Privacy Policy
Last updated: 11 November 2026
1. Who we are
Kevi is a private companion app for therapy and coaching, operated by Newlife app, based in the Netherlands. For any question about this policy or your personal data, contact us at hi@kevi.online. This policy explains what personal data we collect, why, how we protect it, and the rights you have under the EU GDPR and Dutch data-protection law.
2. Who can use Kevi
Kevi is intended only for adults aged 18 or older. We do not knowingly collect data from anyone under 18. If you believe a minor has created an account, contact us at hi@kevi.online and we will delete it.
3. Kevi is not a medical service
Kevi is a self-reflection and journaling tool. It is not a medical device, not a substitute for therapy, diagnosis, or treatment, and does not provide medical advice. If you are in crisis or need urgent help, contact a qualified professional or your local emergency services. Nothing in Kevi creates a therapist–patient or doctor–patient relationship.
4. What data we collect
- Account data: your email address and an encrypted password.
- Content you create: audio recordings of sessions you record; transcripts generated, pasted, or uploaded; notes, diary entries, journal entries, and emotion logs; AI analyses, patterns, homework items, and chat conversations generated from your content; topics you save for future sessions.
- Technical data: basic information needed to run the service securely.
Because the content you create can reveal information about your mental and emotional health, it is treated as a special category of personal data under Article 9 GDPR and handled with extra care.
We do not sell your data and do not use your content to show you advertising.
5. Why we use your data, and our legal basis
| What we do | Legal basis |
|---|---|
| Create and secure your account and let you sign in | Performance of a contract |
| Store and show you your content | Performance of a contract |
| Transcribe audio and generate AI analysis, patterns and chat replies at your request | Performance of a contract |
| Process health-related content you create | Explicit consent (Art. 9(2)(a) GDPR) |
| Take payment and manage subscriptions | Performance of a contract |
| Keep the service secure and prevent abuse | Legitimate interests |
You give explicit consent when you create or upload health-related content, and you can withdraw it at any time. Withdrawing consent does not affect processing that already took place.
6. How we protect your data
Your data is stored on servers in the European Union (Ireland). Access is restricted to your own account. Sensitive content fields are encrypted. Connections use HTTPS. No system is perfectly secure, but we take appropriate technical and organisational measures as GDPR requires.
7. Who processes your data on our behalf (sub-processors)
To run Kevi we use trusted providers, each processing your data only on our instructions under a data-processing agreement:
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database and storage | EU (Ireland) |
| AssemblyAI | Speech-to-text | EU endpoint |
| Anthropic | AI analysis and chat | United States |
| Vercel | Hosting | United States |
| Resend | Account emails | — |
| Stripe | Payment processing, if you subscribe | — |
Where a provider is outside the EU, transfers are protected by appropriate safeguards such as EU Standard Contractual Clauses. We may update this list; the current version lives on this page.
8. How long we keep your data
We keep your content for as long as your account exists. When you delete your account, your content is deleted. Some limited records we are legally required to keep (such as payment records) may be retained for the period the law requires, and backups cycle out on a rolling basis.
9. Your rights
Under the GDPR you can:
- access the data we hold about you;
- rectify wrong data;
- erase your data (delete your account at any time);
- restrict or object to certain processing;
- receive your data in a common format (portability);
- withdraw consent at any time where processing is based on consent;
- lodge a complaint with a supervisory authority. In the Netherlands this is the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).
To exercise any right, email hi@kevi.online. We respond within the time limits set by law (normally one month).
10. Changes to this policy
We may update this policy as Kevi grows or as the law changes. When we make a material change we update the date above and, where appropriate, notify you in the app.
11. Contact
Newlife app — operator of Kevi.
Email: hi@kevi.online