Privacy notice
Kittywake is a meeting assistant in private beta. People call it Kitty. This notice explains what happens to personal data in Kittywake: yours if you're on the waitlist, testing Kittywake or paying for it, and yours if you were in a meeting that Kitty joined.
Last updated 19 October 2026.
Who we are
Kittywake is run by Startling Ltd, a company registered in England and Wales (number 12095674). Our registered office is 176 Netheroyd Hill Road, Cowcliffe, Huddersfield, West Yorkshire, HD2 2LZ.
Startling Ltd decides how Kittywake handles personal data, so we are the controller. To ask anything about your data, or to complain, email dan.akers@startlingideas.com or write to the address above.
If you were in a meeting with Kitty
A tester can bring Kitty into their Google Meet or Microsoft Teams call. Kitty joins as a participant called "Kitty (Name's note taker)", posts a message in the chat saying what it does and how to remove it, and shows the same on its video tile.
Kitty only takes notes of people who agree. When it arrives, and when anyone joins after it, it asks out loud, on its video tile and in the chat. The tester who brought it agreed by sending it. The tester is responsible for telling you Kitty is there, and for what they do with its notes afterwards.
Agreeing to the notes
- To be in the notes, say yes when Kitty asks, or type /yes in the chat at any time. The tester can also put you in the notes from their page once you have told them you agree.
- If you say no, or don't answer, Kitty keeps nothing you say. Your voice isn't even turned into text: Kitty receives the sound of the meeting like anyone in the call, and drops yours as it arrives. Your name shows on Kitty's video tile as not in the notes, so everyone knows.
- When Kitty asks you, it listens for your answer for about 15 seconds. During that time your words are turned into text only to find your yes or no, and nothing else you say then is kept.
- You can change your mind at any time: say "Kitty, don't note me" or type /no, and nothing more you say is kept. What you said before stays in the notes; email us if you want it deleted.
- Kitty keeps a record of who it asked, how they answered and when, so that it can show who agreed if anyone asks later. It holds your name as the meeting showed it, your answer, and how and when you gave it. If the tester put you in the notes or took you out, it also holds their name. It is kept for a year, even after everything else from the meeting is deleted, and then deleted. You can ask us to delete your part of it sooner.
What Kitty collects
- Your name, as the meeting shows it.
- Whether you agreed to be in the notes, how and when.
- What you say once you have agreed, turned into text by speech recognition. Kittywake keeps the text, not audio or video.
- Messages you type in the meeting chat while Kitty is there.
- Your vote, if someone holds a vote in the meeting and you take part: the choice you picked, with your name if you are in the notes.
- When you joined and left.
- If the tester booked Kitty from their calendar, or by sending it the meeting's invitation: your name and email address from the invite, and whether you accepted.
What Kitty makes from it
While the meeting goes on, Kitty keeps running notes (decisions, actions and open questions) and makes what people ask for: answers, look-ups, charts, comparisons, mind maps, timelines, maps, team structures, sitemaps, diagrams, wireframes, documents (a proposal, a brief, a report, a plan or the minutes) and slides. After the meeting it writes a summary. Any of these can mention you or what you said. Kitty uses AI to make them, and they can contain mistakes.
A document Kitty writes is made only from what people in the meeting said and what they asked for. It shows on Kitty's screen a page at a time as it is written. Where the meeting didn't settle something, such as a price or a date, the document leaves a gap in square brackets instead of guessing. A part that Kitty added itself says so.
Slides Kitty makes are made the same way, from what people in the meeting said or from something Kitty has made, such as a look-up on its screen. They show on Kitty's screen a slide at a time as they are written. The tester can download them as PowerPoint and PDF files, and so can the people the tester sent the summary to if the tester shared them. Kittywake makes those files when someone asks for one and doesn't keep them.
Anyone in the call can ask Kitty to change it, and the tester can download it as a Word file or a PDF. Those files are made when someone asks and aren't kept. The document is deleted with the rest of the meeting. It goes to everyone on the page the summary email links to only if the tester chooses, like anything else Kitty makes.
If the meeting has an agenda, Kitty keeps it at the top of its screen and marks how far each item has got. For each item covered, it adds a line saying where it got to, such as what was agreed. Every couple of minutes, and when someone says "Kitty, next item", it reads what has just been said to update them. It never changes a mark that someone in the meeting set. Anyone in the meeting can add to the agenda or change it, by voice or in the chat, and the tester can change it on their meeting page.
