Privacy policy

hi Boards (the website hi.kvai.in and the hi Boards app for Android and iOS) is made and run by KVai Solutions, New Delhi, India (“we”). This page says what we store, why, for how long, and how you can delete it. The app and the website are the same service and follow the same policy.

What we never ask for

• No phone number, email address, real-name check or government ID.
• No access to your contacts, location, microphone, camera roll, SMS or call log.
• No advertising, no ad identifiers, no tracking across other apps or sites, and we do not sell or rent data to anyone.

What we store

• Account: the username and display name you choose, and the date the account was made.
• PIN and recovery code: only one-way, salted and peppered hashes. We cannot read or recover your PIN or your recovery code.
• What you put on boards: sticky notes, drawings, files and text snippets, with who added or edited them and when, plus the list of people on each board.
• Logged-in devices: for each session, a label such as “Chrome on Android”, when it logged in and when it was last active — so you can see your devices and log them out.
• Security log: events such as “logged in”, “wrong PIN” or “PIN changed”, shown to you on the Security page.
• Network address, hashed: a keyed hash of your IP address (never the address itself) used to slow down PIN guessing and to enforce bans.
• Board activity: a short feed per board (“Priya shared Menu.pdf”) visible only to that board's members.
• Notifications, only if you turn them on: the push address your browser or phone gives us for that device, and the language to write the notification in.

On your own device the app keeps a session cookie, a trusted-device cookie, your language, and small flags such as “tour seen”. These are needed for the app to work; none are used for advertising.

Why we use it

• To log you in and keep your account safe.
• To show your boards on all your devices and to the people you add.
• To tell board members about new activity, if they asked for notifications.
• To stop abuse: brute-force protection, board bans and member reports.

Who can see your boards

Only you and the people you add. There are no public boards and no public links; a board link opens only for its members. Anyone holding a valid join code or QR can join that board while the code is live (24 hours), so share codes only with people you trust. You can make a new code at any time, which stops the old one.

How long we keep things

• Files and text snippets: deleted automatically 7 days after they are added.
• Sticky notes and drawings: until you delete them, the board is deleted, or your account is deleted and nobody else is on the board.
• Sessions: a device is logged out after 30 minutes without activity.
• Security log: your last 50 events. Board activity: about the last 120 events per board.
• Account: until you delete it.

Deleting your data

You can delete your account yourself at any time, in the app or on the web: open Security & devices → Delete my account and enter your PIN. Step-by-step instructions, and what exactly is removed, are on the Delete your account page. If you cannot log in, write to hello@kvai.in from any address and tell us your username; because we hold no email or phone for you, we will ask you to prove the account is yours with your recovery code.

Where it is stored and who helps us run it

hi Boards runs on Vercel (hosting and file storage) and Upstash (database). They store data on our behalf and only to provide the service. All traffic is encrypted in transit (HTTPS). Stored files are private and are served only to members of the board they belong to. Servers may be located outside India.

Things other people post

Boards contain what their members put there. Any member can report another member; a board's admin can remove or ban people from that board. See the Terms of use for what is not allowed.

Children

hi Boards is a general productivity tool. It is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has made an account, write to us and we will delete it.

Your rights

You can see what we hold about your account on the Security page, change your PIN, log out any device, and delete your account. For anything else — a copy of your data, a correction, or a complaint — write to hello@kvai.in. If you are in India, this address is also our grievance contact under the Digital Personal Data Protection Act, 2023.

Changes

If this policy changes, we will change the date at the top of this page. Please look at it from time to time.