Privacy Policy
Erin Kyna | erinkyna.com | portal.erinkyna.com
Last updated: May 2026
Who this is
This Privacy Policy applies to all services offered by Erin Kyna, including this website and the Intimate Intelligence client portal at portal.erinkyna.com.
I take privacy seriously — especially here. The nature of this work means the information you share with me is among the most personal and sensitive information a person can share. It is treated accordingly. I collect only what is necessary. I share it with no one.
What information I collect
On this website:
Your name and email address if you submit a contact or booking enquiry
Anonymised analytics data collected by Squarespace (pages visited, device type — this does not identify you personally)
In the client portal:
Your name and email address, used to create and identify your account
Your intake questionnaire responses, which may include sensitive personal information about your body, sexuality, relationships, history, and any trauma you choose to share
Session notes — written summaries of our sessions together, prepared by Erin
Your responses to tools and inventories completed inside the portal
Zoom recordings and transcripts of our video sessions, processed for the purpose of generating session notes
Usage data — which tools and resources you have accessed and when
Sensitive information
The information shared in the context of this work — including information about your sexuality, sexual health, relationships, trauma history, and body — is classified as sensitive information under the Australian Privacy Act 1988. It is handled with the highest standard of care.
This information is accessible only to Erin Kyna. It is never shared with third parties for any purpose, never used for marketing or advertising, and is protected by technical security measures.
How I use your information
Your information is used solely to deliver the services you have enrolled in, maintain your client records and session history, prepare and deliver session notes and assigned practices, communicate with you about your sessions and progress, and send transactional emails such as your welcome email and magic login links.
Your information is never used for any other purpose. It is never sold, rented, shared, or disclosed to any third party for commercial purposes.
AI processing
Session recordings from Zoom are transcribed and the transcript is processed by an AI language model (Claude, provided by Anthropic, PBC) for the purpose of generating draft session notes. This draft is reviewed and edited by Erin before it is published to you.
What this means for you: the content of your session may be transmitted to Anthropic's API for processing. Anthropic's API is used under a commercial agreement that prohibits the use of submitted content to train AI models. Anthropic's privacy policy is available at anthropic.com/privacy.
You may request that AI-assisted note generation not be used for your sessions. Contact Erin directly to discuss this.
Third-party services
The portal relies on the following third-party services to operate. Each receives only the data necessary for its function:
Supabase (hosted in Singapore) — database and authentication. Stores all portal data, encrypted.
Vercel — website hosting. Server logs only, no personal data stored.
Zoom — video sessions. Receives recording, audio, and transcript of sessions.
Anthropic — AI note generation. Receives session transcripts.
Resend — transactional email. Receives your email address and email content.
Squarespace — this website. Receives website usage data.
None of these services receive your information for their own marketing, advertising, or product improvement without your separate consent.
Data storage and security
Your data is stored in an encrypted database hosted by Supabase in Singapore. Security measures include:
Row Level Security — every piece of data is restricted at the database level so that only you can access your data, and no other client can access yours
Encrypted connections — all data is transmitted over HTTPS
Authentication — access to the portal requires a verified email address and a time-limited magic link. There are no passwords to be stolen.
Admin access — only Erin can access the full admin panel, protected by a separate authentication check
Sensitive session data (transcripts and private notes) is stored in a separate, admin-only partition of the database that is inaccessible to clients even via direct database queries
Data retention
Client portal records (intake responses, session notes, assessments) — retained for the duration of your engagement and for 7 years after our work concludes, in compliance with Australian professional practice standards.
Zoom recordings — retained in Zoom's cloud storage for 30 days, then deleted from Zoom. Transcripts are stored in the portal as part of your session record.
Email correspondence — retained for 7 years.
Website enquiry data — retained for 12 months or until your enquiry is resolved.
Your rights
Under the Australian Privacy Act 1988 and the Australian Privacy Principles, you have the right to:
Access — request a copy of the personal information held about you
Correction — request correction of inaccurate information
Deletion — request deletion of your data (note that some data may need to be retained for legal or professional compliance reasons)
Opt out of AI processing — request that your session transcripts not be processed by AI
Withdraw consent — withdraw consent for any processing based on consent
To exercise any of these rights, contact Erin at erin@erinkyna.com.
Cookies
The portal uses cookies only for authentication — to keep you logged in. No tracking or advertising cookies are used. The website may use cookies via Squarespace for anonymised analytics.
Changes to this policy
If this policy changes in a way that affects how your data is handled, you will be notified by email before the change takes effect.
Contact
Erin Kyna
erin@erinkyna.com
erinkyna.com
