Privacy Policy

Last updated: October 1, 2026

Kaivion is a small, independent product. Plain version of how we handle your data: we collect what we need to make the product work, we never sell or share anything that identifies you, and we delete it when you ask. If anything here is unclear, email us at kaivionsupport@gmail.com.

What we collect

Account info: your email address and a password. We never see or store your password in a form we could read.
Optional profile fields: things like a first name, date of birth, phone, or address. These are entirely voluntary. We only ask in case they're useful to you later. You can skip them all.
Loyalty points you give us: the program names, points, and expiration dates you add via any of our supported paths (manual entry, screenshot upload, email forwarding, a connected Gmail account, the browser extension, or a connected loyalty account). Except for a loyalty account you explicitly connect, we never access your bank, airline, or hotel accounts to pull this data ourselves.
Travel preferences (optional): answers you choose to give on the Best Moves page: a home airport, regions you want to visit, whether you chase premium cabins, what you'd pay for them. Every question is skippable. We use them to rank your recommendations. Preferences you mention in the Recommendations conversation, like cabin or regions, save to the same travel profile on your account; retaking the quiz on that page is the way to adjust your preferences. The conversations themselves stay on your device and are not stored on Kaivion's servers.
Search activity: we log basic award-search activity (origin, destination, dates) for rate limiting and abuse prevention. Nothing identifying beyond that.
Usage data: events like which pages you view and when you add a program, not linked to your name, email or account. Helps us see what works.
Cookies: a session cookie that keeps you signed in, plus an analytics cookie.

What we do not collect

Your bank account or full credit card numbers. If you subscribe to a paid plan, your card is handled directly by our payment processor. See Payments below.
Your airline or hotel account passwords, unless you explicitly connect that loyalty account. See Connecting a loyalty account below for how those are protected.
Government ID, biometric data, or health data.
Your precise location.

Email forwarding (auto-sync)

Email forwarding is no longer offered to new members; connecting Gmail or Outlook (below) replaced it. If you set up forwarding earlier it still works and the same rules apply. With forwarding, a rule in your inbox sends specific loyalty emails to a private Kaivion address. We never read your inbox or pull anything from it; we only see the emails your own rule forwards. Of the emails that arrive, we keep only those sent by a loyalty program's own address; anything else, including sign-in codes, password resets and account-security notices from a program, is discarded before it is stored or read. From each kept email we extract three things: program, points, and expiration if present. You can stop auto-sync any time by removing the forwarding rule.

To do the extraction we send the relevant parts of the email (subject line and message body) to Anthropic, the AI provider whose model reads the message and returns the three fields. Anthropic processes that request to produce the response and does not use the content to train its models, per their published API terms.

After a successful extraction the email body is deleted from our database right away. If the parser could not read the points (for example because the email was promotional rather than a statement) the body is deleted right away as well. The one exception is your mail provider's forwarding confirmation, which we keep for up to one hour so we can show you its code, then delete. We never keep raw email bodies past that window.

Connecting your Gmail (optional)

Instead of setting up a forwarding rule, you can connect your Gmail account directly. This is optional, off by default, and you can disconnect it at any time. When you connect, Google asks you to grant Kaivion read-only access to your Gmail. We never request permission to send, change, or delete anything.

What we do with that access is narrow on purpose. We only search your mailbox for emails sent by the loyalty programs Kaivion supports: a fixed list of airline, hotel, and card programs whose sender addresses we already know. The programs you track come first, and a statement from a supported program you have not added yet adds that program to your dashboard. We do not open, read, or index the rest of your inbox. Of the matching emails, we recognize sign-in codes, password resets, new-device alerts and other account-security messages from the sender, subject and first line, and skip them; nothing is taken from them. From each remaining email we pull the same three things as forwarding: program, points, and expiration date if it is there. We check once a day, or when you press Sync now.

We never store the contents of your emails. A matched message is read in memory only long enough to pull those values, then discarded. It is never written to our database. To read the points we send the relevant parts of the matched email to Anthropic, under the same no-training terms described above. We keep only the extracted points, exactly as if you had typed them in yourself. We also keep simple daily counts per program (how many emails we read and how many had points in them) to see how well we read each program's emails. Those counts hold no email content and are not linked to you.

The access token that lets us do this is encrypted and stored on our servers only, never in your browser. Disconnecting Gmail inside Kaivion immediately deletes that token and asks Google to revoke our access. You can also revoke access yourself at any time from your Google account's security settings.

Kaivion's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Gmail data only to provide the points-tracking feature you turned on. We never use it for advertising, we never sell it, and no human reads it except where you ask us to for support, or where the law requires. We do not use, retain or transfer Gmail data to develop, improve or train any generalized artificial intelligence or machine learning model; the single extraction request described above serves only your own account.

Connecting your Outlook (optional)

You can also connect an Outlook.com, Hotmail, Live or Microsoft 365 mailbox. Microsoft asks you to grant Kaivion permission to read your mail; we request read access only, never permission to send, change or delete anything. Everything described above for Gmail applies in the same way: we only search for emails from the loyalty programs Kaivion supports, recognize and skip sign-in codes, password resets and other account-security messages, pull out program, points and expiration date, never store the emails, and never use them to train any AI model.

The access token is encrypted and stored on our servers only. Disconnecting Outlook inside Kaivion deletes it immediately, which ends our access. You can also remove Kaivion from the app permissions page of your Microsoft account at any time.

Connecting a loyalty account (optional)

For supported programs you can connect your loyalty account directly by entering the sign-in details you use on that program's site. This is optional, off by default, and you can disconnect at any time.

