Kin — Privacy Policy

Last updated: 29 September 2026

Kin is a family planner built to be private by design. Kin is local-first: your family’s data stays on your device unless you choose Family Sync or the cloud assistant.

Your account

Kin uses Sign in with Apple to create an account for each adult or teen using the app. We store an opaque Apple account identifier, and only the name or email Apple elects to share with us, to identify that person. We never receive or store an Apple password. We use this information only to sign you in and authorize your access to a household.

Family data and Family Sync

By default, family members, events, chores, meals, lists, money entries, chat, photos, and notes are stored locally on your device. Family Sync is optional and off by default. When enabled, Kin stores a shared household copy in Cloudflare D1 and links each signed-in person to that household. Photos and each device’s Ask chat history are not synced. You can stop sync at any time, delete a shared cloud copy if you are its owner, sign out, or delete your Kin account in Settings.

Device permissions

• Calendars (optional): Kin reads events from calendar accounts already on your iPhone and can add confirmed Kin events to them. This happens on your device through Apple’s Calendar framework.
• Direct Google Calendar (optional): Google shows its own sign-in and permission screen. Access and refresh tokens are stored only in your iPhone Keychain and used to read upcoming events from, and add confirmed plans to, your primary Google Calendar.
• Notifications (optional): reminders are scheduled on your device. No push server is involved.
• Photos (optional): photos you choose for memories are stored on your device. Kin does not access your photo library directly.
• Location, microphone, and speech recognition (optional): used only for the requested map or voice feature. Kin does not record audio or retain your location.

The assistant

When you choose the optional cloud assistant, Kin sends your message, recent Ask turns, and the limited household context needed to reply through Kin’s Cloudflare relay to Kin’s AI provider: OpenAI’s API, or Google’s Gemini API as a backup. The relay does not retain request bodies. Each provider processes those requests under its API terms and privacy practices. We do not use assistant requests for advertising.

Usage counts

To understand whether people see Kin Family, the app counts how many times its upgrade screen was opened from each place in the app (for example Settings or the weekly recap). When you use the cloud assistant, those counts can be sent along and stored against a one-way hash of your random device identifier, not your name, email or Apple account. The counts contain no family data, are used only for product analytics, and are never used for advertising or tracking. In the same way, Kin notes each day the app is opened, against the same one-way hash, so we can tell whether people come back; that record holds only the date.

School (Wilma) connection

If you connect a Wilma school account, credentials are stored in the iOS Keychain and used only to sign in to your school’s Wilma server over HTTPS. School data stays on your device. Kin is not affiliated with Visma / Wilma.

Data sharing

We do not sell data or share it with advertisers or data brokers, and Kin contains no third-party tracking SDKs. Cloudflare processes Family Sync, OpenAI or Google processes the optional cloud assistant, and Wilma processes requests you make to your school.

Your control

You can export your local data as JSON at any time. Deleting the app removes local data. To permanently delete your Kin account, use Settings → Account → Delete Kin account. To erase a shared cloud copy for everyone using your family code, use Settings → Family Sync → Delete shared cloud copy.

Contact

Questions? Email alvin.ekelund@gmail.com.

Kin is developed by Alvin Ekelund. Changes to this policy will be posted on this page.