Last updated: October 26, 2026
Your privacy matters to us. This policy explains what information Kinkeel collects, why, who can see it, how long we keep it and the choices you have. It applies to the website and to the apps.
1. Information we collect
Account: your first name, last name, email address and password (we store only a scrambled version of the password), the language you chose, your time zone and your email preferences.
Family record: the family you belong to, the person cared for, the siblings who joined, the entries you log (the kind, the hours, nights, kilometres or amounts, the date and who gave them), the rates, the currency, the way your family splits the care, the periods the family marked as settled, the recurring entries, and the proposals and votes of the siblings. Money is stored only as an amount.
Comments and receipts: the comments you write under an entry or a proposal, and the photo of a receipt you attach to an expense. A receipt photo is resized and saved again when you upload it, so the hidden information inside the photo (such as the place and the device) is removed. Please do not upload photos of identity documents, medical documents or anything that is not a receipt.
Income: if you give an income to split the care by income, we keep it as a private figure that is never shown to the other siblings.
Agencies: if a care agency follows your family, we keep which agency it is. The staff of the agency see the totals and the activity of the family, never the balances, the comments, the receipts or what each sibling gave.
Activity and security data: a log of what happens to an account (registering, verifying the email, logging in, changing the password or the email, logging out everywhere, downloading your data, deleting the account, creating, settling and deleting a family, and the actions of a Kinkeel administrator on the account), each with the date and the IP address. We also keep the failed logins and the requests of the public forms (the email and the IP address).
Error and technical data: when the server fails, we keep the technical error (the address of the page or the name of the scheduled job, the error message and the technical trace) so that we can fix it, and technical information such as your device type and browser. These records do not hold the content of your family record.
Notifications on your phone: if you turn on notifications in the app, we keep a notification address of your phone (a code that the phone gives to the app) and whether it is an iPhone or an Android phone, so that we can send you the notifications you see in the bell of the website. The text of a notification (for example the first name of the person who commented and the name of the family) goes through the notification services of Apple and Google to reach your phone.
App performance data: when you use the app, we collect technical data about how it works: how long the app takes to start and each screen to load, the version of the app, the type and the system version of your phone, an identifier of the installation of the app and the screens that fail, with the technical error. It does not hold the content of your family record or what you write, and the codes of the links we email you are removed from the addresses before they are sent.
Billing: we keep the plan of a family (free, trial or Plus), the dates of the trial or the subscription, the status of the payment, where it was bought (the website, the App Store or Google Play) and one-time purchases. Card payments on the website are handled by Stripe and purchases in the apps by Apple or Google: we never see or keep your card number.
Use of the app: with the performance data we see which screens are opened and which features are used, to improve the app. We use this data only for these purposes.
2. What never reaches our servers
The private notes you write about the care stay on your device. We have no field, file or log that holds them.
3. How we use your information
We use your information to run the service you asked for (your account and your family record), to keep your account and the service secure and prevent abuse, to find and fix errors, to improve the application and to communicate with you. Where the law asks for a legal basis, these are the performance of the agreement with you, our legitimate interest in a secure and working service, and your consent where we ask for it.
We email you about your account (verification, password reset and the confirmation of a new email address), about invitations to a family and about what happens in your families: a comment under your entry, a proposal that waits for your vote, a reminder when nothing was logged for a week and a weekly summary. You choose which of these emails you get in your settings, and the account and security emails always stay on. The emails are sent in the language you selected.
If you work for a care agency, we also email you when a family of the agency needs a check-in, and when you invite a sibling by email we send the invitation in your name and the name of the agency.
4. Who can see what
The siblings of a family see its entries, comments, receipts, balances and proposals. They never see the private income of the others. An invitation link works only once, for the person who opens it before it expires (14 days), and we keep only a scrambled version of it.
The staff of a care agency see the totals and the activity of the families of the agency, and the first names of the siblings who joined. They do not see the balances, the comments, the receipts or what each sibling gave.
The Kinkeel administrators and the support team can see the details of an account (name, email, language, role, whether it is verified, the failed logins and the activity log) to help you, and can resend a verification email or unlock an account. They do not read your private notes, which we do not have, and every action of an administrator on an account is written to the activity log.
We do not sell your information. We share it only with the services that help us run Kinkeel (hosting, database, file storage, sending email, payments (Stripe on the website, Apple and Google in the apps) and Cloudflare Turnstile, which protects the forms from abuse) and when the law requires it.
Notifications, payments and performance: to deliver the notifications to your phone (Apple and Google), to process payments (Stripe, Apple and Google) and to measure how the app performs (Expo) we use service providers that process this data for us and only for these purposes. We do not track you across the apps and websites of other companies, and we do not use your information for advertising.
5. Cookies
We use one cookie to keep you logged in and one cookie to remember the language you selected. We do not use advertising cookies.
6. How long we keep it
Account and family record: for as long as your account exists. The record of a family is only added to: a correction is a new entry and the history stays complete. When you delete your account, your personal details, your comments, your receipts and your recurring entries are removed, and what you logged stays in the shared record of the family as a former member, because the record cannot be changed.
Receipts and comments: until you or the account holder delete them, until the entry they belong to is replaced by a correction (they move to the new entry), or until the family or the account is deleted. A receipt can be removed by the person who uploaded it as long as its period is not settled.
Activity log: 180 days. After that the rows are deleted. When an account is deleted, its rows lose the link to the account and are deleted with the rest after 180 days.
Error log: 30 days. Failed logins: 24 hours. Requests of the public forms counted for the limits: a few hours.
Backups of the database and of the files are kept for a limited time and are overwritten, so a deleted item may remain in a backup until then.
Phone notification address: until you log out of the app, turn the notifications off, close the login from your list of devices or delete your account, and it is deleted at once when the phone stops accepting notifications. App performance data: for a limited time and then deleted.
7. Your choices and rights
In your account you can change your name, your password, your email address (we send a link to the new address and tell the old one), your time zone and your email preferences, log out of every device, download a copy of your information and delete your account. You can also write to us through the Contact link.
Depending on where you live, the law may give you the right to access, correct, delete or move your information, to object to some uses and to complain to the data protection authority of your country. We answer within the time the law asks.
In the settings of the app you can turn the notifications of your phone on or off at any time (you can also do it in the settings of the phone), and logging out of the app stops them on that phone.
8. Security
We protect your information with encrypted connections, scrambled passwords and tokens, limits on the failed logins and on the public forms, and access rules that let a person see only the families they belong to. No system is perfectly secure, so keep your password private and tell us at once if you think someone else has your account.
9. Changes and contact
We may update this policy and will change the date above. When the change is important we will tell you by email or in the application. For any question, use the Contact link at the bottom of the page.