Privacy Notice

• Account data — name, email address and login credentials, used to create and secure your account and workspace. Legal basis: performance of our contract with you.
• Care information you enter — details about the parent or relative you are organizing for and the family members involved: names, dates of birth, contact details, emergency contacts, doctors and pharmacy, medications, conditions and allergies, insurance details, document locations, notes and tasks. This can include health information. We process it solely to provide the Service to you and the people you invite, and to generate the printable documents you request. Legal basis: performance of our contract and your explicit consent for health-related details.
• Invitation data — email addresses of family members you invite, used to send them an invitation to your workspace. Legal basis: legitimate interests in operating a shared workspace.
• Support messages — the content of emails or messages you send us, used to answer your question. Legal basis: legitimate interests.
• Usage and technical data — device and browser information, IP address, and basic log/telemetry data, used for security, fraud prevention, debugging and improving the product. Legal basis: legitimate interests and legal obligation.

You are responsible for having the appropriate authority or consent to record information about another person, such as a parent or relative.

• Family members you invite — everyone in your workspace can view and edit the care information in it. Only the owner can invite or remove members or delete the workspace.
• Service providers / subprocessors — hosting, database, authentication and email-delivery providers that operate the Service on our behalf under contract.
• Paddle.com — our Merchant of Record, for the sale of Premium, subscription management, payments, invoicing and tax compliance. Payment card details are collected and handled by Paddle, not by us.
• Professional advisers — legal and accounting advisers where necessary.
• Authorities — where required by law or to protect our legal rights.

We do not sell your personal data or the care information in your workspace.

We keep account and workspace data for as long as your account is active. If you delete your workspace or close your account, we delete or anonymise the associated data within a reasonable period, except where we must retain records (for example billing records) to meet legal obligations. Data we no longer need is deleted or anonymised.

Workspaces are private by default — only people you invite can see yours. We use appropriate technical and organisational measures, including encryption in transit, encryption at rest with our hosting provider, row-level database access rules that scope data to your workspace, and role-based restrictions on owner-only actions. No system is perfectly secure, so please use a strong, unique password.

We are based in the United States, and our providers may process data in the United States or other countries. Where personal data is transferred out of the UK or EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

We use essential cookies and similar local storage to keep you signed in and to keep the Service secure; these are required for the app to function. We do not use advertising cookies. Where any non-essential analytics are used, you can control them through your browser settings, which let you block or delete cookies at any time.

Depending on where you live, you may have the right to access your personal data, correct it, delete it, restrict or object to processing, receive a portable copy, and withdraw consent at any time. Residents of the UK and EEA also have the right to complain to their local supervisory authority. We respond to requests within one month.

To exercise any of these rights, email privacy@mykinfolder.com.

KinFolder — privacy@mykinfolder.com. We will update this notice as the Service changes; the date above shows the latest revision.