Privacy Policy

1. Who we are

Kinmote is a remote-access and device-management service operated by Bifrost Ltd, Hong Kong. This Privacy Policy applies to the Kinmote mobile application, our websites, and related services that link to this policy.

2. Information we process

Account and profile information

When you create or use a Kinmote account, we process your email address, display name, profile image if supplied, internal user identifier, account status, and authentication information. Passwords are processed in protected form; we do not store your password as readable plain text.

Google Sign-In information

If you choose Google Sign-In, Google provides information needed to authenticate you, which may include a stable Google account identifier, email address, name, profile image, and an identity token. We use this information only to authenticate you and to create or link your Kinmote account. We do not use Google user data for advertising, profiling, or sale. Our use of information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements. Google processes information under its own privacy policy.

Device and address-book information

We process information about devices you register or save, including device name, platform, Kinmote device serial number, a device connection identifier, last-online time, connection-password status, and group assignment.

To recognize a specific physical device consistently—for example, so reinstalling the app does not create a duplicate device entry—Kinmote uses Android's device identifier (Settings.Secure.ANDROID_ID) together with a randomized Kinmote communication identifier generated by our communication core and stored in the app's private storage. On Android 8.0 and later, the Android device identifier is scoped to the combination of app-signing key, Android user, and device. It can remain stable across reinstalls, but may change after a factory reset, an app-signing key change, or certain operating-system upgrade and reinstall scenarios. It is not linked to your Google Account, advertising ID, or any advertising or analytics use, and Kinmote does not read your IMEI, IMSI, SIM serial number, MAC address, or device build serial number. Device identifiers are used only for app functionality, device management, and account security.

Device connection password

Each device you manage can optionally require a connection password before another device may pair with and control it. This connection password is separate from your Kinmote account password, is used only to authorize remote connections to that specific device, and is transmitted securely.

Pairing and remote-session information

To establish and operate a remote session, we process pairing codes, controller and controlled-device identifiers, session identifiers, connection type, start and end times, duration, latency, traffic totals, connection status, and related diagnostic metadata.

Purchase and subscription information

For Google Play purchases, we may process product and base-plan identifiers, purchase tokens, Google order identifiers, transaction identifiers, amount, currency, purchase status, subscription status, renewal status, and entitlement dates. Google Play handles your payment method directly. Kinmote does not receive your full card number.

Technical, security, and support information

Our systems may process IP address, request time, app version, device platform, error information, authentication and anti-abuse events, and messages or attachments you send to support. We limit this information to what is reasonably necessary to operate, secure, troubleshoot, and support Kinmote.

3. Remote session content

When you start or accept a remote session, the shared screen, permitted system audio, and control input are transmitted to the device you selected. Kinmote selects an available network route to establish and maintain the connection.

4. Android permissions

• Accessibility Service: used only during an active remote-control session to perform authorized touch, scroll, navigation, and text-input actions in real time in response to a human controller. Kinmote does not use Accessibility Service to autonomously initiate, plan, or execute actions. It does not read window content except where necessary to identify whether the currently focused element accepts text input.
• MediaProjection: used to capture and share the screen after Android displays its system consent prompt.
• Audio permission: used, where supported and permitted, to share system playback audio during a session. Kinmote does not use this feature to record microphone audio. Android may display generic audio-recording wording for this permission.
• Foreground service and notifications: used to keep an active remote session visible and operating as required by Android.
• System alert window (overlay): used to show a persistent on-screen indicator to the person whose device is being remotely controlled, so they know a session is active and can end it immediately.
• Wake lock: used to prevent the device from sleeping while a remote session is active.
• Ignore battery optimizations: used, at your choice, to keep a device reachable for incoming remote-control connections while idle. Android may otherwise suspend the app in the background after extended inactivity, requiring the device to be woken or Kinmote reopened before a new session can connect. Declining this permission does not disable remote control.
• Modify audio settings: used only if you enable the optional "Mute this phone during remote sessions" setting, to temporarily lower this device's media volume while a session is active and restore it once the session ends.
• Internet and network state: used for authentication, device management, connection setup, and service delivery.

Kinmote does not use Accessibility Service to capture, store, or transmit passwords, payment information, or other unrelated sensitive data. You can revoke permissions in Android Settings at any time.

5. How we use information

• create, authenticate, maintain, and secure your account;
• register, organize, pair, and connect your devices;
• deliver remote sessions and calculate plan usage;
• verify purchases, restore entitlements, and manage subscriptions;
• send verification, security, service, and support messages;
• detect fraud, abuse, unauthorized access, and service failures;
• comply with legal obligations and enforce our Terms of Service.

6. Service providers and disclosure

We do not sell personal information and do not share it with advertising networks. We disclose limited information to service providers only as needed to operate Kinmote. These providers may support Google Sign-In, Google Play Billing, email delivery, hosting, security, error monitoring, and connection infrastructure. They may process information only to provide services to us and subject to applicable contractual and legal safeguards. We may also disclose information when required by law, to protect users and the service, or as part of a corporate transaction subject to appropriate safeguards.

7. Retention

Account and device information is generally retained while your account is active. Removed devices and expired sessions may remain for a limited period in backups, security records, and operational logs. Session metadata is retained only as reasonably necessary for usage calculation, reliability, support, security, and dispute handling.

Purchase and order records may be retained where necessary for accounting, fraud prevention, chargebacks, legal compliance, and dispute resolution. When information must be retained after account deletion, access is restricted and it is no longer used for ordinary product functionality or marketing.

8. Account and data deletion

You can initiate permanent account deletion in Kinmote under Account → Delete account. Kinmote may require a deletion verification code and explicit confirmation. You may also review the external deletion instructions at kinmote.com/delete-account.

Deletion revokes active login sessions and removes or de-identifies account data that is not required to be retained for security, payment, legal, or regulatory purposes. Deletion is irreversible. A later registration using the same email creates a new account and does not restore previously deleted devices or data.

9. Security and international processing

We use access controls, encryption in transit, protected credential storage, and monitoring intended to safeguard information. No system can guarantee absolute security. Kinmote may process network traffic and service data in countries other than your own, subject to applicable safeguards.

10. Children

Kinmote is not directed to children under 13 or the minimum age required in their jurisdiction. We do not knowingly create accounts for children who cannot lawfully consent to use the service.

11. Your rights and choices

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or obtain a copy of personal information. You may remove devices, revoke Android permissions, cancel a Google Play subscription, or delete your account directly in the app. To update profile information such as your display name, or to exercise rights not yet available directly in the product, please contact us.

12. Changes and contact

We may update this policy as Kinmote changes. We will revise the effective date and provide additional notice where required. Questions and privacy requests can be sent through Kinmote Support or to contact@bifrostltd.com.