviews | Until you ask us to delete them. If you were signed in, the link to your account is removed when you delete your account. |
| Drifty usage records (account ID, time and app area of each request) | About an hour, only to enforce the hourly usage limit. Older records are deleted automatically. Conversation text is not stored on our servers. |
| Server and security logs | Kept by Cloudflare and Supabase for their standard log periods, typically days to weeks. |
| Backups | Deleted data can remain in encrypted backups for up to 30 days before it is overwritten. |
We may keep information longer when the law requires it, or to resolve a dispute or enforce our Terms, and only for as long as that reason lasts.
When you delete your account, trips you organised that other people have joined stay available to those people. You are removed from them, and ownership passes to another member.
Security
We use reasonable technical and organisational measures to protect personal information. Data is encrypted in transit, database access is controlled by row-level security rules so each account can reach only its own data and trips shared with it, and administrative access is limited to people authorised to run and support DriftKin. No system is perfectly secure, and we can’t guarantee that information will never be accessed, disclosed or lost. Please use a strong password that you don’t use anywhere else.
If a security breach affects your personal information, we will notify you and the relevant authorities as required by applicable law, including Pennsylvania’s Breach of Personal Information Notification Act.
Your choices and rights
Your rights
You can ask us to:
- tell you what personal information we hold about you and give you a copy, in a portable format where practical;
- correct information that is wrong or incomplete;
- delete your information;
- stop using your information for a purpose you object to, or withdraw consent you gave (such as the waitlist).
To delete your account, use Profile → Delete account in the app, or driftkin.app/delete-account. For anything else, email support@driftkin.app from the address linked to your account or form submission. Withdrawing consent does not affect anything we did before you withdrew it.
We will reply within 30 days, or within 45 days where a U.S. state law allows it. We may extend this once where the law allows and will tell you if we do. To protect your data, we may need to verify that the request comes from you, usually by confirming control of the email address involved. You may use an authorised agent where the law allows; we may ask the agent for proof of authority and ask you to confirm your identity. Making a request is free, and we will not treat you differently for exercising these rights. If we deny a request, we will explain why, and you may appeal by replying to that decision. We will answer the appeal in writing within the time your state’s law requires.
California and other U.S. states
Several U.S. states give residents rights to know, access, correct and delete personal information, and to opt out of its sale, of sharing for targeted advertising, and of profiling. DriftKin doesn’t sell or share personal information, doesn’t use it for targeted advertising, and doesn’t profile you in ways that produce legal or similarly significant effects, so there is nothing to opt out of. We honour requests from all U.S. users whether or not a state law requires it. We don’t use or disclose sensitive personal information for any purpose that would give Californians a right to limit it. Under California’s “Shine the Light” law, we don’t disclose personal information to third parties for their own direct marketing.
The categories of personal information we have collected in the past 12 months are identifiers (name, email, account ID, IP address), customer records, internet or network activity (server logs), precise geolocation (only with your permission, as described above) and the content you create. Their sources, purposes and recipients are described in sections 3, 5 and 6.
Browser privacy signals
Because we don’t sell or share personal information or track you across other websites, Global Privacy Control and Do Not Track signals don’t change anything we do. We treat a Global Privacy Control signal as a valid opt-out request anyway.
Children
DriftKin is not directed at children, and you must be at least 13 to use it. We do not knowingly collect personal information from children under 13. If you believe a child has given us personal information, email support@driftkin.app and we will delete it.
Other websites and apps
DriftKin links to, and can hand off to, services we don’t control, such as Apple Maps, Google Maps, Waze, park websites and businesses Drifty suggests. Their own privacy policies apply once you use them.
Changes to this policy
We will update this policy when what we collect or how we use it changes, and we will change the effective date above when we do. If a change is material, we will tell you before it takes effect by email or in the app. If the law requires your consent to a change, we will ask for it.
Contact
Questions, requests or complaints about privacy: support@driftkin.app. You can also use the contact form. DriftKin is operated by Rahul Ankola, Pennsylvania, United States.