The agenda can also come from the meeting's invitation or the tester's calendar, as described below. Or, when someone runs through what the meeting will cover, Kitty can offer "Make that the agenda?" at the bottom of its screen, and makes it only if someone says yes. The summary then goes through the agenda item by item.
Anyone in the meeting can ask Kitty to hold a vote, as in "Kitty, let's vote: Mill Yard or the Corn Exchange". Kitty sends Claude the request to pick out the question and its choices. If the request names no choices, it sends the last few lines said too. People then vote by saying their choice, or by typing /vote and a number in the chat. Kittywake's own server reads each short line from someone in the notes. If the line is only a choice, it counts it, with no AI.
Kitty's screen shows each choice's votes with the names of the people in the notes who voted for it. So everyone in the meeting can see who voted for what, and the running notes and the summary keep that too. Someone who isn't in the notes can type /vote and is counted, but their name isn't shown or kept with their vote unless they agree to the notes.
Anyone in the meeting can say "Kitty, close the vote", and the tester can close it on their meeting page. The result then goes into the notes as a decision. A vote still open when the call ends closes then. Nothing is counted while the notes are paused.
Kitty also reads what has just been said, at most once a minute, to see whether it could help. What it does then depends on the meeting's mode, which the tester chooses and anyone in the meeting can change by voice. In Dynamic mode, the usual one, it offers something, such as a chart of figures someone gave. The offer shows at the bottom of Kitty's screen for 20 seconds, and nothing is made unless someone says "Kitty, yes" or the tester accepts it.
In Auto mode it makes the thing straight away and says on its screen that it did. "Kitty, go back" takes it down. How much it makes depends on the level the tester chooses. At Basic, it only keeps the actions from the running notes up to date on its screen, and doesn't read what has been said for anything else. At Middle, the usual one, it makes at most one thing every five minutes. At Everything, it also starts a mind map of the meeting's topics once people talk, and it can make something every two minutes.
Kittywake switches a demo level on only for its own team. At that level Kitty makes things as often as it can from what was said. That includes maps of places that were named, who's doing what, team structures, sitemaps and wireframes. In Manual mode it doesn't read what has been said for this, and only does what it's asked. Anyone can say "Kitty, manual mode" or "Kitty, stop suggesting" to stop Kitty offering or making anything by itself. The tester can choose the mode and its level for one meeting or for all of them.
When someone says a request only as an example, as in "you could say, Kitty, draw me a flowchart of how orders are packed", Kitty doesn't make it. It offers it at the bottom of its screen instead, with a line such as "Draw the order packing flowchart?". It does this in every mode, Manual included, and makes the flowchart only if someone says "Kitty, yes" or the tester accepts it.
Kitty can also say its answers out loud, as well as showing them. Its voice is off unless the tester switches it on, or someone in the meeting says "Kitty, speak your answers". Kittywake's server then sends Deepgram what Kitty is to say, and Deepgram turns it into speech in Kitty's voice. For an answer or a catch-up, that is its first sentence or two, and the rest stays on Kitty's screen without being said. Kitty says the short lines at the bottom of its screen out loud too, in the same way. Kittywake's server holds the sound in memory for two minutes while Kitty plays it into the meeting, and never writes it to disk or to its database. Anyone can say "Kitty, stop talking" to stop it.
The tester can also add documents to a meeting: PDF, Word or PowerPoint files, or a Google Slides deck from its sharing link. Kitty reads each one with AI and writes a summary of it. In the meeting, anyone can ask Kitty to show its pages, present it, answer questions about it, pull out a table or suggest other options. A document can mention people, including you.
Maps
When someone asks Kitty for a map, or Kitty makes one by itself at the demo level, Kittywake's server asks OpenStreetMap where each place is and fetches OpenStreetMap's map pictures of the area. It sends only each place's name and town, such as "Corn Exchange, Leeds", or a kind of place and the area to look in, such as "post offices in Huddersfield": nothing else said in the meeting, nobody's name, and not who asked. Kitty doesn't look up where anyone lives. OpenStreetMap is run by the OpenStreetMap Foundation, a not-for-profit company registered in England and Wales. It doesn't work for us, and its privacy policy says it keeps records of searches in the UK and the Netherlands and may study them to find addresses missing from its map.
