Overview and scope
This Privacy Policy explains how Kunna Studio Inc. ("we," "us," or "our") collects, uses, discloses, and protects personal information for Kindo, a family management application. This policy applies to Kindo mobile applications (iOS and Android), related web experiences, and support channels. We do not sell personal information. Data is processed to operate and improve the Service under our agreements with service providers—not sold to advertisers. This policy is intended to align with Apple App Store Privacy Nutrition Labels for the features you use.
Categories of Personal Data Collected
Depending on the features you use, we may collect: (a) Identifiers (name, email, account user ID, and Sign in with Apple or Google Sign-In identifiers when you choose those methods); (b) Commercial Information (subscription status, purchase history, and RevenueCat identifiers; payment card details are processed by the Apple App Store or Google Play Store—we do not receive or store raw card numbers); (c) User Content (tasks, calendar items, shopping lists, budgets, notes, recipes, trip details, documents, and uploaded files such as photos, receipts, or attachments); (d) Device & Network Data (IP address, OS, device identifiers, push notification tokens, and operational diagnostic metadata); (e) Audio-related data for dictation (microphone access; see Speech Recognition below—we do not upload raw audio to Kunna or Azure); (f) Geolocation Data (precise coordinates when you enable Family Locator / location sharing or related map and nearby-weather features); and (g) Contacts and calendar data you choose to import or sync.
Specific Third-Party Subprocessors
We use subprocessors to provide the Service, including: (a) Supabase (database, authentication, file storage, and Edge Functions / backend); (b) RevenueCat (subscription status validation coordinated with App Store / Play billing); (c) Microsoft Azure AI Foundry / Azure OpenAI (sole cloud AI processor for Ask Kindo / Kin features); (d) Mapbox (Family Locator maps); (e) Firebase Cloud Messaging (push notifications); (f) Google Sign-In and Sign in with Apple (authentication you choose); (g) Google Weather API (dashboard weather) and Google Maps API where configured (for example weather or map deep links—not the primary locator map); (h) Microsoft Outlook calendar OAuth (when you connect that account); (i) Unsplash (optional stock imagery, such as rewards or destinations); and (j) OpenTripMap (trip place enrichment). These parties process data to provide the Service under our agreements; they are not sold your data for advertising. We do not use Firebase Authentication, Crashlytics, or Sentry in the current shipping app.
Third-Party trademarks and logos disclaimer
All product and company names, logos, and brands mentioned or displayed within the Service (such as Apple, Google, Microsoft, Outlook, Mapbox, and Unsplash) are trademarks™ or registered® trademarks of their respective holders. Use of these names, logos, and brands is solely to identify third-party services and does not imply affiliation, sponsorship, or endorsement.
AI Processing (Ask Kindo / Kin)
Ask Kindo / Kin AI features are optional and feature-gated. Free accounts (KINDŌ FREE) share a pool of 3 AI requests per family per day (resets at midnight UTC). Family Pro (KINDŌ PREMIUM) shares a pool of 50 AI requests per family per day by default (administrators may adjust). Local Kin lookups that do not call Azure do not count toward the quota. Some advanced assistant actions may still require Family Pro. Cloud AI processing is performed only through Microsoft Azure AI Foundry (Azure OpenAI), called from our backend (Supabase Edge Functions such as ai_router, assistant_chat, and trip_itinerary_suggestions). We do not use public OpenAI, Anthropic, Google Gemini, Cloudflare Workers AI, homelab/local cloud LLMs, or other third-party AI APIs as cloud AI processors for these features. When you use AI, a typical request may include: your prompt or messages (typed or dictated), app/UI locale, module and intent (for example Kin Q&A, recipes, groceries, trips, calendar, or budget), the minimum household context needed for that request (relevant tasks, events, groceries, recipes, budgets, trip details, and similar—not a full database dump), and optional images you attach for vision features. Authentication is handled by our backend; we do not send Apple or Google passwords to Azure. Azure processes this data under Microsoft’s Azure / Azure OpenAI terms for our resource. Consistent with Microsoft’s Azure OpenAI data commitments for standard customer deployments, we do not use your customer content to train public foundation models, and we do not use your personal data to train our own models. Azure Content Safety is optional and off by default; if enabled, text may be checked by Azure Content Safety / moderation APIs. Model content filters may block unsafe prompts. Our backend logs operational AI metadata (such as provider, latency, module, trace id, and quota usage) as needed to operate, secure, and meter the Service—not for advertising. AI outputs can be wrong; review before acting. Kindo is not a medical, legal, tax, or financial advice product.
Speech Recognition and dictation
Kindo may use Apple’s Speech Recognition API for dictation into Ask Kindo / Kin. Kindo does not upload raw audio to Kunna servers or to Azure. Only the transcribed text (then combined with prompts and context as described above) is sent to Azure for AI. Apple’s system dialog explains that speech data may be sent to Apple to process recognition. Speech audio may therefore be processed by Apple under Apple’s Speech Recognition privacy practices; it is not sent to Kunna or Azure by our application.
Location (Family Locator and maps)
Precise location is collected when you enable location sharing or use Family Locator / related map features (and, where applicable, nearby weather). The app requests When In Use location permission only—not Always. Location updates occur while the app is in the foreground and sharing is eligible (for example Family Pro, permission granted, and a login-capable profile). Tracking stops when the app moves to the background. Family Locator shares location with household members when sharing is on. This is not continuous always-on background tracking in the current product. You can deny location permission or turn it off in iOS/Android Settings; related map and sharing features will then be limited or unavailable.
