Privacy Policy

Effective June 4, 2026

Kinday is a family scheduling and AI assistant app. This policy explains what data we collect, how we use it, and your rights. We keep it plain — no legal fog.

What we collect

▶

Account info: Your name and email address when you sign in with Google.

Family profile: Family name, member names, emojis, and color preferences you set up in the app. Children's names and details are entered by parents — children do not create accounts.

Calendar data: Events from your connected Google Calendar, read and displayed within the app. We store a connection token (refresh token) to sync your calendar.

To-dos: Tasks you create in the app, stored in our database.

Messages to the AI assistant: Text and images you send to Kinday's assistant, along with relevant calendar events and family context, are sent to Anthropic (Claude) to generate personalised responses. This context is necessary for the assistant to answer questions about your family's schedule. We do not store your conversation history on our servers — only the current session is held in memory.

Emails forwarded to your Kinday address: Each family gets a dedicated address (e.g. the-smiths@kinday.ai). When you forward an email to that address, its subject line, body text, and relevant attachments are processed by Kin to extract calendar events. The raw email content is not stored on our servers after extraction — only the resulting calendar events are retained. Inbound email receipt uses Resend (see Third parties, below).

Usage data: Basic request logs to enforce rate limits and prevent abuse (e.g. number of AI queries per day). No detailed analytics or ad tracking.

How we use your data

▶

To provide the app — show your family's schedule, tasks, and AI-powered summaries
To sync with services you've connected (Google Calendar, forwarded email)
To send notifications and summaries you've opted into
To operate the service safely — subscription limits and abuse prevention

We do not sell your data. We do not use your data for advertising. We do not train AI models on your personal or family data.

Google API Limited Use disclosure

▶

Kinday's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically: information received from Google APIs is used only to provide Kinday's family scheduling features directly to you. We do not use Google user data to serve advertising, allow humans to read it except with your explicit consent or as required by law, or use it for any purpose other than displaying and managing your family's schedule within the app.

When you send a message to Kin (our AI assistant), relevant events from your Google Calendar may be included in the request sent to Anthropic solely to answer your question in that moment. This transfer is: (a) limited to the specific calendar context needed to respond to your query, (b) done in real-time and not retained by Anthropic after your response is generated, and (c) never used for advertising, model training, analytics, or any purpose other than generating your response. Anthropic is contractually prohibited from using Google user data for its own purposes, including training AI models.

We do not use Google user data to develop, improve, or train any generalised AI or machine learning models.

Third parties we share data with

▶

Anthropic: Processes your messages to Kin (our AI assistant). When you send a message, your text, any images you upload, and relevant calendar events and family context are sent to Anthropic solely to generate your response. This data is not retained by Anthropic after your response is generated and is not used for AI model training or any purpose other than answering your query. Anthropic is contractually prohibited from using Google user data for its own purposes. Anthropic Privacy Policy

Google: Used for sign-in and Google Calendar access. We request only the scopes needed: your email address and calendar read/write access. Google Privacy Policy

We also use third-party providers for hosting, database storage, email delivery, email receipt, and search. These providers process data only as necessary to operate the service and are contractually bound to protect it. They do not use your data for their own purposes. We do not sell your data to any third party.

Children's privacy

▶

Kinday is intended for use by adults and parents. This is not a children's app. Children under 13 do not create accounts or directly interact with the app. Parents may enter their children's first names and choose emojis to represent them — no other information about children is collected or required.

When parents set a nickname for a child, Kin uses that nickname in its notes, briefings, and conversations instead of the child's real name. We do not proactively include children's real names in AI prompts.

If you use the email forwarding feature (forwarding emails to your Kin inbox address), the content of the emails you forward is processed by AI to extract events and tasks. Forwarded emails may contain family members' names as written in the original email.

We do not knowingly collect personal information directly from children under 13. If you believe a child has provided us personal information without parental consent, contact us at hello@kinday.ai and we will promptly delete it.

Data retention

▶

Your data is kept for as long as your account is active. If you delete your account, we delete your profile, family data, and to-dos within 30 days. Calendar connection tokens are revoked immediately on disconnection.

AI-generated content is cached temporarily to improve performance and is automatically purged on a rolling schedule. Depending on the content type, entries are deleted between 24 hours and 28 days after creation.

AI usage logs (used solely for rate limiting) are retained for 90 days and then automatically deleted. These logs contain only timestamps and request counts — not the content of your conversations.

Pending family invites that have not been accepted are automatically deleted after 7 days. A daily automated job runs at 03:00 UTC to enforce all of the above schedules.

Your rights

▶

You can request a copy of your data, correct inaccuracies, or delete your account at any time by emailing hello@kinday.ai. If you're in the EU or California, additional rights apply under GDPR and CCPA — contact us and we'll respond within 30 days.

Security

▶

All data is transmitted over HTTPS. Database access uses row-level security so each family's data is isolated. Calendar tokens are encrypted at rest. We do not store passwords — authentication is handled by Google and Supabase.

Notifications you turn on may include the title of a to-do so the alert is useful at a glance. Those notifications are delivered through the push and email providers listed in our Sub-processors.

Changes to this policy

▶

We'll update this page if our practices change and note the effective date at the top. Significant changes will be communicated via email to your registered address.

Contact

▶

Questions? Email us at hello@kinday.ai.