Privacy policy

1. Who this covers

Kinlo is developed and operated by Wayne Liu, an independent developer based in the San Francisco Bay Area, California, United States.

This policy covers the Kinlo app and this website. Kinlo is an early-stage family assistant intended for adult parents and caregivers. For privacy questions, contact superaliuwei@gmail.com.

Kinlo creates an app identity using a device credential. Connecting Gmail or Google Calendar provides access to those services; it is not an app sign-in method and does not allow an email address to recover or take over a family’s Kinlo data.

2. Information we handle

The information processed depends on the features you use:

• App and family information: device-based identifiers, session information, family time zone, and family profiles you choose to add, such as a child’s name, school, age, or grade.
• Content you provide: notes, images, PDFs, extracted text, questions, conversation history, and the to-dos, activities, and changes created from them.
• Connected account information: Google account identifiers, email address, granted permissions, and authorization tokens used to maintain your connection.
• Google content: message details and calendar information described below, when you connect those services.
• Technical information: operation identifiers, error codes, app version, and timing information needed to operate and troubleshoot the service. Hosting providers may process network information, such as IP addresses, when serving requests.
• Support correspondence: the information you choose to include when you contact us.

We use this information to organize family plans, answer your questions, keep source details available, carry out authorized actions, maintain connections, address errors, and respond to support and privacy requests.

3. Gmail and Google Calendar

Gmail

Gmail access is optional and read-only. When connected, Kinlo reads messages, including sender, subject, date, and message text, to identify family-related information and suggest or create internal to-dos and activities. The initial import covers recent messages, currently the preceding 30 days, and the service can continue checking for new messages while connected.

Messages may be processed to determine whether they are relevant to family organization. Gmail access does not permit Kinlo to send, modify, or delete your email. Kinlo does not request access to your Google contacts.

Google Calendar

Calendar access is optional and can be connected separately from Gmail. Kinlo accesses your calendar list and events in selected calendars, including relevant titles, times, locations, and descriptions. Google’s event permission permits reading and editing events; Kinlo’s current product flow reads events and creates an event only after you review a preview and confirm. It does not currently offer external event updates or deletion.

Authorization and permitted use

Google handles authorization. Kinlo does not receive your Google password. Authorization tokens are stored on the server and encrypted; provider secrets are not delivered to the app.

Kinlo’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements. Google data is used for the user-facing features described here, not for advertising, sale, or credit decisions. Transfers and human access are limited to purposes permitted by that policy, such as providing features with appropriate consent, security, and legal obligations.

4. AI processing

Kinlo’s upcoming release will use OpenAI’s official API to extract information and respond to requests. Relevant content will be sent from Kinlo’s backend directly to OpenAI. This can include imported email text, text extracted from images or PDFs, your questions, conversation context, and family or calendar details needed for the request.

This processing occurs on servers; it is not limited to your device. AI output can be incomplete or incorrect. Check original sources and review details before relying on an answer or adding an event to an external calendar.

Kinlo does not operate a general-purpose model training program using your personal content. According to OpenAI’s API data controls, API inputs and outputs are not used to train its models by default, unless the API customer explicitly opts in. Kinlo’s release configuration will keep that optional data sharing disabled.

OpenAI may retain prompts, responses, and associated information in abuse-monitoring logs, normally for up to 30 days. Longer retention may apply for legal or safety reasons. Retention also depends on the API features and account controls used; Kinlo does not claim that its OpenAI account has Zero Data Retention. See OpenAI’s API data controls for details. This provider retention is separate from the family information stored by Kinlo, described below.

5. Service providers and other disclosures

Kinlo uses providers to run the features you choose. Depending on the deployment and feature, these include:

• Google: account authorization, Gmail, and Google Calendar.
• Railway: backend hosting and database infrastructure.
• Cloudflare: hosting this website and private object storage for submitted files when enabled.
• OpenAI: the selected AI provider for the upcoming release, through its official API, as described above.
• Sentry: error diagnostics in configured beta or production builds. Diagnostic handling is designed to omit message bodies, submitted files, credentials, and other sensitive payloads.

Kinlo does not sell your personal information or use your Google data to target advertisements. We may disclose information when required by applicable law or when necessary to protect users and the security of the service, subject to the restrictions that apply to Google API data.

Kinlo is operated from the United States. Our service providers may process information in the United States and other countries where they operate. Those countries may have different data protection laws from your country. Contact us if you need more information about the processing relevant to your use of Kinlo.

6. Storage, security, and retention

Family information, imported content, conversation records, and operation records are stored on Kinlo’s backend to support ongoing use and recovery of interrupted work. Submitted files may be stored in private object storage. The app also keeps credentials and limited local information on your device.

Kinlo uses encrypted network connections for its hosted service, server-side encryption of Google authorization tokens, and checks that restrict access to the relevant family. No service can promise absolute security.

Content does not automatically expire after the Gmail import window. We retain information while needed to provide the features you use and handle legitimate operational or legal needs. Deletion requests are handled as described below. Retention depends on the type of record, whether it is still needed for your saved plans or conversations, recovery of interrupted operations, security, and applicable legal obligations. There is currently no single automatic expiration period for all Kinlo records.

Deleting an individual source, to-do, or activity should not be assumed to remove every related record. Derived plans, conversations, recovery records, or backups may require separate handling. Uninstalling the app does not delete server-side information.

7. Your choices and privacy requests

• Choose your connections. You can use manually submitted information without connecting Gmail. Gmail and Google Calendar are separately optional.
• Disconnect a service. Disconnecting removes the stored authorization for that connection and stops new access through it. Already imported information and derived plans remain in Kinlo unless separately deleted.
• Revoke Google access. You can revoke access through your Google Account connections. Revoking the Kinlo grant for an account may affect both Gmail and Calendar connections that use it.
• Request access, correction, export, or deletion. Email superaliuwei@gmail.com. Depending on applicable law, you may have additional rights, including objection, restriction, withdrawal of consent, or a complaint to a supervisory authority.

Kinlo does not currently provide a complete self-service household deletion flow. We will assess privacy requests and may need to verify that you control the relevant Kinlo identity. Because a Google connection is not an app login, an email address alone is not sufficient proof of ownership. Do not email passwords, authorization tokens, or device recovery credentials.

8. Children’s information

Kinlo is intended for adults, not for children to create their own accounts. Parents and caregivers may provide information about children to organize their family’s activities. Provide only information you are authorized to share and that is needed for the feature. Avoid including unnecessary sensitive details in notices or questions.

If you believe a child has used Kinlo directly or that information about a child should be removed, contact us so we can investigate and handle the request.

9. This website, updates, and contact

This website does not include advertising trackers, analytics scripts, or a sign-up form. Following an email link opens your own email service. The hosting provider may still process technical request information to serve and protect the site.

We may update this policy as Kinlo develops. The date above identifies the current version. We will communicate material changes as required and update this policy when the way we process your information changes.