KIPKIP Privacy Policy
v1.0 · Effective 2026-08-28
KIP ("Kinetic Ops") is a voice-first executive co-pilot app for the car, built by Yield SPM (Pty) Ltd. KIP is in build. It has not been released, there is no app store listing, and a pilot programme is planned. This policy tells you what personal information we collect today, what the app is designed to do with personal information once it exists in your hands, and the rights you hold.
Our primary law is the Protection of Personal Information Act, 2013 (POPIA). Where the EU General Data Protection Regulation (GDPR) applies to you, section 7.2 explains how this policy maps to it.
1. Who we are
The responsible party under POPIA (and controller under the GDPR) is:
Yield SPM (Pty) Ltd, registration number 2024/185151/07, a company incorporated in South Africa.
- Place of business (published in terms of section 43(1) of the Electronic Communications and Transactions Act, 2002): Stellenbosch, Western Cape, South Africa.
- Registered office (address for service of legal process only): 23 Kameeldoringdraai, Woodland Hills, Bloemfontein, Free State, 9301.
Privacy contact: the Information Officer, charl@alteragro.com (section 8). Our support address, support@kinetic-ops.app, is being activated; until it is live, use charl@alteragro.com.
2. What this policy covers
Two things, kept honestly apart:
- The website and waitlist at https://kinetic-ops.app — live now. The waitlist is the only personal information this website collects. Section 3 describes it in full.
- The KIP app — planned, not released. The app is not available to the public and holds no data about you today. Section 4 states its data practices as design commitments: the rules the app is being built to obey. We will publish an updated version of this policy before the app or its pilot programme processes personal information from anyone outside our own team.
3. What this website collects: the waitlist
If you join the waitlist, we collect:
| Field | Required | Why |
|---|---|---|
| Email address | Yes | To contact you about the pilot programme |
| Name | Optional | To address you properly when we do |
| A free-text note | Optional | Aggregate demand research — understanding what people would want KIP for |
| Consent timestamp | Recorded automatically | Proof that you consented, and when |
| Source and UTM strings | Recorded automatically | To know which link brought you here |
Purposes. Two only: contacting pilot-programme candidates, and aggregate demand research. We do not sell personal information, and we do not use the waitlist for anything beyond these two purposes.
Lawful basis. Your consent (POPIA section 11(1)(a)). The consent checkbox is unticked by default; joining is your choice. You may withdraw consent at any time by writing to the Information Officer. Withdrawal does not affect processing that happened before it.
Storage. Waitlist entries are stored with Cloudflare (D1 database), our website and waitlist host.
Minimality. We store no IP address and no browser details with your entry.
Retention. We keep your entry until the purposes above are fulfilled, or until you ask us to delete it — whichever comes first. Deletion requests go to the Information Officer (section 8). We verify that a request comes from the holder of the email address on the entry, and complete deletion within 30 days of a verified request.
Cookies and tracking. This website runs no analytics trackers and sets no advertising cookies. The only cookies are those of Cloudflare's essential infrastructure — serving and protecting the site, including the bot check on the waitlist form.
4. The app's data practices, as designed
These are design commitments, not live features. The app is in build. If the build changes any commitment below, this policy changes first, with a change-log entry.
- Transcript-only sessions. A KIP session is recorded as text. Voice is processed into a transcript, and the transcript is the record.
- No raw audio retention. Raw audio is never persisted. Audio exists only in transit while a session runs.
- Transcript retention: 90-day target. Transcripts are designed to be retained for 90 days, then deleted.
- A recording notice opens every session. Audible and visible, every time. There is no silent open microphone. The notice is there for everyone in the cabin, not only the account holder, and a pause command is part of the design.
- Safety by design. While the vehicle is moving, interaction is voice-only. Approvals, and anything that needs your hands or eyes, wait until you are parked. This is enforced in the product.
- Data residency. The canon — the knowledge base KIP answers from — resides in Google Cloud's africa-south1 region (Johannesburg, South Africa). Section 5 explains what does and does not leave South Africa.
5. Cross-border transfers (POPIA section 72)
POPIA restricts sending personal information outside South Africa. Here is our position, stated plainly:
- The canon stays in South Africa. The residency claim scopes to the canon: it resides in Google Cloud's africa-south1 region. It is not a claim about every byte in every path.
- Live voice transits the United States. As designed, live voice audio in an app session transits the US edges of our voice providers, xAI and OpenAI. These transfers rest on provider data processing agreements that include no-training and zero-data-retention commitments: the providers may not train on the audio and may not retain it.
- Dispatch transits GitHub. As designed, approved tasks are carried to our build systems through GitHub (United States).
- The waitlist is hosted with Cloudflare, a US-headquartered provider with a global network, under its data processing terms.
Where personal information crosses the border, we rely on POPIA section 72(1)(a): the recipient is bound by an agreement that upholds protections substantially similar to POPIA's conditions for lawful processing. The provider agreements above are that mechanism.
6. Subprocessors
| Provider | What it does | Status |
|---|---|---|
| Cloudflare | Website and waitlist hosting (D1 storage) | In use now |
| xAI | Realtime voice | Planned — app, in build |
| OpenAI | Voice (secondary provider) | Planned — app, in build |
| Google Cloud | Canon storage, africa-south1 | Planned — app, in build |
| GitHub | Dispatch of approved tasks | Planned — app, in build |
We will update this list before any new subprocessor processes personal information.
7. Your rights
7.1 Under POPIA
You may, at any time and free of charge:
- Access — ask whether we hold personal information about you, and ask for the record (section 23).
- Correction — ask us to correct information that is inaccurate or misleading (section 24).
- Deletion — ask us to delete your information (section 24). For the waitlist, this means your entry is removed.
- Objection — object to processing on reasonable grounds (section 11(3)).
- Withdraw consent — where processing rests on consent, withdraw it (section 11(2)(b)).
Send any request to the Information Officer (section 8). We verify that a request comes from the holder of the email address on the entry. We will respond without undue delay, and complete deletion within 30 days of a verified request.
If you are not satisfied with our response, you may complain to the Information Regulator (South Africa): https://inforegulator.org.za.
7.2 If the GDPR applies to you
If you are in the European Economic Area, our basis for the waitlist is your consent (Article 6(1)(a)), which you may withdraw at any time. You hold rights of access, rectification, erasure, restriction, data portability, and objection, and the right to lodge a complaint with your local supervisory authority. Exercise these rights through the Information Officer.
8. Information Officer
The Information Officer of Yield SPM (Pty) Ltd is reachable at charl@alteragro.com. This is the address for privacy questions, rights requests, and deletion requests.
General support: support@kinetic-ops.app once active; until then, charl@alteragro.com.
9. Governing law
This policy is governed by the law of South Africa.
10. Changes to this policy
This policy will change as KIP moves from build to pilot to release. Material changes receive a new version number, a new effective date, and a change-log entry below. The version in force is always the one published at https://kinetic-ops.app/legal/privacy. Before the app or the pilot programme processes personal information from anyone outside our own team, an updated policy will be published first.
Change log
- v1.0 (2026-08-28) — First published version. Covers the website and waitlist; records the app's data practices as design commitments.