Who runs this

Kinful is a family-caregiving app built by the Rock n' roll 🤘 team as a course project. For any question about this policy or your data, email hello@kinful.helmutfritz.fyi.

What is collected

From a parent: an email address, used only to sign in via a one-time link (no password). From a carer: an email address, used only to sign in via a one-time code, plus whatever name they choose to show on their shifts. From the profile a parent builds for their child: name, age, allergies and other health notes, emergency contacts, and (only if the parent turns it on for that child) photos and captions shared during a shift. There is no advertising, no analytics, and no tracking cookies of any kind.

Health data and photos

Allergies and other health notes are sensitive data under GDPR Article 9. They're entered by a parent, about their own child, so the parent can rely on carers seeing accurate safety information during a shift - that's the sole purpose they're used for. A child's photo is never shown or shareable until a parent explicitly turns on photo sharing for that child, and that choice can be turned off again at any time.

Emergency contacts

If a parent adds another person's name and phone number as an emergency contact, that information is used only to show it to a carer during a shift, tiered by how urgently they should be called. It's the parent's responsibility to have that person's permission to add them.

Why it's collected

Solely to run the app: signing in, showing a carer what they need to know during a shift, and letting a family look back on shared moments. Nothing here is sold, rented, or shared with advertisers.

Where it's stored

Everything is stored in a Postgres database hosted in the EU (Frankfurt). Sign-in emails are delivered by Brevo. These are the only service providers with access to your data, and both act strictly as data processors for this purpose.

How long it's kept

For as long as the family's account is active. A carer invite link can be revoked by the parent at any time, which immediately cuts off that carer's access. If a parent wants their family's data fully deleted, email the address above and it will be removed.

Your rights

You can ask to see, correct, or delete the data held about you or your family at any time - just email hello@kinful.helmutfritz.fyi and it'll be handled directly.

Changes

If this policy changes in a meaningful way, the date at the top of this page will be updated to reflect it.