How We Use Data and Lawful Bases (GDPR)
Under applicable privacy frameworks including GDPR, we process data under: (a) Performance of a Contract—account setup, household sync, subscriptions, and core features; (b) Legitimate Interests—security, fraud prevention, reliability, troubleshooting, quota metering, and product improvement that is not sold to ad brokers; (c) Consent—optional permissions (camera, photos, microphone/speech, location, contacts, calendars, notifications) and non-essential marketing where required; and (d) Legal Obligation—compliance with law. We do not sell personal information and do not use it for cross-app advertising tracking.
Mobile App Device Permissions
Permissions are requested in context when you use a feature, and you can revoke them in system Settings (related features may stop working): (a) Camera—profile photos, Gallery, pets, receipts, and attachments; (b) Photo Library—same uses plus save/download where applicable; (c) Microphone—dictate text for Ask Kindo / Kin; (d) Speech Recognition—convert speech to text for Kin (see Speech Recognition section); (e) Location (When In Use)—Family Locator / map features and nearby weather; (f) Contacts—import into Contact Book; (g) Calendars—display and sync events you choose to connect; and (h) Notifications—reminders and family alerts via push messaging.
Household Join Codes
A Join Code lets another person join your family household as a login-enabled member. It does not unlock Family Pro / KINDŌ PREMIUM, apply discounts or trials, or bypass App Store or Google Play in-app purchases.
Cookies, Local Storage, and Analytics
Kindo uses local storage and caching on your device to keep you signed in and load data quickly. We do not use advertising cookies or cross-site tracking. We may use operational telemetry and push-notification tokens as needed to run the Service; this is not sold to advertising brokers. The current shipping app does not include Crashlytics or Sentry.
Service Communications, Email Consent, and Marketing Preferences
By registering for or using the Service, you may receive transactional emails, account notices, and product updates from Kunna Studio Inc. You may opt out of non-essential marketing emails via the unsubscribe link or by emailing [email protected] or [email protected]. Operational and security notices may still be sent. You can control push notifications in device Settings.
International Data Transfers (GDPR/PIPEDA)
Kunna Studio Inc. is headquartered in Canada. Personal data may be stored and processed on cloud infrastructure in the United States and other regions used by our processors (including Supabase, Microsoft Azure, Mapbox, and Google). For transfers from the EEA, UK, or Canada, we rely on appropriate contractual safeguards with processors (such as standard contractual clauses) where required. We do not claim GDPR adequacy decisions or certifications beyond what our processors independently maintain.
Data Retention and Backup Lifecycle
We retain personal data and User Content while your account is active and as needed for the purposes in this policy. Inactive accounts and associated data may be deleted after two years of complete inactivity. Encrypted database backups are retained up to 30 days for disaster recovery, then overwritten.
User Account Deletion Procedure
You can delete your account through in-app Settings → Account → "Delete My Account" (with confirmation), or by emailing [email protected] or [email protected]. After a verified deletion request, active profile data, credentials, and uploaded User Content are marked for deletion and removed from active production databases within 7 days. Backups are purged within about 30 days per our backup lifecycle.
Children's Privacy Protection (COPPA)
Kindo is designed for households but is not intended for children under 13 (or 16 in certain EEA countries) without verifiable parental consent. We do not knowingly collect personal data from children under these ages without such consent. If we learn we collected such data improperly, we will delete it.
Security Measures and Controls
We use industry-standard controls including TLS for data in transit, encryption at rest for databases/attachments/backups where applicable, database row-level security to limit cross-household access, access controls, and routine vulnerability practices. No method of transmission or storage is 100% secure.
Security Breach Notification
If a breach affecting personal data creates a high risk to your rights and freedoms, we will notify you and relevant authorities (such as the Office of the Privacy Commissioner of Canada or applicable European authorities) as required by law, including GDPR’s 72-hour regulator notification where applicable.
EU and UK Privacy Rights (GDPR)
If you reside in the EEA or UK, you may have rights of access, rectification, erasure, portability, restriction, and objection (including to legitimate-interest processing), and the right to lodge a complaint with a supervisory authority.
Canadian Privacy Rights (PIPEDA)
If you are in Canada, we process personal information under PIPEDA. You may request access, correction, and contact our Privacy Officer to challenge our compliance with PIPEDA principles.
California State Privacy Rights (CCPA/CPRA)
If you are a California resident, Kunna Studio Inc. does not sell personal information and does not "share" it for cross-context behavioral advertising. You may have rights to know, delete, correct, and opt out of any future selling or sharing. We will not discriminate against you for exercising privacy rights.
Privacy Request Process (DSAR)
To exercise privacy rights, email [email protected] or [email protected]. We verify identity (often by confirming from your registered account email) before disclosing or deleting records. We aim to respond within 30 days.
Policy Updates and Notifications
We may update this Privacy Policy to reflect product or legal changes. The "Last updated" date appears at the top of this page. For material changes, we may notify you in-app or by email.
Privacy Contact and accountability
Privacy inquiries: [email protected] or [email protected]. Kunna Studio Inc.
Contact: [email protected]
