Kin is a family organiser: tasks, a shared calendar, shopping lists, routines and reminders for the people you live with. To do that, Kin holds information about your family, sometimes including your children. This policy explains what we collect, why, who else handles it, how long we keep it, and what you can do about it. It also covers the cookies on our website.
1. Who we are
Kin is run by FJComputers SL ("we", "us"). We are the controller of the personal data described here.
For privacy questions, requests and support, write to hello@fjcomputers.es.
2. The short version
- We use your family's information to run Kin for your family. We don't sell it, rent it, or use it for advertising.
- Kin has no ads and no advertising trackers.
- Places are sensitive, so we encrypt them on our servers: saved places, where an event happens, where you start from, and dates of birth.
- AI features are off until someone in your circle turns them on. Section 6 explains exactly what they send, including about children.
- You can download everything we hold about you, and delete your account, from inside the app.
3. The people in a Kin circle
A circle is a family's shared space. Its owner created it and manages it. Adults join with their own account, by invitation. A child can be added by a parent in two ways:
- A profile the parent manages. The child has no login of their own; a parent enters and manages the child's information.
- A child login (a QR code or a PIN) that a parent sets up, so the child can use Kin on their own device, with the permissions the parent gives them.
Whoever adds a child must be that child's parent or legal guardian, or act with their permission.
4. What we collect
4.1 What you give us
- Account: name, email address, and a password (stored only as a secure hash), or your Apple or Google sign-in.
- Profile: display name, date of birth, a photo if you add one, the circle's country and time zone, your language and your date and time preferences.
- Family content: tasks and subtasks, notes and descriptions, the calendar (events, their place and time, where you start from, reminders), shopping lists, routines, photos you attach, saved places (for example "home" or "school"), and requests and approvals between parents and children.
- Invitations: the email address of someone you invite, and the role you give them.
- Waiting list: if you join the waiting list on our website, your email address, which you confirm by a link we send you.
- Messages to us: what you write when you contact us.
You don't need to give us health information. If you write some into a task (for example a medicine reminder), it's treated like the rest of your family's content: visible to the people you share it with, and nobody else.
4.2 What Kin records as you use it
- Activity inside the circle: who created, changed or completed what, and when, so the family can see who did what.
- Timers: how long a task took, if you use the timer.
- Usage events: which features are used (for example "a routine was suggested" or "a task was completed"), stored per circle under a pseudonym rather than your name. We use them to understand how Kin is used and to improve it.
- Device information needed to run the app: a notification token so we can send reminders, the app version, the device type, and a session token that keeps you signed in.
- Error reports: when the app or our server fails, a technical report of what failed and on which version. We set these reports up not to include names, email addresses or the content of your tasks and events. A report can still contain a fragment of the data being handled when the error happened.
4.3 What we get from others
- Calendars you connect (Google, Microsoft Outlook, Apple, or a calendar feed link): the events from the calendars you choose, and the access details that let Kin read them. You can disconnect at any time.
- Apple or Google sign-in: your name and email, as they share them with us.
- Amazon Alexa, if you link the Kin skill: the requests you make through it (adding to a shopping list, or asking for today's tasks).
4.4 What we don't collect
We don't collect your contacts, your location in the background, or advertising identifiers. Departure reminders are worked out on your phone: your phone's position is never sent to our servers. Places you type in (a saved place, an event's place) are sent to us, and are encrypted there.
5. Why we use it, and on what legal basis
- Running Kin for your family: accounts, circles, tasks, the calendar, reminders, sync between devices: Contract: we need it to provide the service you asked for
- Children's profiles and child logins: The parent's consent, and our contract with the parent
- Connecting your calendars, or the Alexa skill: Your consent, which you withdraw by disconnecting
- AI features: Consent, given in the app when AI is turned on for the circle
- The waiting list: Your consent, which you withdraw by unsubscribing
- Usage events, keeping Kin secure, preventing abuse, fixing errors: Our legitimate interest in a working, safe service that we can improve
- Emails you need (invitations, confirming your email, password resets): Contract
- Keeping records the law requires: Legal obligation
We don't make decisions about you that have legal or similarly significant effects based only on automated processing.
6. AI features
Some Kin features use an AI model: suggesting a starter routine for your family, estimating how long a task takes, turning a sentence you type into an event or a schedule, and suggesting what to do today or what to do together.
- They're off until a member of the circle turns them on for that circle, after reading what they do. They can be turned off again at any time.
- The AI provider is Anthropic (the Claude models).
- What is sent is the information the feature works with: for example the titles of the circle's tasks, or the sentence you typed. Some features replace names with neutral labels. When you type a sentence for Kin to turn into an event or a schedule, the sentence is sent as you typed it, including any names in it.
- This can include information about children in the circle, for example their tasks, and a child with a login can use these features too.
- We don't send other members' private tasks or events.
- Under Anthropic's commercial terms, it doesn't use this information to train its models, and it deletes it within 30 days.
