Privacy Policy

1. Information we collect

Telegram account information. When you open the bot or the Mini App, or confirm a connection, Telegram gives us your user ID, first and last name, username, profile photo URL and language setting. Your Telegram user ID identifies your Koi Launch account.

Apps you create. The names, descriptions, icons, files, published versions and visibility settings of your apps, and any files your assistant imports for them.

Data saved by apps. Data an app saves for you (for example, quiz progress), stored per person and per app. Records you add to an app's shared collections (such as a leaderboard), stored with your display name.

Activity in the hub. Which apps you have opened, when, and how often, so the hub can show your recent and shared apps.

Connections. Information needed to connect your AI assistant: the assistant's client name, one-time confirmation codes and access tokens.

Reports and safety. Reports you submit about an app, and counters used to rate-limit requests.

Technical data. Our hosting provider processes IP addresses and request information to deliver and protect the Service.

2. The web app and signing in

You can also use Koi Launch in a browser at launch.koiswarm.com/app, with or without Telegram.

• Guests. When you open an app without signing in, we create a guest account identified by a random value stored in a cookie. Data you save as a guest is kept with that account. Guest accounts nobody has used for 30 days are deleted together with their data. When you sign in, your guest data moves to your account.
• Signing in with Google. Google tells us your Google account ID, your name and your email address (and whether Google has verified it). We do not receive your Google password or access to other Google data.
• Signing in with email. We store your email address and send you one-time sign-in codes and links. Codes expire after 15 minutes.
• Signing in with Telegram. You approve the sign-in in our bot, which gives us the Telegram information described above.
• One account, several sign-ins. Sign-in methods with the same verified email are joined into one account; you can also connect sign-in methods and merge accounts yourself. Merging moves apps, saved data and history into one account.
• Cookies and sessions. The web app uses essential cookies only: one keeps you signed in (up to a year without use) and a short-lived one protects a sign-in in progress. It stores preferences such as vibration in your browser's local storage. We keep a list of your browser sessions so you can sign out other devices.
• Providers for signing in. Google LLC handles "Sign in with Google", and Resend, Inc. sends sign-in emails on our behalf.
• Deleting your account. In the web app's settings you can delete your account at any time. This deletes your apps, saved data, shared records, sign-in methods and sessions, and disconnects your AI assistants. Reports you filed are kept for safety without your identity.

3. What we don't collect

• We do not receive your conversations with ChatGPT, Claude or other assistants. We only receive the tool requests your assistant sends to Koi Launch, such as the files of an app and the settings you asked for.
• We do not collect passwords, payment card details or your phone number.
• The website uses no analytics, advertising or tracking cookies. It stores your reading position in your browser's session storage when you switch languages; the Mini App stores your selected tab in your device's local storage. Neither is sent to us.

4. How we use information

• To provide the Service: create, store, publish and serve your apps, save their data, show your hub, and let you share apps.
• To connect your assistant to your account and keep that connection secure.
• To send you messages in Telegram about your apps, such as publish links.
• To keep the Service safe: prevent abuse, review reports, enforce our policies, and fix problems.
• To comply with legal obligations.

We do not sell personal information and do not use it for advertising.

5. Who can see your information

• People who open your apps can see the app and, when an app is shared with them, your display name as its creator. Apps you publish in curated collections may be shown without your name.
• Everyone using an app can see records added to its shared collections, together with the display name of the person who added them.
• The creator's code in each app can read the data you use in that app and your Telegram ID and display name, and could send them elsewhere. Only use apps from people you trust.
• We do not share your information with others except service providers acting for us, when you ask us to, or when required by law or to protect people's safety.

6. Service providers

• Cloudflare, Inc. hosts the Service, its databases and file storage, and protects it against attacks.
• Telegram provides sign-in information, the bot and the Mini App platform.

Your AI assistant's provider (for example OpenAI or Anthropic) processes your conversations under its own privacy policy; they are not our service providers.

7. Legal bases

Where data protection law requires a legal basis, we process information to perform our agreement with you (providing the Service), for our legitimate interests in keeping the Service secure and working, to comply with legal obligations, and with your consent where we ask for it.

8. How long we keep information

We keep your account information and apps while your account exists. Deleting an app removes its files, versions and all data its users saved in it. Confirmation codes expire shortly after they are created, and you can revoke an assistant's access at any time from its connector settings. When you ask us to delete your account, we delete your information except where we must keep it to meet legal obligations or resolve disputes.

9. Your rights and choices

Depending on where you live, you may have the right to access, correct, delete or export your personal information, and to object to or restrict certain processing. You can delete apps through your assistant at any time. For other requests, email hello@kinetropic.com from the contact you'd like us to reply to, and include your Telegram username. You may also complain to your local data protection authority.

10. Security

We use encryption in transit, signed short-lived tokens, isolated sandboxes for apps served from a separate domain, and access controls to protect your information. No system is perfectly secure, so we cannot guarantee absolute security.

11. International transfers

Kinetropic operates from the Republic of Uzbekistan, and our hosting provider runs a global network. Your information may be processed in countries other than your own, which may have different data protection laws. We rely on our providers' safeguards for these transfers.

12. Children

Koi Launch is not directed to children. Use it only if you are old enough to use Telegram and your AI assistant under their terms in your country. If you believe a child has given us personal information, contact us and we will delete it.

13. Changes

We may update this policy. We will change the date at the top of this page and, for important changes, tell you in the Telegram bot or on this website. Translations are provided for convenience; if they differ, the English version prevails.

14. Contact

"KINETROPIC" MAS'ULIYATI CHEKLANGAN JAMIYAT XORIJIY KORXONA (Kinetropic FE LLC)
1 Chust Street, Elobod MFY, Mirzo Ulugbek District, Tashkent, Republic of Uzbekistan
Email: hello@kinetropic.com