1. About this Policy
This Privacy Policy describes the privacy practices of Kinduit, Inc. ("Kinduit," "we," "us," or "our") with respect to the Kinduit website at kinduit.app, our applications, and all related features and services (collectively, the "Service"). Capitalized terms not defined here have the meaning given in our Terms of Service.
Kinduit is the controller of personal information processed through the Service, except where we act as a processor on behalf of a court professional, organization, or other customer under a separate written agreement.
2. Information we collect
2.1 Information you provide
- Account information: name, email address, optional phone number, password (stored as a one-way hash), and authentication factors such as passkeys.
- Profile and case information: the initials of any children on the case, jurisdiction or state, the identity of the other party on the case, and the roles of any neutrals or professionals you invite.
- Communications and records: the content of messages, calendar entries, expenses, receipts, files, and notes you submit through the Service, together with metadata required to verify their integrity (for example, cryptographic hashes, timestamps, and sender identifiers).
- Payment information: if you subscribe to a paid plan, billing name, billing address, and limited card metadata. Full card numbers are collected and processed by our PCI-compliant payment processor and are not stored on Kinduit servers.
- Support correspondence: the contents of any email or other message you send to us, including attachments.
2.2 Information collected automatically
- Device and connection data: IP address, device type, operating system, browser type and version, language, and time zone.
- Usage data: sign-in events, pages and routes viewed, features used, dates and times of activity, and error/diagnostic logs.
- Cookies and similar technologies: we use a small number of strictly necessary cookies and local-storage entries to keep you signed in, remember your preferences, and operate security features. We do not use cookies for advertising. We do not load third-party advertising trackers or social-media pixels.
2.3 Information from third parties
We receive limited information from our service providers — for example, payment status from our payment processor, deliverability events from our email provider, and abuse signals from our hosting provider — to operate and secure the Service.
3. How we use information
We use personal information to:
- provide, operate, and maintain the Service;
- create and preserve a tamper-evident co-parenting record and make it available to authorized parties;
- authenticate you, prevent unauthorized access, and enforce account security;
- provide customer support and respond to your inquiries;
- process payments and administer subscriptions;
- send transactional and account communications, including changes to our Terms or this Policy;
- detect, investigate, and prevent fraud, abuse, harassment, security incidents, and other harmful activity;
- improve and develop the Service, including by analyzing aggregated and de-identified usage trends; and
- comply with legal obligations, court orders, and valid legal process.
4. Legal bases (EEA, UK, and Swiss users)
For users in the European Economic Area, United Kingdom, or Switzerland, our legal bases for processing are: (a) performance of a contract, where processing is necessary to provide the Service you have requested; (b) compliance with a legal obligation, where processing is required by law; (c) our legitimate interests in operating, securing, and improving the Service, where those interests are not overridden by your rights and freedoms; and (d) your consent, where required by applicable law and where you have provided it.
5. How we share information
We share personal information only as described below.
- Other parties on your case. Messages, calendar entries, expenses, files, and other case content are shared with the other party on your case and with anyone you or a court authorizes (for example, attorneys, guardians ad litem, mediators, parenting coordinators). You acknowledge that messages in Kinduit may be reviewed by a Guardian ad Litem, attorney, or court if your case requires it.
- Service providers. We share information with vendors that host our infrastructure, process payments, deliver email and SMS, monitor security, and provide analytics on aggregated usage. These vendors are contractually bound to confidentiality and to use information only on our instructions.
- Legal process and safety. We may disclose information in response to a valid subpoena, court order, search warrant, or other lawful request, or where we believe in good faith that disclosure is necessary to (a) comply with applicable law, (b) protect the rights, property, or safety of Kinduit, our users, or the public, or (c) detect or prevent fraud or security incidents. See Section 11.
- Business transfers. If Kinduit is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be transferred as part of that transaction, subject to confidentiality protections and continued application of this Policy or a successor policy at least as protective.
- With your consent. We may share information for any other purpose with your consent.
We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising. We do not rent, lease, or trade your personal information for marketing purposes — aggregated or otherwise.
