Privacy policy
The short version: your family's history belongs to your family. We store it so you can reach it, we never sell it, and we do not show ads.
- What we collect
- Why we use it
- Who else touches it
- Encryption, honestly
- How long we keep it
- Your rights
- Children
- Changes
- Contact
1. What we collect
Kinfolktree is an app for one family at a time. Everything below is scoped to the family you belong to; members of other families cannot see it.
Things you give us
- Account: email address, or your Apple ID if you use Sign in with Apple. Guest accounts get a placeholder email we generate.
- Profile: first and last name, role in the family, generation, branch, optional birth year, birthday, bio, skills, a profile photo and an optional tree photo.
- The Vault: stories, sayings, lessons, photos, voice memos, videos and documents you add, plus who they are visible to.
- Messages: family room chat, direct messages, mentor requests, polls and votes.
- Family structure: who is in the tree, partner links, placeholder relatives you add, and invites you send (the invitee's email).
- Payments: handled by Stripe. We receive the email you paid with, the plan, and a Stripe customer id. We never see or store card numbers.
Things collected automatically
- Push tokens for your device, if you allow notifications.
- Crash reports via Sentry, tagged only with your user id. We strip email addresses and link tokens before anything is sent.
- Basic service logs on our hosting provider (request times, error codes).
We do not run advertising trackers, we do not upload your phone's contacts, and we do not read your other apps.
2. Why we use it
- To run the product: show your tree, store and play your vault, deliver messages and notifications.
- To bill the plan your family chose and enforce its seat and storage limits.
- To email invites.
- To find and fix crashes.
We do not use your content to train AI models, build advertising profiles, or sell to anyone.
3. Who else touches it
We rely on a small number of providers. Each one only receives what it needs to do its job.
| Provider | What for | What they see |
|---|---|---|
| Supabase | Database, file storage, sign-in | Everything stored in the app, encrypted at rest (see below) |
| Stripe | Payments | Your email and payment details. Charges appear as SUPERFLY LABS. |
| Resend | Invite emails | The recipient's email and the invite code |
| Expo | Push notifications | Your device token and the notification text (which never includes message contents) |
| Sentry | Crash reports | Your user id and technical error details |
| Apple | Sign in with Apple, TestFlight / App Store | Governed by Apple's own policies |
We will disclose data if the law requires it. If that ever happens we will tell the affected family unless we are legally barred from doing so.
4. Encryption, honestly
Your vault, chat and media are encrypted with a key that is unique to your family, and stored only in encrypted form. Kinfolktree's servers hold the material needed to derive that key, so this is strong encryption at rest — it is not "zero-knowledge" encryption where we could never read your data. We say this plainly because families deserve to know exactly what they are trusting. Full detail is on the Security page.
5. How long we keep it
- Your family's content stays as long as the family keeps its account.
- Deleting a message, a vault entry or a photo removes it from our live systems immediately.
- Each family gets an automatic weekly backup of its own data, kept for seven days.
- Crash reports are kept for 90 days.
- When a family account is closed we delete its content within 30 days, except records we must keep for tax or fraud purposes (billing records, kept for 7 years).
6. Your rights
- Export: Profile → Data Sovereignty → Save a readable copy (tree, stories and chat) or Export family tree (GEDCOM), no questions asked. Photos, voice notes and video stay in the app.
- Correct: edit your profile, entries and messages in the app.
- Delete: remove any entry, message or photo you created. Close your account yourself in the app: Profile → Delete my account. Your ornament, vault entries, messages, invites and media are deleted immediately. To delete a whole family's account, email us and we will do it within 30 days.
- Notifications: switch family activity alerts on or off in Profile.
If you live in the EU, UK, California or another place with a privacy law, you have the rights that law gives you, and this section is how you exercise them. Write to us and we will respond within 30 days.
7. Children
Kinfolktree is a family product and relatives of any age can be added to a tree as placeholder entries by an adult. Accounts must be created by someone 16 or older. If you believe a child under 16 has created an account, email us and we will remove it.
8. Changes
If we change this policy in a way that matters, we will say so in the app before it takes effect. The date at the top always shows the current version.
9. Contact
Kinfolk Tree, 110 16th Street, Suite 1400 #1034, Denver, CO 80202, United States.
Email: kinfolktree888@gmail.com.