Privacy

Last updated 16 August 2026

KinCircle holds a list of the people in your family and the dates that matter to them. That is about as personal as an address book gets, so this page says plainly what is kept, what leaves the server, and how to get rid of all of it.

KinCircle is run by one person, in India, on a server they rent and administer themselves. There is no company behind it, no investor, no advertising, and nothing about your family is for sale — not now and not as a change of plan later.

What is kept

Because you have an account

The email address or phone number you sign in with.
Your name — only if you tell the app. Signing up gives it an email address, and an email address is not a name, so it does not invent one.
Your timezone and preferred language, so a reminder arrives in the morning rather than the middle of the night.
Which devices you are signed in on, and a push token for each, so reminders can reach them.

Because you told it about your family

Names and nicknames, and what each person calls the other.
How people are related — parent, spouse, sibling, guardian.
Dates: births, marriages, deaths, and anything else you record. Partial dates stay partial.
Anything else you choose to add: where somebody lives, a phone number, notes, a few words about what they love.
Photographs you add.
The conversation itself — what you typed and what the assistant replied.

Because the software has to run

A log of which capabilities ran and whether they succeeded. It records the name of the action, not its contents.
Your IP address, briefly, to stop one person flooding the sign-up and crash-report endpoints. It is erased after seven days.
Crash reports, if the app fails. These carry the error, where in the code it happened, and which version of the app you have — and go to a crash tracker running on the same server, not to a third party.

What leaves the server

KinCircle uses AI models it does not host, so some things have to travel. This is the complete list. Nothing else goes anywhere.

Goes to	What is sent	Why
Ollama Cloud ollama.com	Your message, the recent conversation, and the results of anything the assistant looked up to answer you — which can include names, relationships and dates.	To understand what you asked for and write the reply.
Google Gemini generativelanguage.googleapis.com	Only when you ask for an illustrated card: the occasion, the language, the age being celebrated, whether the person is a man or a woman, and a few of the words you used to describe them. No names. No photographs.	To draw the picture. The words on the card are set afterwards, here.
Expo push, then Google exp.host	The text of the reminder, which usually names the person and the occasion — “Nita turns 64 tomorrow”. Plus the push token of your device.	There is no way to deliver a notification to an Android phone without passing through Google. This is true of every app on your phone.
Email provider	Your email address and a six-digit code.	To sign you in.

Photographs never leave. A family photo is decrypted only in memory, placed on the card, and written back encrypted. It is never sent to an AI model, never sent to anyone else, and never stored anywhere but this server.

How it is protected

Photos are encrypted before they touch a disk, with AES-256-GCM, and the location data your camera writes into them is stripped first.
One family cannot read another's records. This is enforced by the database itself through row-level security, not by application code remembering to filter — so a mistake in the code cannot leak them.
Backups are encrypted too, and kept for a short rotation.
Everything travels over HTTPS.

How long it is kept

Your family's records: until you delete them. There is no expiry, because the point of the product is remembering.
When you ask for deletion, there is a seven-day grace period — then the people, dates, photos, conversations and the account itself are removed. The grace period exists so a mistake at midnight is recoverable, and you can cancel during it.
IP addresses: seven days.
Crash reports: thirty days.

What KinCircle never does

No advertising, and no advertising identifiers.
Nothing is sold or shared with anyone beyond the four services listed above.
No analytics SDK, no third-party tracker, nothing watching how you use it.
It never sends a message, posts anything, or calls anyone on your behalf. Every wish it writes leaves your phone because you pressed send.

Your rights

Under India's Digital Personal Data Protection Act, and as a matter of ordinary decency, you can:

See everything. Ask the app to export your family's archive and it produces the lot.
Correct anything. Tell it what is wrong and it changes it.
Delete everything — in the app, or at kincircle.kindolab.com/delete-account without installing anything.
Withdraw consent by deleting your account, which is the same action.

Children

KinCircle is for adults recording their own families. Children appear in it — that is the nature of a family tree — but they are recorded by an adult relative, and the account belongs to that adult. It is not designed for or directed at children as users.

Asking a question, or complaining

Write to hello.kindolab@gmail.com. A person reads it. If you are not satisfied with how a data question is handled, the DPDP Act gives you the right to escalate to the Data Protection Board of India.

If this page changes

The date at the top changes with it. If a change actually affects what is collected or where it goes — rather than fixing a sentence — you will be told in the app before it takes effect.