Slides of Kitty's drawings
After the meeting, the tester can turn Kitty's drawings into slides that people can change, and the slides Kitty made in the meeting too. They can do one drawing at a time, or all the drawings they shared as one set. People the tester sent the summary to can do the same for the drawings the tester shared with them. Kittywake makes the slides in its own Google Drive the first time someone asks for them, so Google keeps them. A chart's figures go into a Google spreadsheet beside its slides. The slides hold what the drawing shows, which can include people's names.
The slides are shared by link, so that "PowerPoint" can download a copy and "Google Slides" can copy them into someone's own Google Drive. Kittywake deletes them when the drawing changes, goes in the bin or is left out of what everyone gets, and with everything else from the meeting. New slides are made the next time someone asks. A copy someone has downloaded, or made in their own Google Drive, is theirs, and Kittywake can't delete it.
Why, and on what legal basis
We do this so the tester who brought Kitty gets an accurate record of the meeting, help during it and a summary they can send to the people in it, and so we can run and test Kittywake. The legal basis is legitimate interests: the tester's interest in a record of their meeting and in sharing it with the people in it, and ours in providing Kittywake. We have weighed these against your interests and written the assessment down. Kitty asks everyone before it takes notes of them and keeps nothing of anyone who doesn't agree, anyone can remove it, it keeps no recordings, anyone can stop its emails, and everything is deleted after 30 days. The tester can choose to keep a meeting's summary, notes and drawings for up to 12 months, but never its transcript (see "How long it's kept").
What Kitty doesn't do
- It doesn't recognise faces or voices. Names come from the meeting.
- It doesn't try to work out anyone's mood or feelings.
- It doesn't use what was said for marketing, and nobody's meeting is used to train AI.
- It doesn't join meetings on its own. A signed-up tester has to send it, or book it from their calendar or with an invitation.
Pausing the notes
Anyone in the meeting can pause Kitty's notes for everyone, by saying "Kitty, stop recording" or "Kitty, pause", or by typing it in the chat. The tester can also pause them from their meeting page. While they are paused, Kitty keeps nothing anyone says or types to it, doesn't make anything, and says so on its video tile. It still listens, so that it can hear "Kitty, carry on" or "Kitty, leave". What people in the notes say is still turned into text by Deepgram, but Kitty only checks each line for those two requests and then drops it. Anyone can say "Kitty, carry on" to start the notes again, and they start again by themselves when Kitty leaves the meeting.
Removing Kitty
Anyone in the meeting can say "Kitty, leave" or type /leave in the chat, whether they are in the notes or not. Kitty says goodbye and leaves. The tester can also remove it from their panel.
Invitations sent to Kitty
A tester can book Kitty by adding its address, kitty@kittywake.uk, to a meeting's invitation, or by forwarding an invitation to it. When Kitty's address is on the guest list, everyone invited can see it there.
- Kitty acts only on invitations sent from a tester's own email address. Anything else sent to its address is ignored, and Kittywake keeps nothing from it.
- From an invitation, Kittywake keeps the meeting's title, times and link, how it repeats, and the organiser's and guests' names, email addresses and replies. It doesn't keep the meeting's description, its location, any attachments or the rest of the email.
- If the description uses the word "agenda", or has a list in it, Kittywake sends it to Claude, Anthropic's AI, to pick out the agenda's items. It keeps only the items, as the agenda of each meeting Kitty is booked for from that invitation, and never the description itself.
- On its way to Kittywake, the email passes through Google, which handles email for kittywake.uk, and then Resend.
- Each meeting Kitty is booked for keeps the invitation's guest list. It becomes the starting list for the summary email. Kitty also uses it to show which organisations the people in the notes are from (see "Who sees it").
Who sees it
- The tester who brought Kitty sees everything from their meeting.
- Everyone in the meeting sees what Kitty shows on its video tile.
- When someone asks "Kitty, who's in the call?", Kitty's video tile shows everyone's name as the meeting shows it. For someone in the notes, it can also show which organisation they're from. That is the part of their work email address after the @, such as "acme.co.uk", if the address is on the meeting's invite. Kitty finds someone on the invite only by their full name: as a guest's name, or as the part of a guest's address before the @. If it finds the name nowhere, or more than once, it shows nothing. It never shows the address itself, or an address at a personal email service such as Gmail. For someone who isn't in the notes, it shows only their name.
