Privacy policy

This policy explains what information Kinnomy (“we”, “us”) collects when you use Kinnomy, why we collect it, and the choices you have. The short version is on our privacy promise page: no ads, never sold, never used to train AI, location off by default, and export or delete any time.

• Account details: your name, email address and password. Passwords are stored as one-way hashes, never as plain text.
• Household content: everything you and your household add, such as members and profiles, events, appointments, tasks, chores, lists, meals, the pantry, bills, expenses, budgets, subscriptions, things, documents, photos and videos, house manual pages, pets, wishlists and gift ideas, polls, medicines, vaccines and measurements, allowances, activities and carpools, contacts, notes, messages and Emergency card details. Some of this can be sensitive, such as health records, medical notes or insurance numbers. You choose what to add.
• Messages to us: what you send through the contact form or by email, newsletter signups and checklist downloads.

Photos and videos you upload are stored privately, like documents, and are shown only to people in your household who are allowed to see them. When a photo is uploaded, we make resized copies to save space and remove location data from those copies. The original file is kept exactly as uploaded, including any location data your phone saved in it, when your household owner has turned on Keep original photos, and always for videos and for photos in a format we cannot convert (such as some HEIC photos). If that matters to you, turn off location in your phone’s camera settings. We read the date a photo was taken so it can be sorted by date.

If you make an album link or a guest pass, the people who open it can see what it shares until it expires or you turn it off. We count how many times a guest pass is opened and when it was last opened, so you can see it in the app.

Medicines, vaccines and measurements you add are stored with your household’s data. New health records are visible to the adults in the household by default, and you can change who sees each one. Health records are never shown on a family screen. They are only sent to an AI model provider if the person they belong to turns on “Let the Brain use health records”; that setting is off until they do. The Brain’s built-in analysis, which answers some health questions, runs on your device. Kinnomy is not a medical record system, and we do not share health records with anyone outside your household except the service providers listed below.

If you turn on notifications on a device, your browser gives us a subscription address at its push service (Apple, Google, Mozilla or Microsoft, depending on the browser) and keys to encrypt messages for that device. We store these with a device name you can see and remove in Settings. Each notification is encrypted on our server before it is handed to the push service, so the push service only sees encrypted content and the timing of the message. We keep a short queue of notifications waiting to be sent. Removing a device, or the push service telling us a subscription has ended, deletes it.

With offline mode on (it is on by default in the app), your browser keeps a copy of your household and any changes you made offline in its own storage (IndexedDB) on that device, so the app can open without a connection. This copy stays on your device. It is deleted when you turn offline mode off or sign out. Anyone who can use that browser could see it, so turn offline mode off on a shared computer.

When you add a calendar subscription or import a recipe from a link, our server fetches that address for you, over https only and only from public addresses, and sends no cookies or personal details with the request. The website you point to will see a request from our server, not from you. Imported events are stored with your household’s data; for a recipe we keep what you save and a link to the page, and pictures stay on that website.

A family screen link shows a household board on a tablet or TV. It shows only things shared with the whole household, and never private or Adults only items, money amounts, documents, health records, gifts or notes. We count how often a family screen is opened and when it was last opened. Anyone with the link can see the board until you make a new link or turn it off.

• Location, only if you turn it on. Location sharing is off by default and opt-in per person. When on, it updates only while you have the app open or tap Share now. We keep only your latest point, it expires after 4 hours by default (the household owner can choose 1 to 24 hours), and we keep no location history.
• Technical information: like most websites, our servers receive technical details such as IP address, browser type and the pages requested, and may record them in server logs used for security and troubleshooting.
• Rate limiting: our website forms and signup store a salted, one-way hash of your IP address to limit spam. They do not store the IP address itself.
• Cookies: we use a small number of cookies, mainly to keep you signed in. See the cookie policy.

Card payments are handled by our payment processor. We do not see or store your full card number. We receive limited details, such as the plan, the billing status and the dates of payments.

• To provide the service to you and your household, including reminders and email digests you have not switched off.
• To answer your messages and provide support.
• To process payments for paid plans.
• To keep the service secure, prevent abuse and fix problems.
• To send you occasional updates if you signed up for them. Every email has an unsubscribe link.

• We never sell your information.
• We never use household data for advertising, and we show no ads.
• We never use household data to train AI models.

The built-in parser, the weekly brief, memory search and the Brain’s built-in analysis run within Kinnomy. When the AI features are switched on and you use them, the text needed to answer your request, including the household records the Brain looks up for you (only ones you are allowed to see), and, for document reading, the document you chose, is sent to an AI model provider to produce the answer. That provider processes it on our behalf. When you ask the Brain to research a question, it also runs web searches through a search service; it does this only when you ask. Facts you ask the Brain to remember and your Brain conversations are stored with your household’s data, and you can delete them. Household data is never used to train AI models.

This website and the app have a language switcher. When a page is translated, its text is sent to Google Translate to be translated, and Google handles that text under its own terms and privacy policy. On this website, the page may switch to your browser’s language by itself. In the app, nothing is translated until you pick a language, and then the text on your screen, including your household’s information, is sent to be translated. If you do not want that, keep the app in its original language.

• Your household, according to roles, permissions and each item’s visibility (Household, Adults only or Private). The Emergency card is visible to every member. Gift ideas are never shown to the people they are hidden from, and the person a wish is for never sees who claimed it.
• People you share a link with, such as an album link, a guest pass or a family screen, who can see only what that link shares, until it expires or you turn it off.
• Service providers who help us run Kinnomy, such as hosting, email delivery, payment processing, the push services that deliver notifications (encrypted) and, when switched on, AI model providers. They may use the information only to provide their service to us.
• When the law requires it, or to protect the rights, safety and property of our members, the public or us.
• If the business changes hands, information may transfer to the new owner, who must honor this policy or give notice of changes.

We keep household content while the household exists. When a household is deleted, its records are removed from the live service, and copies in backups are removed as those backups are replaced. Shared locations are kept only until they are replaced or expire. We keep contact messages and newsletter signups until they are no longer needed or you ask us to delete them.

• Access and export: export your household’s data as JSON and CSV at any time.
• Correction: edit your details and content in the app.
• Deletion: the owner can delete a household at any time, and you can ask us to close your account.
• Location: leave it off, or turn it off at any time.
• Email: unsubscribe from updates, and switch off digests.

Depending on where you live, you may have more rights, such as the right to know what we hold about you or to object to certain uses. To use any of these rights, contact us at lewis_dlp@hotmail.com. We will not treat you differently for doing so.

Accounts may be created only by people aged 13 or older, or the minimum age where they live. Adults can add younger children as profiles without a login and are responsible for the information they add about them. If you believe a child under 13 has created an account, contact us and we will delete it.

We protect information with access controls, including permission checks on every document download. Kinnomy is not end-to-end encrypted: information is stored in our database and documents in a private folder on our servers. No system is perfectly secure; see our security page for more, and for how to report a problem.

Kinnomy is operated from the United States, and your information may be stored and processed there.

We will post any changes on this page and update the date at the top. If a change is significant, we will give notice on the site or by email.

Questions about privacy? Write to Kinnomy at lewis_dlp@hotmail.com.