Cookie Policy

Kavi Media, Inc.
Version 1.0 — Effective 20 October 2026
Published at kavi.audio/legal/cookie-policy

In short (not part of the policy): Kavi's website uses a session cookie it needs to work, a cookie that remembers your cookie choice, and possibly security cookies from its network provider. The only optional cookie is Rewardful's referral cookie, which remembers for 60 days that an affiliate sent you, so they can be credited and you can get the referred-subscriber discount. Outside the US (including India) it is off until you allow it; in the US it is on unless you turn it off or your browser sends Global Privacy Control. Kavi uses no analytics or advertising cookies. The app uses no cookies; it stores sign-in tokens and app data on your device.

1. About this Policy

1.1 This Cookie Policy explains the cookies and similar technologies that Kavi Media, Inc. ("Kavi", "we", "us") uses on its website kavi.audio and in the Kavi mobile app, and how you can control them. Kavi Media, Inc. is a Delaware corporation with its principal place of business in Alpharetta, Georgia, USA (mailing address: 169 Madison Ave STE 30314, New York, NY 10016, USA).

1.2 It should be read with Kavi's Privacy Policy (kavi.audio/legal/privacy-policy), which explains how Kavi handles personal data, including the data these technologies collect.

2. What cookies and similar technologies are

2.1 A cookie is a small text file a website stores in your browser so it can recognize the browser later. A cookie is first-party when it is stored for the website you are visiting (here, kavi.audio), even if another company's script sets it, and third-party when it is stored for another website.

2.2 Similar technologies include scripts from other companies that a page loads, and storage on your phone that an app uses. This Policy covers both.

3. The kinds of cookies Kavi uses

Category What it means Can you refuse it?
Strictly necessary Needed for the website to work securely: keeping you signed in during sign-up and checkout, protecting forms, remembering your cookie choice, and network security No. The website cannot work properly without them
Affiliate referral Remembers that an affiliate sent you, so Kavi can credit the affiliate and give you the referred-subscriber discount Yes (section 6)
Analytics — Kavi uses none
Advertising — Kavi uses none

4. Cookies on kavi.audio

Name Provider Purpose How long it lasts Category
PHPSESSID Kavi (first-party) Holds a random session number that links your browser to a short-lived record on Kavi's server. That record holds a security token for forms, your progress through sign-up (name, email address, date of birth, gender, time zone and email choices), your sign-in for checkout, and your progress through the waitlist and affiliate interest forms. Marked secure, HTTP-only and same-site Until you close your browser. The record on Kavi's server is deleted automatically after a period of inactivity Strictly necessary
kavi_cookie_choice Kavi (first-party) Remembers whether you allowed or refused the referral cookie, and when, so Kavi does not ask again on every page 12 months Strictly necessary
Referral cookie set by Rewardful's script Rewardful (first-party cookie set on kavi.audio by Rewardful's script from r.wdfl.co) Records that you arrived through an affiliate's link or used an affiliate's code, with a referral ID, so that if you start a paid subscription within the window, the affiliate is credited and you get the referred-subscriber discount (5% off for 12 months) 60 days from your visit through the affiliate's link (the cookie window in Kavi's Rewardful settings) Affiliate referral (optional)
__cf_bm Cloudflare, Kavi's network provider (first-party) Helps tell people from automated bots, if Cloudflare's bot protection is active for the request (it may not be set at all) 30 minutes of inactivity Strictly necessary
cf_clearance Cloudflare (first-party) Set only if Cloudflare shows you a security challenge and you pass it, so you are not challenged again The challenge period set in Kavi's Cloudflare settings Strictly necessary

Cloudflare may set other strictly necessary security cookies if Kavi turns on the Cloudflare features that use them; Cloudflare lists them at developers.cloudflare.com.

5. Other technologies on kavi.audio

5.1 Rewardful's script. Where Kavi loads it (section 6), Rewardful's script (from r.wdfl.co and api.getrewardful.com) runs in your browser. Rewardful receives your IP address, browser information and the page you are on, and, if you arrived through an affiliate's link or typed a referral code, the affiliate's token. On Kavi's plan page, the script puts your referral ID into the checkout form, and Kavi passes it to Stripe when you start a subscription. Kavi does not keep the referral ID itself. Kavi does not load Rewardful's script on its privacy and terms pages or on the affiliate interest form.

