Privacy Policy | Kinroot

1. Introduction

Kinroot ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

Privacy First: We built Kinroot with privacy as a core value. Your exact location is never shared publicly, and you have full control over what information you share with other users.

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide when using the Service:

Account Information: Name, email address, password
Profile Information: Display name, location (city/state), parenting situation, interests
Children Profiles: Name, age, medical information (stored securely, never shared publicly)
Calendar Data: Events, activities, appointments
Meal Planning Data: Meal plans, recipes, shopping lists
Task Data: Tasks, to-do items, notes
Community Data: Village Network profile, messages, connection requests
Payment Information: Processed securely by Stripe (we never store payment card details)

2.2 Automatically Collected Information

When you access the Service, we automatically collect certain information:

Log Data: IP address, browser type, operating system, pages visited, time spent
Device Information: Device type, unique device identifiers
Usage Data: Features used, actions taken, performance metrics
Location Data: Approximate location (city/state) for community features (see Section 4)

2.3 Cookies and Tracking

We use cookies and similar tracking technologies to:

Maintain your session and keep you logged in
Remember your preferences (dark mode, language)
Analyze how you use the Service to improve it
Provide personalized features and recommendations

3. How We Use Your Information

We use the information we collect to:

Provide the Service: Create and manage your account, store your data, enable features
Improve the Service: Analyze usage patterns, fix bugs, develop new features
Communicate with You: Send service updates, respond to support requests, share product news
Process Payments: Handle subscriptions, billing, refunds
Enable Community Features: Connect you with other single parents in your area
Ensure Security: Detect and prevent fraud, abuse, and security incidents
Comply with Legal Obligations: Respond to legal requests, enforce our Terms

4. Location Privacy

We take location privacy seriously.

4.1 Fuzzy Geolocation

For the Village Network (community discovery feature), we use "fuzzy geolocation" to protect your privacy:

Your exact address is never collected or stored
We only use your city and state to find nearby parents
Displayed distances are approximate and randomized within ~3 miles
Other users cannot determine your exact location

4.2 Location Control

You have full control over your location visibility:

Choose whether to enable Village Network discovery
Update your location at any time
Make your profile private to disable discovery

5. Children's Data and COPPA

5.1 Children Are Not Users

Important: Children profiles on Kinroot are data entries that you, the parent, create and manage. Children are not users of the Service and do not have accounts, passwords, or the ability to log in.

5.2 COPPA Compliance

Because children do not use or access Kinroot, the Children's Online Privacy Protection Act (COPPA) requirements for obtaining verifiable parental consent do not apply. You, the parent, are the sole user and have complete control over all children's data.

5.3 Data You Manage

Children's information you may choose to enter includes:

Name and age (for organizing your calendar and activities)
Medical information (allergies, medications - stored securely, never shared)
Activity preferences (to help you plan schedules)

This information is private to your account and is never shared with other users or third parties without your explicit consent.

6. How We Share Your Information

6.1 We Do Not Sell Your Data

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

6.2 Service Providers

We share information with trusted service providers who help us operate the Service:

Supabase: Database hosting and authentication
Stripe: Payment processing
Vercel: Application hosting
Email Service: Transactional emails (password resets, notifications)

These providers are contractually obligated to protect your data and only use it to provide services to us.

6.3 Other Users (Village Network)

If you choose to use the Village Network, certain information becomes visible to other users:

Display name and profile photo (if provided)
Approximate location (city/state)
Parenting situation and interests (if you choose to share)
Messages you send to connected users

What's never shared: Your email address, exact location, children's data, calendar, meals, or tasks.

6.4 Legal Requirements

We may disclose your information if required by law or if we believe it's necessary to:

Comply with legal obligations or court orders
Protect our rights, property, or safety
Prevent fraud or security incidents
Protect the safety of our users or the public

7. Data Security

We implement industry-standard security measures to protect your information:

Encryption: All data is encrypted in transit (HTTPS/TLS) and at rest
Authentication: Secure password hashing and optional OAuth (Google)
Access Control: Row-level security ensures you only access your own data
Security Headers: CSP, X-Frame-Options, and other protective headers
Regular Updates: We keep our infrastructure and dependencies up to date

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

8. Your Privacy Rights

8.1 Access and Portability

You have the right to access and export all of your data at any time through the Settings page. Your export includes all profile information, children profiles, events, meals, tasks, and messages.

8.2 Correction

You can update or correct your information at any time through the Settings page or by contacting us.

8.3 Deletion

You have the right to delete your account and all associated data at any time through the Settings page. Account deletion is permanent and cannot be undone.

8.4 Marketing Communications

You can opt out of marketing emails by clicking "Unsubscribe" in any marketing email or by updating your preferences in Settings. You will still receive important service-related emails (e.g., password resets, billing notifications).

8.5 GDPR Rights (EU Residents)

If you are in the European Union, you have additional rights under GDPR:

Right to object to processing
Right to restriction of processing
Right to data portability
Right to withdraw consent
Right to lodge a complaint with a supervisory authority

9. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. When you delete your account:

Your profile and personal data are immediately deleted
Your content (events, meals, tasks) is permanently removed
Some data may be retained in backups for up to 30 days
We may retain certain information if required by law (e.g., transaction records)

10. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies before providing any information to them.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a notice on the Service. Your continued use of the Service after such notification constitutes acceptance of the updated Privacy Policy.

12. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

13. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at:

Email: privacy@kinroot.com
Support: support@kinroot.com

14. Summary

Your privacy matters to us. Here's what you need to know:

We collect only what's necessary to provide the Service
Your exact location is never shared publicly
Children are data you manage, not users
We don't sell your data to third parties
You can export or delete your data anytime
We use industry-standard security measures
You have full control over what you share