Privacy

About you: your email address and password (the password is stored only as a one-way hash by our sign-in provider), your name, username and gender, and whatever else you choose to add to your own profile — dates, places, a photo, a few words about yourself.

About your relatives: the cards you create for them — names, dates, places, photos, notes — and how they are related. These people may not use Kinstory. You are responsible for having the right to record what you record about them.

What you post and send: memories (text, photos, who is in them), comments, likes, and chat messages and attachments. Chat messages disappear after the time you choose, seven days at the most after they are read.

What makes the app work: your settings, who you have blocked, connection requests, notifications, and a short-lived count of certain actions (searches, requests) kept for two days to stop abuse. We do not use advertising or tracking cookies.

Your tree and your family posts are visible to you and to the accounts you are connected to — a connection exists only when one of you sent a request and the other accepted it. A post marked private is visible to you alone. Nobody else can browse your tree, and it is not indexed by search engines.

Other people on Kinstory can find your account by your name, username, or exact email address in order to send you a request. They see your name, username and photo — nothing of your tree.

Blocking someone removes their access to your tree and posts and yours to theirs, stops messages and requests in both directions, and hides you from their search. They are not told.

When two families record the same person, Kinstory can link the two cards so each family sees what the other recorded and can choose to copy it. Linking never merges the cards: each family keeps and controls its own.

Data is stored with Supabase (database, sign-in and file storage) in its Singapore region, and the website is served by Vercel. Both act only on our instructions. We do not sell personal data or share it with anyone else, except where the law requires it.

Until you delete it. Deleting a card, a post or a comment removes it. Deleting your account (Settings → Delete account) removes your tree, posts, comments, likes, chats, photos and your sign-in in one step, and cannot be undone. Cards that other families keep for you stay in their trees, no longer linked to any account. Notifications are removed after 180 days and declined requests after 90.

See it: Settings → Export gives you a file with everything your account holds.
Correct it: you can edit every card and post you own at any time.
Remove it: delete any card, post or comment, or the whole account.

If you are not a user and a relative has recorded details about you or your child that you want corrected or removed, write to us at the address below. We will ask the person who keeps that card to act, and remove it ourselves where the law requires.

Accounts are for people aged 18 and over. Children can appear on a family's tree as cards kept by their relatives; please record only what you would be comfortable with every connected relative seeing, and leave out exact birth dates for the young.

When this notice changes in a way that matters, we will tell you in the app before the change takes effect.