- When someone holds a vote, Kitty's video tile shows how many votes each choice has and the name of each person in the notes who voted for it. Everyone in the meeting sees that, and so does anyone using the watch link below. For someone who isn't in the notes, it shows only that one more person voted.
- Kitty posts a link in the meeting's chat, so anyone in the meeting can watch its video tile bigger, on another screen or in another window. It shows only what the tile shows, without Kitty's voice, and stops working when Kitty leaves the call. Anyone the link is passed on to can watch too while it works, even if they weren't in the meeting.
- Startling sees a tester's meeting only if the tester shares it with us for support. Each look is logged with its reason, and the tester can see the log.
- Startling can look up the record of who agreed to the notes, to answer a question or complaint about it, or a request to see or delete your data.
- When Kitty can't do something someone asks for, Startling is told in a few words what it was, such as "directions" or "a photo". That's so we know what to build next. We're never told who asked, what it was about, or anything else said.
- People the tester sends the summary to see what the tester chose to share with them.
- The companies listed under "Companies that handle data for us" process it on our behalf.
- OpenStreetMap sees the names and towns of places, and the kinds of places and areas, that Kitty is asked to put on a map, or puts on one by itself at its demo level (see "Maps").
- Anyone with the link to a drawing's slides can see them until Kittywake deletes them. The links are shown only on the tester's own pages, and on the page the summary email links to for the drawings the tester shared there (see "Slides of Kitty's drawings").
We don't sell anyone's data.
The summary email
After the meeting, the tester can email the summary to the people who were in it. Nothing goes until the tester has checked the summary, chosen what goes with it and pressed Send.
- The list starts with the tester and the calendar invite. The tester can take people off and add others.
- Each person gets their own email, from "Name via Kittywake", sent from outcomes@kittywake.uk. Replies go to the tester.
- It holds the summary and anything the tester chose to share, with a link to a private page showing all of it. The page's address is long, random and not listed anywhere, and it stops working when the meeting is deleted.
- If the tester keeps the meeting for longer than 30 days, the email says so, and until when.
- Every email has a link to stop Kittywake's emails. It works at once, whoever the meeting was with. To keep to it, we keep a scrambled copy of your address (a hash), not the address itself.
How long it's kept
Everything from a meeting (the transcript, the notes, the agenda, any documents added to it, the results, the slides made of the drawings, the summary and the list of who it was sent to) is deleted 30 days after the meeting. The tester can delete it sooner.
After the meeting, the tester can choose to keep it for up to 12 months instead, for example to look back at what was agreed with a client. Only the summary, the notes, the agenda, any documents, the results and their slides are kept that long. The transcript is still deleted 30 days after the meeting, with the chat and what people asked Kitty. So are the quotes from it in Kitty's answers, and the lists of who was in the call and who the summary went to. The summary email says when a meeting is being kept. If the summary has already gone out, Kittywake sends the same people a short email to say so. The tester can delete a kept meeting at any time, and you can ask us to delete it (see "Your rights").
When Kittywake deletes slides from its Google Drive, Google can still restore them for 25 days. Its terms then give it up to 180 days to remove them from its systems. After that we keep a record that the meeting took place: when, how long, and what Kitty's work cost, with no names and nothing that was said. We also keep the record of who agreed to the notes for a year (see "Agreeing to the notes"). An invitation sent to Kitty, with any agenda items picked out of it, is kept while Kitty is booked for its meetings. It is deleted 30 days after its last meeting, or 30 days after the organiser cancels it or the tester stops it. Resend, which sends Kittywake's emails and receives Kitty's invitations, keeps its copy of each email for 30 days, including invitations Kittywake ignores. If an email to you bounces, or you mark one as spam, Resend also keeps your address on a list of addresses Kittywake doesn't email, for as long as Kittywake runs. If you stop Kittywake's emails, the scrambled copy of your address is kept for as long as Kittywake runs, so that the request keeps working.
Sensitive information
Kitty doesn't ask for sensitive information, but people sometimes mention things like their health in a meeting. If that happens, it is in the transcript and is handled and deleted like everything else. Our tester terms ask testers not to use Kitty in meetings that are mainly about sensitive personal matters, and not to add documents that are.
