Kinvectum AB provides self-service controls for common requests and an email route for formal GDPR requests.
If you are signed in, open Companion → Account → Privacy & data and choose Download my data. The JSON export contains your synced Companion state, profile/consent record, share metadata and temporary download URLs for private recordings.
In the same Account section, choose Delete account and cloud data and type DELETE to confirm. The flow removes private cloud recordings first, then deletes the Supabase Auth user; user-linked Companion rows cascade. It also clears Companion's local recording database on that device.
Ask whether we process personal data about you and receive a copy plus information about how it is used.
Ask us to correct inaccurate personal data. Many Companion entries can also be edited directly in the app.
Ask us to delete personal data where the GDPR right to erasure applies. Companion also provides self-service cloud account deletion.
Ask us to restrict processing in circumstances provided by GDPR.
Receive data you provided in a structured, commonly used, machine-readable form where the portability right applies. Companion provides a JSON export with temporary private-recording download links.
Object to processing based on legitimate interests in circumstances where the right applies.
Withdraw explicit health-data consent at any time for future processing. Withdrawal does not make earlier lawful processing unlawful, but cloud health features cannot operate without processing the health data you ask Companion to handle.
Rights are not absolute in every situation. If an exception applies, we will explain the reason and the available complaint route.
Email info@kinvectum.com with the subject Companion data rights request. Tell us which right you want to exercise and the email address used for your Companion account.
We may ask for additional information when reasonably necessary to verify that we are dealing with the correct person. Do not email recordings, passwords or unnecessary health details just to prove identity.
Email a privacy request →We will respond without undue delay and ordinarily within one month of receiving a request. GDPR can allow up to two additional months for complex or numerous requests; if that happens, we will tell you within the first month and explain why.
Self-service account deletion removes the active Companion cloud account, user-linked database state, encrypted share rows and private recording objects. AssemblyAI transcript artifacts are separately submitted for provider deletion once transcription has been retrieved.
Some service providers can retain limited billing, security, abuse-prevention or backup information for their own defined periods, and information may need to be retained where law requires it. OpenAI standard API controls can retain API inputs/outputs for abuse monitoring for up to 30 days unless the OpenAI project is configured for Zero Data Retention. See the Privacy Notice for current details.
If you believe personal data is being processed contrary to GDPR, you have the right to lodge a complaint with Integritetsskyddsmyndigheten (IMY), the Swedish Authority for Privacy Protection.
Go to IMY complaint information ↗Kinvectum AB
Organisation number 559435-3715
Stockholm, Sweden
info@kinvectum.com