Privacy

Privacy Policy

Last updated September 18, 2026

KitHold is operated by Jesse Haynes in Columbia, Tennessee. This page says what the service stores, why, and who else touches it. Questions go to support@kithold.com, or by mail to 4935 Main St Ste 7 #132, Spring Hill, TN 37174.

What You Give Us

• Account details: your email, name, handle, bio and, if you add one, your Amazon Associates tag. Passwords are stored only as a one-way hash.
• Sign In With Google or Apple: we receive your email address and a stable account identifier from that provider. We never see your Google or Apple password.
• Your catalog: the items, photos, links, tags, public blurbs and private notes you enter. Private notes and items marked Private are never shown on your public page or returned by the public API.

What We Record When Someone Clicks Your Link

One row: which item, which app or source, the campaign name if the link carried one, and the time. No cookies are set on the person clicking, no IP address is stored, and nothing about them is profiled or sold. Known bots are not counted.

Cookies

One cookie, set when you sign in, keeps you signed in. There are no advertising or analytics cookies on KitHold.

Abuse Protection

To slow down password guessing and automated sign-ups we keep short-lived counters. They are keyed by a one-way keyed hash of the requesting IP address, not the address itself, and are cleared within a day or so.

Who Else Handles Your Data

• DreamHost hosts the application, database and outgoing email, in the United States.
• Stripe handles payment. Card details go straight to Stripe and never reach KitHold's servers. We store your Stripe customer and subscription identifiers and the state of your plan.
• Replicate processes a photo only when you press Cutout on it; the photo is sent to their background-removal model and the result is stored with your item.
• Google Fonts serves the typefaces, which means your browser makes a request to Google when a page loads.
• Stores you link to. When you paste a product link, our server reads that page to fill in the fields. When someone follows one of your links, they land on that store and its own policies apply.

We do not sell personal information and we do not share it for advertising.

Keeping And Deleting

Your data stays for as long as your account does, including after a trial or subscription ends, so that your published links keep working. Delete Account in Settings removes your items, photos, links, click history, API keys and account record, and cancels any subscription. Stripe keeps its own payment records as the law requires of it.

Your Choices

You can read and export your catalog as JSON through the API at any time, correct anything in the app, and delete the account yourself. For anything the app does not cover, email us and a person will answer.

Children

KitHold is not directed to children under 13 and we do not knowingly collect their information.

Changes

If this policy changes in a way that matters, account holders are told by email before it takes effect, and the date above changes.