If you're testing Kittywake
What we collect
- Your name and email address, from your invite.
- A password you choose, which we store only in scrambled form (a hash). If you sign in with Google instead, the account ID Google gives us.
- When you signed in, and a cookie that keeps you signed in.
- The meetings you send Kitty to, as described above, and what Kitty's work in them cost.
- Who you send each meeting's summary to, and whether each email went.
- Invitations you send or forward to Kitty's address, as described above.
- Documents you add to your meetings, with the words and a picture of each page. For a Google Slides link, our server downloads the deck from Google.
- Your ratings, comments and problem reports.
- Any logos you upload for Kitty's stage, and the colours and fonts you choose for it.
- That you agreed to the tester terms, and when.
Connecting your Google Calendar
You can connect your Google Calendar to Kittywake. It only reads it, and only the next seven days. Your Calendar page then lists your calls that have a video call link, so you can send Kitty to one with a tap. Before Google asks you to agree, Kittywake shows you what it will read and why.
- Kittywake reads the list of calendars you see in Google Calendar, and the events on them for the next seven days. For each event it reads the title, times, video call link and guest list, with names, email addresses and replies. It also looks at the event's location and description to find its video call link.
- It can't change anything in your calendar, and it never reads further than seven days ahead.
- Nothing from your calendar is kept until you send Kitty to a meeting. Then that meeting's title, time, link and guest list are kept with it. The guests are added to the list of people its summary can be emailed to. For guests who are in the notes, Kitty's video tile can show which organisation they're from (see "Who sees it"). If the meeting's description uses the word "agenda", or has a list in it, Kittywake also sends it to Claude, Anthropic's AI. Claude picks out the agenda's items, and only those are kept, as the meeting's agenda. To keep your Calendar page quick, what Google sends is held for one minute, then thrown away.
- We keep the email address of the Google account you connect, and Kittywake's access to its calendar, which is encrypted. The encryption key is kept apart from our database.
- Your calendar is used only to show you your calls, book Kitty, give a meeting its agenda and show which organisations the people in the notes are from. We don't sell it, use it for advertising or use it to train AI. None of it goes to Claude, apart from the description of a meeting you send Kitty to, when it holds an agenda, as above. Anthropic doesn't use it to train its AI. Nobody at Startling reads it, unless you ask us to for support or the law requires it.
- Kittywake keeps to Google's rules on what apps may do with data they read from Google. Its use of information it receives from Google follows Google's API Services User Data Policy, including its Limited Use requirements.
- You can disconnect a calendar on your Calendar page at any time. Kittywake deletes its access and asks Google to remove it too. You can also remove Kittywake's access in your Google account's settings, under third-party apps.
Why, and on what legal basis
To give you Kittywake under the tester terms (the legal basis is our contract with you), and to support you, keep the service secure and improve it (legitimate interests). Kittywake is for adults: testers must be 18 or over.
How long it's kept
Your account is kept while you're a tester. When the beta ends we will delete tester accounts, except for anyone who chooses to carry on. You can ask us to delete your account at any time, and everything in it goes with it. You can delete a logo yourself whenever you like. Kittywake's access to a connected calendar is kept until you disconnect it or your account is deleted. If Google stops accepting that access, for example because you removed it in your Google account, we delete it 30 days later.
If you pay for Kittywake
If you buy a paid plan, you pay through Stripe, a payments company. Everything under "If you're testing Kittywake" applies to you too, and our terms of sale explain how paying works.
What we collect
- Your plan, when it started, when it renews, and whether you've cancelled it.
- The credits your account gets and uses: what each meeting used and what for (such as Kitty's time or the notes), and each top-up. These are numbers only, never anything said or made in a meeting.
- Whether automatic top-ups are on, and the amount you chose.
- Stripe's references for you, your plan and each payment, and when a payment fails, the reason Stripe gives, such as "Your card was declined."
- The country of your billing address, if it's outside the UK. Paid plans are only for the UK for now. If you pay with an address elsewhere, Kittywake alerts us, and we may refund you.
We give Stripe your name and email address so that it can set you up as a customer. We never see your card details. You type them into Stripe's own page, and Stripe keeps them to take your renewals and any top-ups you switch on.
