Privacy

Last updated 5 August 2026.

Draft. This policy describes accurately what the current build of Kinley stores and sends. It has not been reviewed by a lawyer. Because Kinley handles information about people's health and about people who are not themselves users, it should be reviewed before Kinley is offered publicly.

The short version

Kinley stores what a family types into it — tasks, medications, appointments, and first names — so that everyone in that family's circle can see the same thing. That information is visible to the people in the circle and to nobody else. Kinley does not sell it, does not use it for advertising, and does not build a profile from it.

Information about someone who isn't using Kinley

This deserves stating plainly. A circle is organised around a person receiving care — usually an ageing parent. That person is normally not a Kinley user, has not agreed to this policy, and may not know the app exists.

What Kinley holds about them is whatever the family enters: a first name, the medications and dose times someone records, appointments, and notes on tasks. That is health information about a real person.

If you are setting up a circle, you are responsible for deciding what is appropriate to record about the person you are caring for, and for telling them if that is the right thing to do. Only enter what your family genuinely needs to coordinate.

What Kinley stores

About you

About the circle

What Kinley does not collect

Who can see it

Everything inside a circle is readable only by the people in that circle. This is enforced on the server, not just hidden in the app: a request from someone who is not a member is refused before any data is returned.

Coordinators can change circle settings, roles, and membership. Helpers can view the circle and can claim, complete, and record day-to-day items.

Anyone holding a circle's six-character invite code can join that circle and see everything in it. Treat an invite code like a house key, and ask a coordinator to remove anyone who should no longer have access.

Where it lives

Kinley stores data using Google Firebase (Authentication, Cloud Firestore, and Hosting), on servers in the United States. Google processes this data on Kinley's behalf. A copy is also cached on your own device so the app keeps working without a signal.

Reminders about doses and tasks are generated and scheduled on your device. The times you are reminded are not sent anywhere.

Removing things

A note on health privacy law

Kinley is not a doctor's office, hospital, insurer, or other covered entity, so US HIPAA rules do not apply to it. That means the protections described here are the ones Kinley commits to — not ones imposed on it by health privacy law. It is worth knowing the difference.

Children

Kinley is intended for adults coordinating care. It is not directed at children under 13 and Kinley does not knowingly collect information from them.

Changes

If this policy changes in a way that affects what is collected or who can see it, the date at the top will change and anyone with an active circle will be told in the app.

Contact

Questions, or a request to delete your data: lukegladfelter@gmail.com.