Those sign-in details are stored encrypted on our servers, in a way that the database alone cannot decrypt. We use them for one thing: signing in to that program to fetch your points value, expiration date, and upcoming trips, including an automatic check about once a day. They are never shown back to you or anyone else, never used for anything besides that fetch, and never shared except with the service that performs the sign-in on our behalf, which does not retain them.

Disconnecting a program deletes the stored sign-in details immediately. Deleting your Kaivion account deletes them too.

Screenshot upload

You can also upload a screenshot of a loyalty account page instead of forwarding email. The image is sent to Anthropic's vision model to read the points, held in memory long enough for that call to complete, and never written to our storage. The same no-training rule applies: Anthropic does not use uploaded images to train its models. The extracted points return to your browser for you to confirm before any database write happens.

Browser extension

The Kaivion extension is optional and does one thing: keep your loyalty points up to date. It reads on your device, from your own loyalty pages, and sends Kaivion what is listed here.

Your points figure and, where the page shows one, its expiration date.
A short read note: the site's name, the number read and what happened to it, how it was found, whether your browser had translated the page, the extension's version, and up to 80 characters of nearby text with long runs of digits masked. If a read fails, whether the usual spot for the figure was on the page and up to three candidate values, each with its masked nearby text. If you correct a number, the correction. We use these notes to measure how accurately the extension reads each site and to fix misreads, and we delete them after 90 days.
For some programs, once you have agreed to it, transfers and redemptions from your points activity list: the site's name, the partner program, the amount, the date and whether it has gone through. The description, the card column and any dollar amounts are never sent.
When the extension is unsure which number is your points, the candidate numbers and a small amount of masked nearby text go to Anthropic to pick the right one. Anthropic does not use this to train its models. If it is still unsure, the extension asks you to confirm instead of guessing.
A screenshot you choose to upload is read by Anthropic's vision model for that request only and is not stored by Kaivion.

The extension does not collect your passwords, cookies or the contents of the page, and it cannot sign in to your accounts for you. To update automatically it asks for the standard browser permission to run on the sites you visit; it acts only on supported loyalty pages and reads nothing elsewhere. You can decline that permission and update with one click instead, or revoke it at any time in your browser settings. When the extension is not sure which number is yours, it shows what it found and asks you to confirm.

How we use your data

To run the product.
To rank your recommendations, when you've answered the optional preference questions.
To fix bugs and improve features.
To prevent abuse.
To contact you about your account when needed.

We do not sell your personal data. We do not share it with advertisers. We do not use it to train AI models.

We may use aggregated, anonymized data (patterns across many members, like which redemptions people value most or what travelers would pay for business class) to improve the product and to publish or license industry insights. These aggregates never include your identity, your points, or anything that could be traced back to you, and we only build them from groups large enough that no individual could be singled out. We commit to never attempting to re-identify anyone from aggregated data.

Payments

If you subscribe to a paid plan, your payment is processed by Stripe, our payment processor. Your card number and security code are entered directly into Stripe's secure fields. Kaivion never sees or stores your full card details.

From your subscription we keep only what we need to give you access and manage billing: your plan, its status, the renewal date, whether it is set to cancel, and the references Stripe gives us to look your subscription up. Stripe handles your payment information under its own privacy policy.

Service providers

We rely on third-party infrastructure providers (hosting, database, authentication, analytics, email delivery, payment processing) located in the United States and the European Union. They process data on our behalf under standard data-protection terms and only for the purposes of running this product. We can share specific details on request.

Your rights

You can:

Delete any program from your dashboard at any time.
Permanently delete your account and your personal data instantly from your delete-account page. The action is immediate and cannot be undone. See how long we keep data.
Request a copy of the data we hold about you (data portability).
Withdraw consent for any optional field by emailing us, and we will null it out.

If you are in the EU/UK, you also have rights under GDPR/UK GDPR (access, rectification, erasure, restriction of processing, objection, portability). The legal basis for our processing is your consent or our legitimate interest in running the product.

Your California rights

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), gives you specific rights. We honor these rights regardless of where you live.

Right to know. Request a copy of the personal information we hold about you, the categories, the sources, the purposes, and the categories of third parties we share it with.
Right to delete. Delete your account and all associated personal data instantly from your delete-account page.
Right to correct. Correct inaccurate personal information from your profile page or by emailing us.
Right to opt out of sale or sharing. Kaivion does not sell your personal information and does not share it for cross-context behavioral advertising. We have nothing to opt you out of, but state this explicitly because California law requires we do.
Right to limit use of sensitive personal information. We do not collect sensitive personal information as defined by CCPA.
Right to non-discrimination. We will not deny you service, charge you a different price, or provide a different level of service if you exercise any of these rights.
Right to authorize an agent. You may authorize someone to make a request on your behalf. We will verify their authority before responding.

To exercise any of these rights, email us at kaivionsupport@gmail.com from the address associated with your account. We respond within 45 days as required by California law. For requests we cannot verify, we may ask for additional information to confirm your identity.

We retain personal information only for as long as your account is active or as needed to run the service. When you delete your account, your personal data is removed immediately, not on a queue or a schedule.

We keep a limited set of records after deletion where we need them for security, to prevent fraud and abuse, and to meet our legal obligations. We hold those no longer than necessary for those purposes.

Security

All traffic is encrypted in transit. Your data is held under access controls that limit reads to your own account. No system is perfectly secure, but we take reasonable steps to protect what you give us.

Children

Kaivion is not intended for users under 18. We do not knowingly collect data from minors.

Changes to this policy

If we change how we handle data, we will update this page and update the date at the top. For significant changes, we will email registered users.

Contact

Questions go to kaivionsupport@gmail.com.