When you buy a plan, we email you a confirmation of what you bought, its price, how to cancel and the whole terms of sale. The law says we must, so it goes even if you've stopped Kittywake's summary emails. Resend sends it, as it sends the summary emails, and we keep a copy of it with your account.
What Stripe does
On its payment page Stripe collects your card details, the name on the card and your billing address. If you're buying for a business, you can also give its VAT number. Your address and any VAT number go on your invoices. Stripe takes the payments for us. Stripe also uses payment details for its own purposes, such as checking for fraud and meeting its legal duties. For those it is a controller in its own right: it decides itself how to use them, under its privacy policy. Its fraud checks can decide automatically that a payment shouldn't go through.
Why, and on what legal basis
To take your payments and give you the plan and credits you paid for, which rests on our contract with you. We also keep records of payments, and email you the confirmation when you buy, because UK law requires it (legal obligation).
How long it's kept
Your plan, your credits (including each meeting's) and the copy of your confirmation email are kept while your account is open, and deleted with it. Resend keeps its own copy of the email for 30 days. If you close your account, your plan is cancelled at Stripe straight away and Stripe deletes your saved card. UK law requires records of payments (who paid, for what, how much and when) to be kept for six years after the end of the financial year they belong to, so they are kept in Stripe and in our accounts for that long. Stripe keeps its own records for as long as its privacy policy says, generally five years or more.
Who sees it
- You.
- Startling: we see each account's plan, credits and top-ups on Kittywake's admin pages, and the payments in Stripe's dashboard, to answer questions and check payments.
- Stripe, as above.
If you're on the waitlist, or we invite you
We keep the name, email address, company, meeting apps and use you gave us, so we can invite you to try Kittywake and ask how you got on. When you sign up, we email you once to say you're on the list. That email says nothing you typed in apart from your address, because someone else could have typed in yours. The legal basis is legitimate interests: you asked us to. We keep it until you ask us to remove it, or until the beta ends.
We invite people who asked us to, on the waitlist or directly. Your invitation comes by email from "Name via Kittywake" at outcomes@kittywake.uk, with a link to join. Replies go to whoever invited you. We keep your name and email address with the invitation, and whether the email arrived, until you ask us to remove them or the beta ends. The legal basis is legitimate interests: you asked to be invited.
Every email from Kittywake has a link to stop Kittywake's emails, and it works at once.
Companies that handle data for us
- Railway (Railway Corporation, USA) hosts Kittywake's server, database and document reader, in Amsterdam, the Netherlands. Railway is certified under the UK-US data bridge (the UK Extension to the EU-US Data Privacy Framework), which UK regulations approve for transfers.
- Recall.ai (Hyperdoc Inc., USA) joins meetings for Kitty, in its EU region in Frankfurt, Germany, and sends each person's sound to Kittywake's server, which sends Deepgram only the sound of people who have agreed to the notes. Recall keeps no recording of the meeting: it handles the sound in memory and stores none of it (its technical logs are kept for 7 days, and the meeting link for 14). Recall.ai isn't certified under the data bridge, so transfers rely on the UK Addendum to the EU standard contractual clauses in its data processing agreement, and on our own transfer risk assessment.
- Deepgram (Deepgram, Inc., USA) turns what people say into text, on its servers in the EU: what people who have agreed to the notes say, and the answer of someone Kitty has just asked. Where Kitty's voice is on, it also turns the words of Kitty's answers into speech, on its servers in the EU too. We have opted out of its programme that uses customers' data to improve its AI, so it keeps what it is sent only while it turns it into text or speech, and doesn't send it outside the EU. Deepgram is a US company and isn't certified under the data bridge, so transfers rely on the UK Addendum to the EU standard contractual clauses in its data processing agreement, and on our own transfer risk assessment.
- Anthropic (Anthropic, PBC, USA) provides Claude, the AI that writes Kitty's notes, answers, drawings and summaries, keeps track of a meeting's agenda, and reads documents added to meetings. It also reads the description of an invitation or a calendar event that seems to hold an agenda, to pick out the agenda's items. It may process data in the USA and other countries, and stores it in the USA. It deletes what we send within 30 days, unless its systems flag it for a check against its usage policy, in which case it can keep it for up to 2 years. It doesn't use it to train its AI. For look-ups, Anthropic sends the question to its web search providers in the USA. Anthropic isn't certified under the data bridge, so transfers rely on the UK Addendum to the EU standard contractual clauses in its data processing agreement, and on our own transfer risk assessment.
