Privacy Policy

Effective date: 24 July 2026 · Last updated: 24 July 2026

Who we are

Kite (“Kite”, “the App”, “the Service”) is an email client and inbox-assistant application owned and operated by Synctric Technology Private Limited (“Synctric”, “we”, “us”, “our”), a company incorporated under the Companies Act, 2013 in India.

We are the data controller (and, under India’s Digital Personal Data Protection Act, 2023, the Data Fiduciary) for the personal data described in this policy.

Summary in plain language

• Kite connects to your existing email account (such as Gmail) so it can organise, summarise and manage your inbox for you.
• We access your email data only to provide the features you can see in the app.
• We do not sell your data. We do not use it for advertising. We do not use your email content to train generalised or public AI/ML models.
• You can disconnect your account and delete all your data at any time.

Data we collect

Account and identity data

• Name and profile picture (as provided by your email provider)
• Email address(es) you connect to Kite
• Device identifiers, app version, operating system
• Authentication tokens (stored encrypted)

Email data accessed via your provider

When you connect a mailbox, Kite may access:

• Message headers (sender, recipient, subject, timestamps, thread IDs)
• Message bodies and attachments
• Labels, folders and read/unread state
• Contact addresses you have corresponded with
• Draft and sent messages, where you use Kite to compose or send

Data Kite generates

• Category assignments (Travel, Receipts, Packages, News, Shopping, etc.)
• Priority signals and “needs action” flags
• Summaries and daily digests
• Unsubscribe and cleanup suggestions

Usage and technical data

• Feature usage events, crash logs, performance diagnostics
• IP address, approximate region, browser/device type
• Cookies and similar technologies (see our Cookie Policy)

Payment data

If you subscribe to a paid plan, payments are handled by our payment processor ([Razorpay / Stripe / Apple App Store — specify]). Synctric does not store your full card number, CVV or bank credentials.

Google user data — scopes, use, and Limited Use

This section applies where you connect a Google account to Kite.

Scopes we request and why

We request the narrowest scopes necessary for the features described. Kite does not use any Google user data for a purpose not disclosed here.

Limited Use disclosure

Kite’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we confirm that:

• We use Google user data only to provide and improve the user-facing features of Kite that are visible in the app.
• We do not transfer Google user data to third parties except (a) as necessary to provide and improve user-facing features, (b) for security purposes, (c) to comply with applicable law, or (d) as part of a merger or acquisition, following prominent notice and your explicit consent where required.
• We do not use Google user data for serving advertisements of any kind, including retargeting, personalised or interest-based advertising.
• We do not sell Google user data.
• We do not allow humans to read your Google user data, unless: (a) you have given us your specific, affirmative consent to read particular messages (for example when you ask our support team to investigate an issue); (b) it is necessary for security purposes such as investigating abuse; (c) it is required to comply with applicable law; or (d) the data is aggregated and anonymised and used for internal operations.
• We do not use Google user data to develop, improve, or train generalised or non-personalised AI and/or ML models. Google user data is used only for the personalised, user-facing features of Kite.

Use of AI features

• Kite uses large language models to summarise messages, draft replies, categorise mail and answer questions about your inbox.
• AI processing runs via OpenRouter (including DeepSeek models) for classification, extraction, summaries and drafting, with Google’s Gemini API as a fallback for text features and OpenAI’s Whisper for voice-note transcription. Our application infrastructure is hosted on Google Cloud Platform.
• Where a third-party model provider is used, they act as our processor under a data processing agreement with zero data retention and a contractual prohibition on training their models on your content.
• Your email content is never used to train any general-purpose or public model, by us or by any provider.
• You can turn AI features off in Settings → AI Features.

Revoking access

You may revoke Kite’s access to your Google account at any time at https://myaccount.google.com/permissions, or from Settings → Accounts → Disconnect in the Kite app. On revocation we delete the associated tokens immediately and delete cached mail data within 30 days.

Legal bases for processing

Where the GDPR or UK GDPR applies:

Under India’s DPDP Act, 2023 we process personal data on the basis of your consent, or for certain legitimate uses permitted by the Act.

How we use your data

• To display, organise, categorise and search your mail
• To generate summaries, daily briefs and priority signals
• To send messages and apply labels at your instruction
• To suggest senders to unsubscribe from
• To authenticate you and keep your account secure
• To provide customer support
• To detect abuse, spam and security incidents
• To meet legal and regulatory obligations

We do not use your email content for advertising, profiling for third parties, or resale in any form.

Sharing and sub-processors

We share data only with vetted service providers under written data processing agreements:

We will give at least 30 days’ notice before adding a sub-processor that materially affects your data.

We may also disclose data where required by a valid legal order, or to protect the rights, safety or property of Synctric, our users or the public.

International transfers

Your data may be processed outside your country of residence, including in [India / United States / European Union]. Where data leaves the EEA or UK, we rely on Standard Contractual Clauses and appropriate supplementary measures. Where data leaves India, transfers comply with the DPDP Act and any restrictions notified by the Central Government.

Data retention

Security

• TLS 1.2+ for all data in transit
• AES-256 encryption at rest; OAuth tokens encrypted with keys held in [Google Cloud KMS / equivalent]
• Role-based access control and least-privilege access for staff
• Multi-factor authentication for all internal systems
• Audit logging of all access to production data
• Regular vulnerability scanning and third-party penetration testing
• Documented incident response plan; breach notification to affected users and the Data Protection Board of India as required under the DPDP Act

No system is perfectly secure, but we work continuously to protect your data.

Your rights

Depending on where you live, you may have the right to:

• Access a copy of the personal data we hold about you
• Correct inaccurate or incomplete data
• Delete your data (“right to erasure”)
• Restrict or object to certain processing
• Port your data in a machine-readable format
• Withdraw consent at any time
• Nominate another person to exercise your rights in the event of death or incapacity (DPDP Act, India)
• Opt out of sale/sharing — although we do not sell or share personal data as defined by the CCPA/CPRA
• Complain to a supervisory authority, or to the Data Protection Board of India

To exercise any right, email privacy@synctric.io. We respond within 30 days.

Account deletion: you can delete your account in-app at Settings → Account → Delete Account, or by emailing privacy@synctric.io. Deletion removes all mail data, summaries, categories and tokens within 30 days.

Children

Kite is not intended for anyone under 18 years of age. We do not knowingly collect personal data from children. Under the DPDP Act, processing children’s data requires verifiable parental consent; if we learn that we have collected data from a child without such consent, we will delete it promptly. Contact privacy@synctric.io to report such a case.

Grievance redressal (India)

In accordance with the Information Technology Act, 2000, the IT (Intermediary Guidelines) Rules, 2021, and the DPDP Act, 2023:

Grievance Officer, Synctric Technology Private Limited, [Address]. Email: grievance@synctric.io. Response time: acknowledgement within 24 hours, resolution within 15 days.

If you are not satisfied with our response, you may escalate to the Data Protection Board of India.

Changes to this policy

We will post any changes on this page and update the “Last updated” date. For material changes we will notify you by email or in-app notice at least 14 days before they take effect. Continued use of Kite after that date means you accept the revised policy.

Contact us

Synctric Technology Private Limited, Office No. 601, Luxuria Business Hub, Nr. V. R. Mall, Dumas Road, Surat, Gujarat, India – 395007.
General — support@synctric.io
Privacy — privacy@synctric.io
Grievances — grievance@synctric.io