7. Children's privacy
Kin is a family app. It isn't aimed at children on their own, but children are part of families, so Kin lets parents include them. This section is our notice to parents.
- What we collect about a child: the child's name (or a nickname), date of birth, a photo if a parent adds one, the tasks and events they're part of, what they tick off, and, if they have a child login, what they create in the app (for example a request for a new task, which a parent approves).
- Why: to run Kin for the family, so the child sees their tasks and reminders and the parents can organise the family.
- Who sees it: the family's circle. A child's information isn't public, and a child can't message anyone outside the family through Kin.
- Who else handles it: the providers in section 8 that Kin needs to work. Notifications and emails can name a child (for example "Leo finished his homework"). If AI is on for the circle, section 6 applies. Never for advertising.
- A child gets a login only when a parent sets it up.
- A parent's rights: a parent can see their child's information in the app, download it, correct it, stop further collection, and delete the child's profile at any time, from the child's page in Family, or by writing to hello@fjcomputers.es.
If you believe a child's information reached us without a parent's permission, write to hello@fjcomputers.es and we'll delete it.
8. Who else handles your information
These companies help us run Kin. Each gets only what its job needs.
- Hetzner Online GmbH (Nuremberg, Germany): Runs our servers and database. What it receives: Everything stored in Kin, on our servers
- Anthropic (US): AI features, if they're on for your circle. What it receives: What the feature works with (section 6)
- Sentry (servers in the EU): Error reports. What it receives: Technical error details (section 4.2)
- Maileroo: Sends Kin's emails. What it receives: The recipient's email address and the email
- Google Firebase Cloud Messaging: Delivers push notifications on Android and iPhone. What it receives: The device's notification token and the notification's text
- Apple: Sign in with Apple, delivering notifications to iPhones, Apple Calendar if you connect it. What it receives: What each service needs
- Google: Sign in with Google, Google Calendar if you connect it, and finding the address of a place you type into an event. What it receives: What each service needs; for a place, the words you typed
- Microsoft: Outlook calendar, if you connect it. What it receives: The access details and the calendars you choose
- Amazon: The Alexa skill, if you link it. What it receives: Your spoken request, and Kin's answer (for example today's tasks)
We may also disclose information if the law requires it, to protect someone's safety, or as part of a sale or reorganisation of our business, in which case this policy continues to apply and we'll tell you.
9. International transfers
Our servers are in Germany, so what Kin stores stays in the EU. Some providers above are in the United States. When your information goes outside the European Economic Area, we rely on the EU–US Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses.
10. How long we keep it
- Your account and your family's content: As long as your account and circle exist
- After you delete your account, or a parent deletes a child's profile: 30 days, during which only we can restore it, at your request; then deleted for good
- After a circle is deleted: 30 days, read-only for its members; then deleted for good
- Usage events: As long as the circle exists; deleted with it
- The "who did what" history: Up to 365 days
- Notifications in the app: Read: 90 days. Unread: 180 days
- A data download you requested: 7 days
- Temporary copies that protect against saving something twice: 48 hours
- Error reports: Up to 90 days
- The waiting list: Until you unsubscribe, or ask us to delete your address
11. How we protect it
- Everything travels encrypted (HTTPS).
- On our servers, the most sensitive fields are encrypted with a key kept apart from the database: saved places, event places and starting points, and dates of birth.
- Passwords are stored only as secure hashes. Invitation and login codes aren't stored in readable form.
- Private tasks and private events are visible only to the person who made them, including to us in our admin tools.
- On your phone, signing out removes your family's information from the device.
If a breach affects your information, we'll tell the authorities and, where the law requires it, you, without undue delay.
12. Your rights
Wherever you live, you can:
- see what we hold about you, and download it (Settings → Your data → Download my data);
- correct it, in the app or by asking us;
- delete your account (Settings → Your data → Delete my account);
- withdraw consent you gave, for example for AI features, a connected calendar or the waiting list, at any time; this doesn't affect what was done before;
- object to, or ask us to restrict, some uses;
- get your data in a portable format (the download is one).
A parent can do the same for their child (section 7). You can also complain to a data protection authority; in Spain that's the Agencia Española de Protección de Datos (aepd.es).
We answer requests within one month. To protect your family, we may ask you to confirm it's you.
13. Cookies
The Kin app doesn't use cookies. Our website and our admin tool use only the two cookies they need to work. Neither tracks you or is used for advertising or statistics, so we don't ask for consent for them.
- kin-session: Keeps your visit together, for example when you join the waiting list. How long: 2 hours
- XSRF-TOKEN: Protects forms against requests forged by other sites. How long: 2 hours
Our website doesn't use analytics, advertising or social media cookies, and it loads no content from other companies. You can delete cookies in your browser's settings at any time; the website still works, but a form may ask you to try again.
14. Changes to this policy
When we change this policy, the new version shows at this address, with the date it applies from, and the app asks you to read it the next time you open it. Earlier versions stay available at this page's address followed by their version number.
15. Contact
FJComputers SL · hello@fjcomputers.es