Privacy Policy

Account data — your name, email address, and login credentials (managed by our authentication provider, Clerk).

Relationship and order data — the people you add: their names, mailing addresses, your relationship to them, occasions and dates (such as birthdays), and the messages you write.

Photos — images you upload for printing. Photos can reveal sensitive things (faces, children, family life); we treat them as sensitive and handle them as described in Sections 3, 5, and 6.

Payment data — processed by Stripe. We receive transaction records (plan, amount, status) but never store your card number on our servers.

Technical data — basic logs (IP address, device/browser information, timestamps) generated when you use the site, used for security and operations. We currently run no third-party analytics or advertising trackers; the only cookies are those strictly necessary to keep you signed in.

Support communications — emails you send us.

We use your information to: provide the Service (schedule, produce, and mail your cards and keep you informed about them); process payments and manage your subscription; screen content for safety - before a card is produced, uploaded photos and message text are reviewed by an automated screening system (provided by Anthropic) and seen by our fulfillment staff, to detect content that violates our Acceptable Use Policy or the law; provide support; secure and improve the Service; and comply with legal obligations. We do not use your photos or messages to train AI models, and we do not use your information for third-party advertising.

We share personal information only with the service providers we rely on to operate Kaiva, only to the extent needed, under contracts that restrict their use of it. We do not sell your personal information, and we do not “share” it for cross-context behavioral advertising (as those terms are defined in California law). Our service providers:

• Stripe: Payment processing (we never store card numbers ourselves).
• Clerk: Authentication and account management.
• Vercel (incl. Vercel Blob): Application hosting and storage of uploaded photos and print files.
• Neon: Database hosting (names, dates, addresses, message text).
• Fly.io: Optional handwriting-style font rendering.
• Resend: Transactional email (reminders and account notices).
• Anthropic: Automated safety screening of uploaded photos and message text.
• Inngest: Scheduling of background jobs (receives record identifiers only, no content).
• Manhattan Repro: Card production: receives the card's photos and message text via an expiring signed link to print the card. No recipient name or address is shared; Kaiva mails the finished card.

Card production.To produce your card, we send our print partner your uploaded photos and message text through an expiring, access-logged link. We do not share the recipient’s name or address with the print partner — Kaiva mails the finished card itself. This is necessary to fulfill your order. Once a card locks for production (roughly 7 days before the occasion), that copy cannot be recalled.

We may also disclose information if required by law (such as a subpoena or our child-safety reporting obligations under 18 U.S.C. § 2258A), to protect the rights and safety of any person, or as part of a merger, acquisition, or sale of assets (with notice to you).

When a user sends a card through Kaiva, we process information about the recipient - typically their name, mailing address, the occasion and date, and sometimes their image in an uploaded photo - provided to us by the sender, not by the recipient.

If you are a recipient: we use this information only to produce and mail the card the sender requested, we don’t use it for marketing, we don’t sell it, and we delete it on the schedule in Section 6. You have choices:

• Stop future mail. Ask us to block all future Kaiva mail to your address at /recipients. We keep only a non-reversible fingerprint of the address needed to enforce the block.
• Access or delete your information. Contact privacy@kaivamoments.com and we will tell you what we hold that relates to you and delete it on request, subject to legal retention requirements. A card already handed to production cannot be recalled.

Kaiva is operated from the United States and your data is stored on infrastructure located in the United States. Printed materials are produced by our fulfillment partner in the United States.

Deleting your account (available in your billing settings) permanently erases your relationships, saved dates, message text, and uploaded photos, immediately - except the narrow categories we are legally required to keep, such as financial records and any material under a legal preservation obligation.

Depending on where you live (including under the California Consumer Privacy Act), you have the right to: know/access the personal information we hold about you and how we use it; correct inaccurate information; delete your information; port it (receive a copy); opt out of sale or sharing (we do neither); limit the use of sensitive personal information (we use photos only to provide the Service and for the safety screening described above - purposes California law permits without a separate limit request); and not be discriminated against for exercising any of these rights.

To exercise rights: use the in-app controls (account deletion, removing people), email privacy@kaivamoments.com, or - for recipients - use /recipients. We will verify your request (typically by confirming control of the account email; recipients by confirming the mailing address concerned) and respond within the time required by law. You may use an authorized agent; we will ask for proof of authorization and verify your identity directly. If we decline a request, we will explain why, and you may appeal by replying to our decision; California residents may also contact the California Privacy Protection Agency or Attorney General.

We do not collect or retain enough information about visitors to recognize most browser opt-out signals in a meaningful way, and because we do not sell or share personal information, Global Privacy Control signals do not change our processing - but they are honored by default in effect.

Kaiva accounts are for adults (18+). We do not knowingly collect personal information from children. Users may upload photos that include children (a grandchild’s birthday card, for example); those images are treated as the sender’s content under this policy, are used only to produce the card, are screened for safety, and are deleted on the schedule above. If you believe a child’s image is being misused on Kaiva, contact privacy@kaivamoments.com immediately.

We use industry-standard safeguards: encryption in transit, private (non-public) storage for uploaded photos, access controls limiting staff access to what fulfillment and support require, and payment processing handled entirely by Stripe. No system is perfectly secure; if a breach affects your personal information, we will notify you as required by law.

We will post changes here and update the date above; for material changes we will notify you by email or in-app notice before they take effect.

KAIVA LLC · 1732 Aviation Blvd, Unit #1627, Redondo Beach, CA 90278
Privacy requests: privacy@kaivamoments.com · General support: support@kaivamoments.com