Privacy Policy
Last updated: 12 June 2026
Kinlog is a care organizer for families. This policy describes how we collect, use, and protect your information. For privacy requests, contact privacy@getkinlog.com.
1. Who we are
Kinlog is provided by LOUIS-OLIVE LTD (Company No. 17235545). We offer a digital organizer for families caring for aging parents. We are the data controller for the personal data described here.
2. Information we collect
Account data: name, email, authentication credentials or OAuth identity, timezone, subscription status.
Care data you enter: information about your parent or relative, including name, date of birth, photo, contact details, address, medications and schedules, appointments, tasks, uploaded documents (which may include prescriptions and medical letters), emergency contacts, allergies, blood type, medical conditions, and notes.
Important: Most parents are not Kinlog users when you first add them. You enter their information on their behalf. You should only add information you are entitled to share.
Family sharing: email addresses and names of people you invite.
Technical data: device type, app version, push notification tokens, error and crash reports, and (if you opt in) product analytics events.
We do not sell your data or use it for third-party advertising.
3. Health-related information
Some information you choose to store in Kinlog is health-related (for example medications, allergies, appointments, and medical documents). This is special category data under UK and EU law.
We process this data only because you choose to enter it to use the organizer service, and based on your explicit consent when you add care information in the app. You may withdraw consent by deleting the relevant information or your account, subject to our notes on family-shared data below.
Kinlog is a care organizer, not a healthcare provider. It does not replace medical records or professional advice.
4. How we use your information
| Purpose | Lawful basis |
|---|---|
| Provide accounts, sync, and security | Contract |
| Store and display care information you enter | Contract + explicit consent (health-related data) |
| Medication reminders and care notifications | Contract |
| Family invites and transactional email | Contract |
| Optional lifecycle email tips | Legitimate interest (opt out in Settings or via unsubscribe) |
| Subscriptions | Contract |
| Product analytics (PostHog EU) | Consent (opt in; change anytime in Settings) |
| Error monitoring | Legitimate interest |
| Optional AI-assisted parent setup (voice/text) | Same consent as care data; processed transiently via OpenAI |
5. Subprocessors and international transfers
We use trusted service providers. Primary storage is in the EU (Ireland). Some providers are in the United States; transfers rely on Standard Contractual Clauses and/or adequacy mechanisms.
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database, auth, storage, server functions | EU (Ireland) |
| PostHog | Product analytics (if you opt in) | EU |
| Resend | Email delivery | US (SCCs) |
| RevenueCat | Subscriptions | US (SCCs) |
| OpenAI | Optional voice/text extraction at setup | US (SCCs); not used for model training |
| Expo | Push notification delivery | US (SCCs) |
| Bugsnag | Error monitoring | US (SCCs) |
| Apple / Google | App distribution, push transport, billing | Global (platform terms) |
6. Retention and deletion
We keep your account data while your account is active. Care data belongs to the family space, not an individual member: if you delete your account, family care records and documents may remain for other invited members.
When you delete your account in the app (Settings → Delete account), we remove your profile access, family memberships, and push tokens, and deactivate sign-in. Some profile fields may be retained in de-identified or tombstoned form for abuse prevention and legal compliance.
You may request full erasure under applicable law by contacting privacy@getkinlog.com. We respond within 30 days. See also our account deletion page.
Database backups may persist for a limited period per our hosting provider's policy.
7. Security
We use industry-standard measures including encrypted connections, access-controlled storage, and row-level security on our database. Family data is accessible only to you and people you explicitly invite.
8. Your rights
You may have the right to access, correct, delete, restrict, port, or object to processing of your data, depending on applicable law. Contact privacy@getkinlog.com. You may lodge a complaint with your local supervisory authority.
9. Children
Kinlog is not directed at children. Caregivers must be adults managing care for a parent or relative.
10. Changes
We may update this policy from time to time. We will revise the date at the top when we do.