Kinmory Privacy Policy

Effective Date: March 1, 2026

Last Updated: February 21, 2026

Applicable Regions: United States, Canada, Australia, New Zealand

1. Introduction

Lingxin Artificial Intelligence Technology (Hangzhou) Co., Ltd. ("we," "our," or "us"), operating the Kinmory brand, is a family memory and AI assistant platform designed to help families organize their lives, preserve memories, and stay connected. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use the Kinmory mobile application, KinPad display app, and related services (collectively, the "Services").

Age Requirement: The Kinmory mobile application is intended for users who are 13 years of age or older. By registering, you confirm that you are at least 13 years old. Children may use the KinPad display product under parental supervision, but children do not create their own accounts.

By using our Services, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our Services.

2. Information We Collect

2.1 Information You Provide Directly

• Account Information: Name, email address, and password when you register an account.
• Family Member Profiles: Information about family members that you (the account holder) voluntarily enter, including name, nickname, gender, date of birth or age, school, grade, and interests/hobbies. This information is entered by the parent or guardian on behalf of family members, including children. Children do not directly input their own information.
• Photos and Videos: Images and videos you upload to the Services, including metadata such as date and location if embedded in the file. This includes photos of children that parents or guardians choose to upload.
• Voice and Audio Input: Audio recordings when you use voice input features. On iOS, voice-to-text is processed locally by iOS's built-in speech recognition; the resulting text is then sent to our servers.
• Text Messages and Conversations: Text messages you send to the AI assistant, including questions, notes, and instructions.
• Calendar Data: Calendar events you create within the app, and calendar data you choose to sync from third-party calendar providers (e.g., Apple Calendar, Google Calendar, Outlook Calendar etc.).
• Tasks and Rewards: Tasks, recurring tasks, and reward/points data you create for yourself or family members.
• Meal Plans and Recipes: Meal plans, recipes, and grocery lists you create or import.
• Email Content: If you use the Email AI Listening feature (AI Plus and Group plans), you may connect third-party email services (such as Gmail, Outlook, or Apple Mail via OAuth) or forward emails to your Kinmory-provided inbox address. In both cases, the email body is sent to our AI for analysis and then immediately discarded — we do not store the raw email content. Only the extracted results (such as calendar events, tasks, and reminders) and email metadata (sender, subject, date) are stored in your account.
• Memory Notes: Personal notes and memories you ask the AI to store on your behalf.
• Redemption Codes and Payment Information: Promo codes you redeem. Payment transactions are processed by Apple App Store or Stripe; we do not store your full payment card details.

2.2 Information Collected Automatically

• Device Information: Device type, operating system version, device identifiers (e.g., device ID used for push notifications and session management), and app version.
• Usage Data: Features you use, events you interact with, session duration, and error logs.
• Log Data: IP address, timestamps, and request metadata when you connect to our servers.
• Push Notification Tokens: APNs (Apple Push Notification service) tokens used to deliver notifications to your device.

2.3 Information from Third Parties

• Calendar Providers: If you authorize calendar sync (e.g., Google Calendar, Apple Calendar, Outlook Calendar), we receive calendar event data from those providers.
• Email Providers: If you authorize third-party email access (e.g., Gmail, Outlook, Apple Mail) for the Email AI Listening feature, we access your emails solely to perform AI analysis. Email body content is processed in memory only and is never stored on our servers. Only the AI-extracted results are retained.
• Authentication Providers: We use Supabase for authentication. When you sign in, authentication tokens are issued and managed securely.

3. How We Use Your Information

We use the information we collect to:

We do not sell your personal information to third parties.

4. AI Features and Data Processing

4.1 AI Text and Voice Conversations

Your text messages are sent to our servers and processed using large language models (LLMs), including Google Gemini. Voice input on iOS is converted to text locally on your device using iOS's built-in speech recognition; only the resulting text is transmitted to our servers — no audio is uploaded. Conversation history is used to provide context-aware responses. You can delete your conversation history at any time.

4.2 Photo Storage and Sharing

Photos and videos you upload are stored in your private, tenant-isolated cloud storage. By default, photos are shared within your family group (visible to all members of your family account) and are never accessible to other families or third parties.

We do not currently perform automated AI analysis of photo content, facial recognition, or voice recognition on any family members, including children. Photo Chat (AI-powered conversation about your photos) is available as an opt-in feature where you explicitly send a photo to the AI assistant.

4.3 Email Processing

If you use the Email AI Listening feature, emails are processed as follows:

• Emails are received either via your Kinmory forwarding address or by connecting a third-party email account (Gmail, Outlook, Apple Mail) via OAuth
• The email body is sent to Google Gemini AI for analysis and then immediately discarded from our servers — raw email content is never stored
• Only the AI-extracted results (calendar events, tasks, reminders, and memos) and email metadata (sender address, subject line, date) are stored in your private account
• Extracted results are never shared with other users or families
• Email content is never used to train AI models

4.4 Memory Notes

When you ask the AI to remember something, the resulting memory note is stored in your private account and used to personalize future AI responses. You can view, edit, and delete memory notes at any time.

4.5 AI Image Generation

When you use the AI image generation feature, both your text prompts and any reference photos you provide are sent to Google Gemini's image generation API for processing. Generated images are stored in your private, tenant-isolated storage. Reference photos are transmitted solely for the purpose of generating the requested image.