5.2 Fonts and icons. Some Kavi pages load fonts from Google Fonts and icons from cdnjs (run by Cloudflare). These services receive your IP address and browser information when your browser fetches the files. Kavi's pages do not ask them to set cookies.

5.3 Country check. The website asks Kavi's server which country you are in, to show the right page and prices. Your browser keeps the answer in its cache for up to 1 hour. Kavi does not store it.

5.4 No other browser storage. Kavi's own website code does not use your browser's local storage or session storage.

5.5 Pages run by others. When you check out, you are taken to Stripe's checkout page, where Stripe may set its own cookies, for example to prevent fraud, under Stripe's own cookie policy. Kavi's investor page (kavi.audio/invest/pre-seed/), which is not part of the listener service, embeds a presentation from Canva, which may set its own cookies under Canva's cookie policy.

6. Your choices on the website

6.1 India and everywhere outside the United States. If you are in India or any other country outside the United States, or Kavi cannot tell where you are, Kavi does not load Rewardful's script or set the referral cookie unless you choose "Allow referral cookie" in the cookie notice. Kavi shows the notice only when you arrive through an affiliate's link or invite page. "Essential only" has the same size and prominence as "Allow". If you type a referral code at checkout yourself, Kavi loads Rewardful's script then, to apply the code you asked for.

6.2 United States. The referral cookie is on by default. You can turn it off at any time.

6.3 Changing your choice. Use the "Cookie settings" link at the foot of every page of kavi.audio. Turning the referral cookie off stops Kavi loading Rewardful's script and deletes the referral cookie from kavi.audio where your browser allows. A referral that was already credited to an affiliate is not undone. Without the referral cookie, a referral can still be credited if you type the affiliate's code at checkout.

6.4 Global Privacy Control. If your browser sends a Global Privacy Control signal, Kavi treats it as turning the referral cookie off, wherever you are, unless you type a referral code at checkout yourself.

6.5 Do Not Track. Kavi does not track you across other websites, so it does not change how the website works when your browser sends a "Do Not Track" signal. See section 20 of the Privacy Policy.

6.6 Your browser. You can also block or delete cookies in your browser settings. If you block strictly necessary cookies, sign-up, checkout and Kavi's forms will not work.

7. The Kavi app

7.1 The app does not use cookies, and contains no advertising, analytics, crash-reporting or push-notification tools from other companies. It stores the following on your device.

Where on your device Item Purpose How long it stays Category
Secure storage (iOS Keychain or Android Keystore) access_token, refresh_token, token_expires_at, user_id, profile_id Keeps you signed in and remembers the active profile Until you sign out or delete your account Strictly necessary
Secure storage username Your email address in lower case, used to sign you in Until you sign out or delete your account Strictly necessary
Secure storage guest_device_uuid A random device number. The current app does not create, read or send it If an earlier version of the app stored one, until you uninstall the app Not used
App storage pending_qualified_listens_v1 Plays made offline (for example, of downloads), with the profile number, waiting to be sent to Kavi so the creator is paid for them; at most 2,000 are kept Until sent to Kavi when you are back online Strictly necessary
App storage app_downloads_index_v2 (and the older app_downloads_index_v1), with the downloaded audio and artwork files Lets you play downloads offline Until you delete the download, clear the app's data or uninstall the app Functional
App storage app_queue Your play queue Until it changes, or you clear the app's data or uninstall the app Functional
App storage last_played_content The last title you played, to pick up where you left off Until it changes, or you clear the app's data or uninstall the app Functional
App storage audio_quality_prefs_v1 Your streaming and download quality settings Until you change them, or clear the app's data or uninstall the app Functional
App storage app_open_count Counts how many times you have opened the app, so the iOS app shows its occasional Premium message only every so often. It never leaves your device Until you clear the app's data or uninstall the app Functional

7.2 Signing out and deleting your account removes the secure-storage items. They do not remove downloads, your queue, your last-played title or plays waiting to be sent. Delete downloads in the app, or uninstall the app or clear its data, to remove them.

7.3 App updates. When the app checks for an update, it contacts Expo, Kavi's app-update service, which receives your IP address and app and device version information.

8. Changes to this Policy

8.1 Kavi updates this Policy when it changes the cookies or storage it uses, and posts the new version here with a new version number and effective date. If Kavi adds a new category of optional cookie (for example, analytics), it will ask for your choice again before setting it where the law or this Policy requires.

9. Contact

Versions

Each version is kept unchanged at its own address. The fingerprints are listed at kavi.audio/legal/policies.json.