- Resend (Plus Five Five, Inc., USA) sends Kittywake's emails (the summaries, invitations to join Kittywake, the waitlist email, and the confirmation when someone buys a plan), from Amazon's servers in Ireland. It receives invitations sent to Kitty's address there too. Its own systems are in the USA, and it keeps a copy of each email for 30 days. Resend is certified under the UK-US data bridge.
- Google (Google LLC, USA) keeps the slides made from Kitty's drawings, and copies of the slides Kitty made, in Kittywake's Google Drive, and handles email for kittywake.uk, both through Google Workspace. Invitations sent to Kitty reach Google first, and Google passes them on to Resend. It may store and process both in any country where it or its suppliers have data centres. It also handles sign-in, if you sign in with Google, and Kittywake reads your calendar from Google if you connect it (see "Connecting your Google Calendar"). On the public pages, for visitors who press Accept, Google also provides Google Analytics, which counts visits (see "Counting visits with Google Analytics"). Google is certified under the UK-US data bridge.
- Stripe (Stripe Payments Europe, Limited, in Ireland, and its US parent, Stripe, LLC) takes payments for paid plans. For its own purposes, such as checking for fraud, it is a controller in its own right (see "If you pay for Kittywake"). Stripe, LLC is certified under the UK-US data bridge.
To get a copy of the safeguards we rely on, email us.
Cookies
Kittywake uses the cookies it needs to keep you signed in, plus a short-lived one while you sign in with Google or connect a Google calendar. There are no advertising cookies. When you pay, or manage your card and invoices, you're on Stripe's own pages, which use Stripe's own cookies. Opening slides in Google Slides takes you to Google's own pages, which use Google's own cookies.
Counting visits with Google Analytics
On the public pages (the homepage, the roadmap, the card of things to say, this notice and the terms), Kittywake asks whether it may count your visit with Google Analytics. Nothing goes to Google unless you press Accept, and the legal basis is your consent.
If you accept, Google Analytics sets two cookies, "_ga" and one whose name starts "_ga_", which last up to a year. It tells Google which of those pages you open and how long each one stays open, the page you came from, and your browser and device. Google also works out roughly where you are, to the town or region, from your IP address, and doesn't keep the address. We use the figures only to see which pages people read, so we can improve them. Google handles them for us, and our Google Analytics account doesn't let Google use them for its own products. Google keeps the details of each visit for 2 months. The totals made from them stay in our Google Analytics account.
You can change your answer at any time with "Cookie choice" at the foot of those pages. If you said yes before, saying no removes the Google Analytics cookies straight away. The pages you see once signed in, and Kitty's video tile, never use Google Analytics.
Server logs
Our server records each request it receives, including the IP address it came from, to keep Kittywake running and secure. The logs don't contain what was said in meetings. Railway keeps them for 30 days.
Your rights
You can ask us:
- for a copy of the personal data we hold about you;
- to correct it;
- to delete it;
- to limit what we do with it;
- for your tester account data in a form you can take elsewhere.
You can object to our use of your data where it rests on legitimate interests. In a meeting, the quickest ways are to say no when Kitty asks, to say "Kitty, don't note me", or to say "Kitty, leave". After a meeting, email us and we will delete what we hold about you. To stop Kittywake's emails, use the link at the bottom of any of them.
Email dan.akers@startlingideas.com. We will reply within a month. We may need to check who you are first.
Complaints
If you're unhappy with how we have handled your data, you can complain to us: email dan.akers@startlingideas.com or write to the address at the top. We will acknowledge your complaint within 30 days, look into it, keep you updated, and tell you the outcome.
You can also complain to the Information Commissioner's Office (ICO) at any time, at ico.org.uk/make-a-complaint or on 0303 123 1113.
Decisions made by computer
Kitty uses AI to write notes and summaries, but it doesn't make decisions about people that have legal or similarly significant effects on them. When you pay, Stripe's fraud checks can decide automatically that a payment shouldn't go through. Stripe runs them as a controller in its own right, and its privacy policy explains them.
Changes to this notice
We will update this notice when Kittywake changes, for example before Kitty does anything new with your data, and change the date at the top.