6. AI features
The Service includes optional assistance features (for example, a tone coach) that analyze the text of a draft message before you send it. Drafts processed by these features are transmitted to our model provider solely to return a suggestion or rewrite, are not used to train third-party foundation models, and are retained only as necessary to operate and secure the feature. Drafts are processed before commitment to the record and may be discarded by you without being added to the record.
7. Data retention
We retain personal information for as long as needed to provide the Service, to maintain the integrity of the co-parenting record, and to comply with our legal and regulatory obligations.
- Case records (messages, calendar entries, expenses, files, and associated metadata) are retained for the longer of (a) the period required by applicable law or a valid preservation request, (b) the period your account or case remains active, or (c) any period required by a court order.
- Account profile and authentication data are retained while your account is active and for a limited period after closure for security, fraud-prevention, and legal-compliance purposes.
- Diagnostic and security logs are typically retained for up to twelve (12) months.
- Billing records are retained for the period required by applicable tax and accounting laws.
8. Security
We use administrative, technical, and physical safeguards designed to protect your personal information, including encryption in transit, encryption at rest, access controls, least-privilege administrative access, audit logging, and regular review of our security practices. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
9. Your privacy rights
Depending on your jurisdiction, you may have the following rights with respect to your personal information:
- access the personal information we hold about you;
- correct inaccurate or incomplete information;
- request deletion, subject to the limitations below;
- receive a portable copy of your personal information in a structured, commonly used, machine-readable format;
- object to or restrict certain processing, including processing based on our legitimate interests;
- withdraw consent where processing is based on consent (without affecting prior processing); and
- appeal a decision we make about your rights request, and lodge a complaint with your local data protection authority.
Important limit on deletion. Co-parenting records are intentionally immutable and may be required for ongoing or future legal proceedings. We will honor deletion requests for personal information that is not part of a preserved record (for example, marketing preferences or profile fields), but we cannot delete records that must be preserved under Section 7, our Terms of Service, or applicable law or court order.
To exercise any of these rights, write to info@kinduit.app. We may need to verify your identity before acting on your request. We will respond within the time required by applicable law.
10. U.S. state privacy disclosures
If you are a resident of California, Colorado, Connecticut, Utah, Virginia, or another U.S. state with a comprehensive privacy law, you have the rights described in Section 9, subject to the limitations noted there. We do not sell personal information and do not share personal information for cross-context behavioral advertising under those laws. We do not knowingly process the sensitive personal information of minors for any purpose that would require opt-in consent under those laws. You will not be discriminated against for exercising your rights. You may designate an authorized agent to submit a request on your behalf; we will require reasonable proof of authorization.
11. Law enforcement and legal process
Requests for user information from law enforcement or other government agencies must be made by valid subpoena, court order, or search warrant served on Kinduit at info@kinduit.app with the subject line "Legal process." Unless prohibited by law or where we believe in good faith that notice would create a clear safety risk, we will provide affected users with notice before disclosure so that they may seek a protective order or other relief.
12. International data transfers
Kinduit is based in the United States. If you access the Service from outside the United States, you understand that your information may be transferred to, stored in, and processed in the United States and other countries where we or our service providers operate. Where required, we rely on appropriate transfer mechanisms — such as the European Commission's Standard Contractual Clauses or the UK International Data Transfer Addendum — to protect personal information transferred outside the EEA, UK, or Switzerland.
13. Children's privacy
The Service is intended for adults responsible for the care of minors and is not directed to children under the age of thirteen (13). We do not knowingly collect personal information directly from children under thirteen. Information referring to children (such as initials, schedules, or medical notes) is provided by adult account holders for the purposes of co-parenting recordkeeping and is governed by this Policy. If you believe a child under thirteen has provided personal information directly to us, please write to info@kinduit.app and we will take appropriate action.
14. Third-party links
The Service may contain links to third-party sites or services we do not operate. We are not responsible for the privacy practices of those sites and encourage you to review their policies before providing them with personal information.
15. Changes to this Policy
We may update this Policy from time to time. If we make a material change, we will provide reasonable advance notice — by email or through the Service — before the change takes effect. The "Last updated" date at the top of this Policy reflects the most recent revision.
16. Contact
For privacy questions, requests under Section 9, or legal process under Section 11, write to info@kinduit.app. For account or billing help, write to support@kinduit.app.