Privacy Policy

Effective: September 25, 2026 · Updated: October 13, 2026 · Operator: John Duprey ("we", "us") · Contact: support@kinwall.family

Kinwall hosted ("the Service") at kinwall.family is a family wall calendar. This policy explains what we store, why, where, and how you get it back or delete it. It is written to be read.

What we store

Account (the "family")

• The web address you chose (e.g. smith.kinwall.family), the family name, your email address, the region you chose, the signup code you used, and timestamps.
• Your email is used only for notices about the Service (security, availability, changes to this policy). No marketing.

Your family's data — stored in a database that belongs to your family alone:

• Calendar events, member names and avatars, chores and completions, lists, categories, settings, and display names.
• Credentials you connect: Google and Microsoft sign-in tokens, CalDAV app passwords, and any password on an ICS feed. These are encrypted with a key unique to your family before they are written.
• Passkey public keys (never private keys), hashed API and display keys, and push-notification subscriptions (encrypted).

Operational

• IP addresses, briefly, for rate limiting and abuse prevention, and in an audit log of administrative actions on your family (for example a rename or a suspension). Standard Cloudflare request logs, which we do not enrich with your calendar content.

We do not run analytics or advertising trackers. The admin site uses one strictly necessary session cookie; family sites use browser storage on your own devices only.

Why

To run the Service you asked for: sync your calendars, show them on your wall, send the reminders you set, and let you sign in. Nothing else. We do not sell, rent, or share your data for anyone else's purposes.

Where

Your family's database lives on Cloudflare's infrastructure in the region you picked at signup. "European Union" is a guarantee enforced by the platform; other regions are placement preferences. The shared account registry (family name, address, email, region, status) is stored in the United States. Data is encrypted in transit and at rest.

Who else sees it

• Cloudflare, Inc. hosts everything.
• Google / Microsoft, only if you connect those calendars: we read and write your calendar through their APIs using the access you grant. You can revoke it from your Google or Microsoft account at any time.
• Apple and Google push relays deliver notifications; payloads are encrypted so relays cannot read them.
• Nobody else. No data brokers, no advertisers.

Google user data

If you connect Google Calendar, Kinwall asks Google for:

• View and edit events on your calendars (calendar.events): to show your events and to create, change or delete the events you edit in Kinwall, so they stay in sync with Google.
• See the list of your calendars (calendar.calendarlist.readonly): so you can choose which calendars appear.
• Your email address (openid, email): to label which Google account is connected.

We store the events from the calendars you choose, those calendars' names and colors, the account's email address, and Google's access token (encrypted with your family's key) in your family's database. We use this data only to show and sync your family's calendar. We do not sell it, use it for advertising, or use it to train AI models, and we don't transfer it to anyone except as needed to run the Service (Cloudflare hosts it), to an app you authorize yourself (see "Apps you authorize" below), or as required by law. No person reads it unless you ask us to, for security, or as the law requires.

Removing the Google account in Settings → Calendars revokes Kinwall's access and deletes its calendars and events from Kinwall. You can also revoke access at [myaccount.google.com/permissions](https://myaccount.google.com/permissions).

Kinwall's use and transfer of information received from Google APIs to any other app will adhere to the [Google API Services User Data Policy](https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

No AI processing

Kinwall does not send your family's data, including Google user data, to any AI or machine learning service, and we do not use it to create, train or improve AI or machine learning models. Kinwall has no integration with any AI provider.

When you share a photo or text into the Kinwall phone app (a flyer, a menu, a book cover), the app may read it with your phone's own on-device features: text recognition, and on phones that have it, the phone's built-in on-device model. That happens entirely on your phone, only on what you shared, and never involves your calendar or Google user data.

Apps you authorize

Kinwall has a standard API (REST and MCP, with OAuth sign-in) so you can connect other software you choose, the way you would connect any app to a calendar. Nothing is connected unless you set it up and approve it on the consent screen, and you can disconnect it in Settings → Access → Connected apps at any time. Kinwall does not choose, operate or pay for these apps and sends them nothing on its own; each one is governed by its own terms.

Access by us

The Service is built so that we have no tool to sign in to your family or read its calendar; every administrative action we can take (suspend, rename, re-issue a setup link before first use, delete) is recorded and visible to you in your family's Settings under "Hosting activity". Whoever operates the servers could, with deliberate effort, access stored data; we will only do so with your request, to comply with law, or to protect the Service, and we will tell you unless legally prevented.

Your data, your choices

• Export: Settings → Access → "Download export" gives you a JSON file of your family's data at any time.
• Delete: app.kinwall.family/family lets you delete your family yourself, immediately and permanently. Your web address is held for 90 days afterwards so old links cannot be claimed by someone else, then released.
• Disconnect a calendar: removing a connected account revokes Kinwall's access where the provider allows it and deletes the stored credential and that account's calendars and events from Kinwall.
• Self-host: Kinwall is open source; you can run it yourself and import your export.

Retention

For as long as your family exists. After deletion, platform point-in-time backups expire within 30 days. Audit and rate-limit records are kept for 90 days. Registry rows for deleted families are removed immediately except the 90-day address hold.

Children

Kinwall is used by parents to organize a household. Children's names and chores are entered by the adults who run the family; children do not have accounts and we do not knowingly collect information from children directly.

Security

Passkeys instead of passwords, per-family encryption keys, hashed API keys, per-family databases, HTTPS only, and an audit trail. Report vulnerabilities to support@kinwall.family.

Changes

We will email the address on file before material changes take effect. The current version is always at app.kinwall.family/privacy.

• October 13, 2026: split "AI and assistants" into "No AI processing" (Kinwall has no integration with any AI provider) and "Apps you authorize" (the standard API you can connect your own apps to). No change to how your data is used.
• October 11, 2026: added "AI and assistants": Kinwall sends no data to AI services or uses it to train models, the phone apps' on-device reading of what you share, and assistants you connect yourself. No change to how your data is used.
• October 1, 2026: added "Google user data", spelling out what Kinwall reads from Google Calendar, what it stores and the Limited Use commitment, and clarified what disconnecting a calendar deletes. No change to how your data is used.