Privacy Policy

JouleWorx Private Limited is a product studio registered in India (CIN: U62012DL2026PTC463416). We built Kin, a personal safety check-in app, because we believe staying connected with the people you love shouldn't require giving up your privacy.

This Privacy Policy covers this website only. The Kin app has its own dedicated privacy policy, which you can find here.

Questions? Write to us: hello@jouleworx.com

We didn't add a privacy page because lawyers told us to. Privacy is a core design principle: we don't collect data we don't need. We don't keep it longer than necessary. And we will never sell or broker your personal information. Full stop.

What you give us

We only collect one thing on this website: your name and email when you fill in our contact form, so we can write back to you.

That's it. We don't ask for your phone number, your birthday, your address, or anything else.

Everything you submit is encrypted using TLS before it even leaves your device, and stored encrypted on our end.

What we collect automatically

When you visit the site, our servers log some basic information: your IP address, your browser type, which pages you visited, and how you got here. We use this only to keep the site running smoothly and to spot unusual activity. It is stored in encrypted form and never tied to your name or identity.

Cookies

We use only essential cookies: the kind that keep the website working. No advertising cookies. No tracking pixels. No behavioural profiling. If that ever changes, we will ask for your permission first.

We use your information for exactly three things:

• To reply to your messages.
• To keep the website secure.
• To understand, in aggregate and anonymously, how people use the site.

We don't profile you. We don't run ads. We don't make automated decisions about you.

We operate under India's Digital Personal Data Protection Act, 2023 (DPDPA) and the Information Technology Act, 2000.

For replying to your messages and keeping the site secure: we rely on legitimate interest. We have a genuine reason to respond to people who write to us.

For any marketing communications: we rely on your consent. You can withdraw it at any time by emailing us.

We don't sell it. We don't rent it. We don't trade it.

We use a small number of third-party services to operate the website: things like hosting and email delivery. These providers only get the data they need to do their job, and they are contractually required to keep it confidential.

If a court or government authority legally requires us to disclose something, we will comply.

• Contact form messages: 12 months from the last time we were in touch. Longer only if we have an ongoing relationship that requires it.
• Server logs: 90 days, then deleted.

Under the DPDPA and applicable law, you can:

• See what we have: Ask for a copy of your personal data.
• Fix it: Ask us to correct anything that is wrong or incomplete.
• Delete it: Ask us to erase your data.
• Change your mind: If you gave us consent, you can withdraw it at any time.
• Complain: You can raise a concern with us directly, or with the Data Protection Board of India once it is operational.

To do any of the above, email hello@jouleworx.com. We will respond within 30 days.

• Encryption in transit: Everything sent between you and this site is encrypted using TLS.
• Encryption at rest: Stored data is encrypted on our servers.
• Access controls: Only the people who need to see your data to do their jobs can access it.
• Minimal collection: The best way to protect data is to not collect it in the first place. So we don't.

No system is 100% secure. If we ever discover a breach that affects your data, we will notify you as required by law.

This website is informational. If you are under 18 and want to get in touch, we ask that you do so with a parent or guardian's knowledge.

We are mindful of our obligations under Section 9 of the DPDPA. If you think a minor has submitted data to us without appropriate guidance, write to us at hello@jouleworx.com and we will take care of it promptly.

Our site links to places like social media profiles, the App Store, and Google Play. We are not responsible for what those sites do with your data. We recommend checking their policies directly.

We will update this page if anything changes, and we will mark the new date at the top. For anything significant, we will try to give you more visible notice.

This policy is governed by the laws of India. Disputes fall under the exclusive jurisdiction of the courts of New Delhi.