KinhMõ

Legal

Privacy

Last updated: 23 October 2026

This policy has two parts: the app and this website. The app collects nothing. The website is hosted somewhere and has a mail address — that does produce data, so the second part sets out exactly what.

The app

KinhMõ collects nothing. No account, no analytics, no advertising, no third-party services — and the app itself makes no network requests at all. That is checkable rather than promised: the privacy manifest shipped inside the app declares not a single collected data type and no tracking. The two links under About & licenses open this website in Safari — which is Safari doing the networking, not the app.

What you build up in the app — saved words, your review progress, your settings — stays on your iPhone and is never transmitted. If you back your device up the usual way, via iCloud or a Mac, it is included in that backup; that is your choice in the iOS settings.

There are no third parties.

The data stays for as long as the app is installed. Delete the app and it is gone; in the vocabulary list you can delete individual entries at any time.

Because nothing leaves your iPhone, there is nothing held anywhere else for you to access, correct or have deleted. For anything else: support@kinhmo.com.

This website

Controller

Nick ZimmermannPostal address: on requestEmail: support@kinhmo.com

There is no data protection officer; a project of this size is not required to appoint one.

Purposes and legal bases

There are exactly two purposes: delivering this website, and answering support mail.

When a page is requested, the host processes short-lived server logs — IP address, time, the address requested, the browser identification sent along. That is technically necessary for a page to arrive at all, and it serves secure operation. The legal basis is the legitimate interest in a working and abuse-resistant site, Art. 6(1)(f) GDPR.

If you write to support@kinhmo.com, your mail address and your text are processed in order to reply. The legal basis is Art. 6(1)(b) GDPR where the matter concerns the app itself, and otherwise Art. 6(1)(f) GDPR — the legitimate interest in answering a message you chose to send.

Recipients and transfer to the United States

Two service providers are involved, and both are based in the United States. The website is hosted by Vercel Inc. (hosting, delivery, the server logs named above). The explainer videos and the short film on the home page are also stored with Vercel Inc. (its Vercel Blob storage, region Frankfurt) and load only when you press play; that leaves the same server logs as loading a page. The address support@kinhmo.com is a forwarder: Porkbun LLC receives the mail and forwards it to a private mailbox at Google (Gmail), where it is read. There are no other recipients.

An IP address and a mail address are personal data, so this is a transfer to a third country. It looks different for each of the companies involved. Vercel Inc. is certified under the EU-US Data Privacy Framework; that is what the transfer relies on when a page is requested. Google LLC is likewise certified under the EU-US Data Privacy Framework; that is what the transfer to the mailbox where support mail is read relies on. Porkbun LLC is not certified: it only receives the mail and passes it on, without keeping it. That occasional transfer relies on being necessary in order to answer a request you sent yourself (Art. 49(1)(b) GDPR). Checked on 13 September 2026.

Retention

The server logs are short-lived and deleted automatically by the host; they are not analysed, not archived and not combined with anything else. Support mail is kept for as long as it is needed to answer and to handle any follow-up, and is deleted afterwards.

Your rights

You have the right of access (Art. 15 GDPR), to rectification (Art. 16 GDPR), to erasure (Art. 17 GDPR), to restriction of processing (Art. 18 GDPR) and to data portability (Art. 20 GDPR). A mail to support@kinhmo.com is enough.

Erasure here means, concretely: the mail thread with you is deleted from the mailbox, the trash included — there is nothing beyond that, because there is neither a database nor an account.

Right to object: you have the right to object at any time, on grounds relating to your particular situation, to processing that is based on a legitimate interest (Art. 21 GDPR). A mail to support@kinhmo.com is enough for that too.

You may also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the one where you live.

What does not happen here

No cookies. No analytics tool, no tracking, no advertising, no embedded third-party content, no fonts loaded from someone else's server. No newsletter, no accounts, no forms. There is no automated decision-making and no profiling within the meaning of Art. 22 GDPR.

Changes

This policy is dated. If something changes in the app, it is updated with the next app release; if something changes on the website, here. Who is behind KinhMõ is on the Imprint.