5. Data Storage and Security

• Storage Location: Our application servers are located in Silicon Valley, United States (Supabase PostgreSQL infrastructure hosted on AWS US West). Photos and files are stored using Cloudflare R2 object storage. By default, Cloudflare R2 distributes data across its global infrastructure; we have not enabled jurisdiction-specific restrictions, which means photo data may be stored in data centers outside the United States. By using our Services, you consent to the transfer and storage of your data in the United States and potentially other countries where Cloudflare operates.
• Tenant Isolation: Each family account (tenant) has a completely isolated database schema and storage bucket. Your data is never accessible to other families.
• Encryption: Data is encrypted in transit using TLS/HTTPS. Data at rest is encrypted by our storage providers.
• Access Controls: Access to your data is restricted to your authenticated sessions. We use JWT-based authentication and device-level verification.
• Security Measures: We implement security practices including HTTPS-only connections, rate limiting, input validation, JWT-based authentication, and per-family data isolation (each family's data is stored in a completely separate database schema and storage bucket).

Despite our efforts, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Data Sharing and Disclosure

We do not sell, rent, trade, or share your personal information with any third party for their own commercial purposes.

We may share your information only in the following strictly limited circumstances:

• Infrastructure Service Providers: We use the following providers solely to operate the Services. They are not permitted to use your data for any other purpose:

- Google (Gemini API): AI text, voice, and image processing

- Supabase: Authentication and database hosting

- Cloudflare: Object storage (R2) and CDN

- Apple / Stripe: Payment processing

- Apple APNs: Push notifications

• Within Your Family Group: Content you explicitly share (e.g., shared family calendar, shared photos, family memory notes) is visible to other members of your own family group only. It is never visible to other families or third parties.

• Legal Requirements: We may disclose your information if required by law, court order, or governmental authority, or to protect the rights, property, or safety of Kinmory, our users, or the public.

• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

7. Children's Privacy (COPPA Compliance)

7.1 Account Registration

The Kinmory mobile application requires users to be at least 13 years of age to register an account. Children do not create their own accounts. All account registration and management is performed by a parent or guardian.

7.2 KinPad and Children's Use

Children may interact with the KinPad display product (iPad or smart screen) under parental supervision. KinPad allows children to view family calendars, complete assigned tasks, and earn rewards. KinPad does not:

• Allow children to register accounts or input personal information (no forms for name, email, or any personal data)
• Include voice control or voice recognition features
• Perform facial recognition on children
• Display third-party advertisements
• Collect behavioral tracking data from children

All data displayed on KinPad originates from the parent's account and is managed entirely by the parent.

7.3 Information We Collect About Children

We collect the following information about children only when voluntarily provided by a parent or guardian:

• Name and nickname
• Gender
• Age or date of birth (used solely to personalize tasks, rewards, and age-appropriate content)
• School name and grade
• Interests and hobbies
• Photos uploaded by the parent
• Activity data generated through use of the Services (calendar events, tasks completed, rewards earned)

This information is used solely to provide and personalize the family services described in this policy. It is never used for advertising, sold to third parties, or shared outside your family group.

7.4 Parental Rights and Controls

As the account holder, parents and guardians have full control over their children's information and can at any time:

• View, edit, or delete any family member's profile information within the app
• Delete individual calendar events, tasks, rewards, and photos within the app
• Delete a child's entire profile and all associated data within the app
• Request deletion of the entire family account by contacting [email protected]

7.5 Parental Consent

By creating a family account and adding a child under 13 as a family member, you (the parent or guardian) provide consent for the collection and use of your child's information as described in this policy. You may withdraw consent at any time by deleting the child's profile or the entire account.

7.6 Contact for Children's Privacy Issues

If you believe we have inadvertently collected personal information from a child under 13 without parental consent, please contact us immediately at [email protected]. We will delete the information within 5 business days.

8. Your Rights and Choices

Depending on your location, you may have the following rights:

8.1 Access and Portability

You can request a copy of your personal data. AI Plus and Group subscribers can use the Data Export feature in the app to download their data.

8.2 Correction

You can update your account information and family profiles directly in the app at any time.

8.3 Deletion

You can delete:

• Individual photos, videos, memory notes, tasks, calendar events, and family member profiles directly within the app
• Your entire account and all associated data by contacting [email protected]

Account deletion will permanently remove your data from our systems within 30 days, except where retention is required by law.

8.4 Opt-Out of AI Model Training

We do not use your personal conversations, photos, emails, or any information about your children to train AI models. AI processing is performed solely to provide the Services to you.

8.5 Push Notifications

You can disable push notifications at any time through your device's system settings.

8.6 California Residents (CCPA)

If you are a California resident, you have the right to:

• Know what personal information we collect and how it is used
• Request deletion of your personal information
• Opt out of the sale of personal information (we do not sell personal information)
• Non-discrimination for exercising your privacy rights

To exercise these rights, contact us at [email protected].

9. Your Consent at Registration

When you register for Kinmory, you will be asked to review and accept this Privacy Policy and our Terms of Service. By checking the acceptance box during registration, you confirm that:

• You are at least 13 years of age
• You have read and agree to this Privacy Policy
• If you add a child under 13 as a family member, you are that child's parent or legal guardian and consent to the collection of their information as described in this policy

You may withdraw your consent at any time by deleting your account.

10. Data Retention

11. Third-Party Links and Integrations

The Services may integrate with third-party services (e.g., Google Calendar, Apple Calendar, Instacart). When you connect these services, their own privacy policies apply to the data they collect. We are not responsible for the privacy practices of third-party services.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Send an email notification to your registered email address
• Send an in-app push notification
• For significant changes affecting children's data or data sharing practices, request your renewed consent

Your continued use of the Services after changes become effective constitutes your acceptance of the updated policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

Kinmory

Email: [email protected]

Website: https://www.kinmory.ai

For data deletion requests or to exercise your privacy rights, please email [email protected] with the subject line "Privacy Request" and include your registered email address.

This Privacy Policy is provided in English. In the event of any conflict between translated versions and the English version, the English version shall prevail.