Family privacy, explained clearly

1. Scope and responsibility

This policy applies to the Kinalumi mobile applications, public website, launch list and related support services. The adult who creates a household controls invitations and parent-managed child profiles. Kinalumi operates the account, security, synchronisation, subscription and support systems used to provide the service.

2. Information Kinalumi processes

• Adult account and security information: email address, authentication provider, account identifiers, active sessions, registered devices and security events.
• Household and profile information: names or nicknames, avatars or photos, roles, family-member colours, preferences and optional dates of birth.
• Family organiser content: events, tasks, groceries, recipes, meal plans, chores, points ledger entries, rewards, routines, announcements, comments and notification preferences.
• Private files and photos: optional task attachments, chore examples and proof, reward images, school documents, calendar attachments, artwork and Digital Fridge Door media.
• Connected services: calendar provider, connection identifiers, authorisation credentials and imported event data when an adult connects Google Calendar or Microsoft Outlook/Microsoft 365.
• Technical and commercial information: notification tokens, app version, device platform, subscription product and entitlement state, support messages, service diagnostics and security logs.
• Public website information: launch-list email and consent record, basic request information and short-lived hashed anti-abuse identifiers used to protect the form.

Kinalumi does not collect payment-card details. Apple, Google and their payment partners process store payments and return subscription entitlement information.

3. Sensitive family preferences

Optional Daily Reflection selections may reveal religious or philosophical preferences. Optional dietary and allergen fields may reveal health-related needs. These features are family-controlled, are not required for the core organiser and are not used for advertising. Kinalumi treats them as sensitive information where applicable law requires this.

4. School calendar import and AI-assisted extraction

An adult may upload a school PDF, newsletter image or schedule screenshot. Kinalumi can use an extraction service to suggest calendar entries, but the adult reviews the suggestions before saving them. The source document, extracted text and suggested events are processed only for that workflow and are protected as household data. Kinalumi will identify any external AI or document-processing provider used in the production service before the feature becomes generally available.

5. Why and on what basis information is used

Kinalumi uses information to provide the requested service, authenticate adults, enforce household roles, synchronise family features, process files, deliver notifications, verify subscriptions, prevent abuse, diagnose failures and respond to support. Depending on your location, the legal basis may be performance of a contract, legitimate interests in operating and securing the service, compliance with law, or consent for optional features such as marketing, notifications, analytics and sensitive preferences. Consent can be withdrawn without affecting earlier lawful processing.

6. Child profiles

Child profiles are created and managed by authorised adults. Children do not need an email address and may use a parent-managed device or PIN-protected Kid Mode. Adults control profile access, event visibility, notifications, optional photos, exports and deletion. Child information is not used for personalised advertising. More detail is available in the Children’s Privacy notice.

7. Service providers and international processing

Kinalumi uses specialist providers for cloud hosting and authentication, private file storage, notifications, app distribution, subscription verification, email delivery, crash diagnostics and support. Optional calendar connections involve Google or Microsoft. Providers process only the information needed for their role and may store or process information outside your country, including in Australia, the United States and other locations where they or their subprocessors operate. Kinalumi uses contractual, technical and organisational safeguards where required.

8. Analytics, diagnostics and advertising

Optional product analytics remain off until an adult enables them. Approved events measure feature use without attaching family schedules, task text, comments, photos, sacred-text preferences or child-profile content. Crash diagnostics can include device and failure context needed to resolve errors. Kinalumi does not sell personal information and does not build advertising profiles from household or child data.

9. Retention and deletion

Household content remains while the household is active or until an authorised adult removes it. School source files, signed media links and export archives use shorter operational lifetimes appropriate to their purpose. Launch-list data remains while consent is active; a limited suppression record may remain after unsubscribe so the choice is respected. Security, billing, audit and support records are kept only as long as reasonably needed for fraud prevention, legal obligations or disputes. Deleted live data can remain temporarily in encrypted backups until those backups age out under provider schedules.

Kinalumi will publish the final production retention schedule before general availability and align automated deletion jobs with that schedule.

10. Security

Data is encrypted in transit. Device secrets use protected storage, allowlisted offline snapshots are encrypted, provider credentials remain server-side and database rules independently verify household membership. Administrative actions are audited and uploads are restricted by file type, size and private storage policies. No connected service is risk-free; see the Security overview or report concerns to security@kinalumi.com.

11. Your choices and rights

Depending on your location, you may have rights to access, correct, export, delete, restrict or object to processing, withdraw consent, or complain to a privacy regulator. In-app Privacy & account controls provide export and deletion. You can also use the public deletion page or contact privacy@kinalumi.com. Kinalumi verifies requests before changing family data.

12. Launch updates

When an adult joins the launch list, Kinalumi records the email address, consent wording version, consent time and source. The email is used only for Kinalumi launch news and occasional product updates. Resend is the planned email delivery and audience provider. Marketing broadcasts include an unsubscribe link and preference handling. Launch-list information is not collected from child profiles and is not sold.

13. Complaints and regulators

Send a privacy complaint to privacy@kinalumi.com with enough information to understand the concern, but do not include passwords, family PINs or unnecessary child information. Kinalumi will acknowledge the complaint and explain the review process. You may also contact the regulator that applies where you live, such as the Office of the Australian Information Commissioner, the UK Information Commissioner’s Office, an EU data-protection authority or the relevant United States privacy regulator.

14. Changes and contact

Material changes will be communicated in the app or by account email before taking effect where required. Questions, rights requests or complaints can be sent to privacy@kinalumi.com. General product questions can be sent to support@kinalumi.com.