Last updated: 15 October 2026
Who we are
Kya & Co. is run by The Kya Project, LLC, 3420 S Washington Rd, Fort Wayne, IN 46802, United States. We're the controller of your personal data, which means we decide how it's used and we're responsible for looking after it. You can reach us at brittany@thekyaproject.com.
What we collect
Account details (email, display name), bird profiles and care plans you create, sit records and sitter activity, photos and clips you upload, and information about how you use the app and, if something goes wrong, error reports (see below).
How we use it
To run the service: store your bird care plans, share them with sitters you invite, and surface your data back to you in the app. We do not sell your personal data.
Analytics
We use a service called PostHog to understand how the app is used, such as which screens people open and which features they rely on. This shows us what's working and what needs fixing. PostHog doesn't use cookies, record your screen or see what you type. Before anything is sent, we remove links that give access to a care plan, sign-in details and private photo links. PostHog knows you by a one-way coded version of your account ID, never your name or email address. People using a sitter link aren't tied to any account.
When something goes wrong
If the app runs into an error, it sends us a report so we can find and fix the problem, often before you've had to tell us. A report includes the error message, the technical trail showing where in our code it happened, the page you were on, the app version, your device type and operating system, whether you were using the website or the iPhone or Android app, and the same coded account ID we use for analytics. It never includes your birds' names, health notes, weights, care plan details, photos, your email address or sitter links. Reports go to PostHog and are kept for up to a year.
Why we're allowed to use your data
Data protection law asks us to have a reason for everything we do with your data. Ours are:
- To provide the service you asked for. Running your account, storing your care plans, sharing them with sitters you invite, sending account and sit emails, and sending push notifications you turn on.
- With your consent. Marketing and community emails. You can withdraw your consent any time.
- Our legitimate interest in keeping the app working and making it better. That covers product analytics, security and fixing bugs. You can object to this (see your rights below).
Services that help us run Kya & Co.
These companies handle data for us, only to provide their service. We don't let them use it for their own purposes.
- Supabase: our database, sign-in and file storage. Handles your account details, birds, care plans, sits, logs and photos.
- Vercel: hosts the app. Handles the requests your device makes, including your IP address.
- Cloudflare Stream: stores and plays care clips. Handles the videos you upload.
- Brevo: sends our emails (based in France, data stored in the EU). Handles your email address, name, language, email preferences and how you found us.
- PostHog: product analytics and error reports, without cookies. Handles a coded account ID, the screens you use, your device type and error reports.
- Google Sign-In and Sign in with Apple: let you sign in, if you choose to. Handles the name and email address they share with us.
- Apple Push Notification service and Firebase Cloud Messaging: deliver notifications in the iPhone and Android apps. Handles a device token and the notification text.
- Your browser's push service: delivers notifications on the website, if you turn them on. Handles a push address for your browser and the notification text.
Where your data is stored
Our servers and most of our providers are in the United States. Our database and files are stored in the eastern US, so when you use Kya & Co. from the EU or UK, your data is transferred to the US. Brevo, our email provider, keeps your email details in the EU. We protect those transfers with the European Commission's Standard Contractual Clauses, or the EU-US Data Privacy Framework where a provider is certified under it.
Sharing with sitters
When you create a sit, the invited sitter can access the care plan, contacts, and media for the assigned birds while their link is active. Sitter access expires when the sit ends, or immediately if you revoke the link.
Marketing
We only send marketing or community updates if you opt in at signup. You can opt out at any time using the unsubscribe link in any of our emails, or by emailing brittany@thekyaproject.com.
Deleting your account
You can permanently delete your account from account settings. This removes your birds, care plans, sits, logs, and photos, and the analytics and error data PostHog holds about your account. Your contact record with our email provider is managed separately and is not removed by deleting your account — every email we send includes an unsubscribe link, or you can ask us to delete it using the address below. How to delete your account explains the steps and exactly what is removed.
How long we keep your data
We keep your data while you have an account. When you delete it, we remove it as described above. Our database provider keeps daily backups for 7 days, so deleted data is gone from backups within a week. Error reports are kept for up to a year, or until you delete your account.
Your rights
You can ask us to show you the data we hold about you, correct it, delete it, or send you a copy in a format you can take elsewhere. You can also ask us to limit how we use it, or object to us using it for analytics. Where we rely on your consent, you can withdraw it any time. Email brittany@thekyaproject.com and we'll reply within a month.
If you're not happy with how we've handled your data, you can complain to the data protection authority in your country. We'd be grateful if you told us first so we can try to put it right.
Contact
Questions about your data? Email us at brittany@thekyaproject.com.