Privacy Policy

Last updated: May 12, 2026

Kinnekted ("we," "us," or "our") operates the Kinnekted mobile application and web platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read this policy carefully. By using Kinnekted, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Information You Provide

Account Information: Name, email address, phone number, gender, timezone, preferred language, and profile photo when you create an account.
Legal Information: Full legal name and address, which you may provide for court documentation purposes. You may mark your address as confidential to exclude it from exported reports.
Child Information: Names, dates of birth, school details, medical notes (including doctor, dentist, insurance, allergies, and medications), emergency contacts, clothing sizes, hobbies, and other information you choose to store in child profiles and the Info Bank.
Messages: Text messages, attachments, files, pinned messages, and read receipts you send through the secure messaging feature. Messages are immutable once sent for court-admissibility purposes.
Financial Information: Payment requests, expense records, receipts, split percentages, memo notes, due dates, category tags, and transaction data processed through our payment features. Credit card and bank account information (including ACH details) is handled directly by our payment processor, Stripe, and is not stored on our servers.
Documents: Files you upload to the Document Vault, including court orders, medical records, school documents, and receipts. Documents are stored with private, time-limited signed URLs for security. You may set expiration dates and receive automated alerts.
Activity Logs / Milestones: Daily activity entries, mood logs, meal records, school notes, health entries, milestone notes, and photos you create for your children.
Calendar Events: Custody schedules, exchange times, appointments, holidays, activities, recurring event patterns, missed visitation records (including date, reason, and who reported), and custody time-split calculations.
Exchange Check-In Data: GPS coordinates, accuracy readings, reverse-geocoded addresses, timestamps, check-in type (pickup/dropoff), optional photos, and notes when you use the GPS Exchange Check-In feature.
Caregiver & Family Network Data: Relationship types (Parent, Step-Parent, Grandparent, Court Official, Caregiver), display labels, calendar color preferences, permissions, and approval workflows for adding or removing caregivers.
Grace AI Interactions: Prompts, conversation history, context data, and feedback you provide when interacting with the Grace AI assistant, including weekly digest preferences and AI feedback submissions.
Court Access Codes: Generated access codes, associated child records, usage counts, access logs (including timestamps, IP addresses, and user agents), and expiration settings.

1.2 Information Collected Automatically

Location Data: GPS coordinates when you explicitly initiate an Exchange Check-In. Location data is only collected at the moment of check-in and is never tracked in the background. We may use reverse geocoding to convert coordinates into human-readable addresses.
Device Information: Device type, operating system, browser type, screen resolution, and user agent string for security logging, audit trail purposes, and push notification delivery.
Usage Data: Pages visited, features used, session start/end timestamps, idle timeout events, interaction data, and custom analytics events to improve our Service.
Push Notification Tokens: Firebase Cloud Messaging (FCM) device tokens for delivering push notifications, stored only with your explicit consent.
Calendar Feed Tokens: Unique, randomly generated tokens used to authenticate iCal feed subscriptions with external calendar applications (Google Calendar, Apple Calendar, Outlook). These tokens are stored on your user profile and can be regenerated at any time.
Session & Authentication Data: Login timestamps, session duration, idle timeout triggers, and logout events for security monitoring.

1.3 Information from Third Parties

Authentication Providers: If you sign in using a third-party service (e.g., Google), we receive your name and email address from that provider.
Payment Processors: Stripe provides us with transaction confirmation details, payment intent IDs, charge IDs, transfer IDs, processing fees, and receipt URLs. We never receive or store your full credit card numbers or bank account numbers.
External Calendar Services: If you subscribe to external calendar feeds (iCal/webcal URLs), those URLs and their cached event data are stored to display combined calendar views.

2. How We Use Your Information

We use your information to:

Provide, operate, and maintain the Service, including custody scheduling, secure messaging, payments, document storage, activity logging, and the Info Bank.
Facilitate secure, immutable communication between co-parents and authorized caregivers with read receipts, message pinning, tone analysis, and PDF export capabilities.
Process payments, expense splitting, and payment requests between co-parents via Stripe, including ACH bank transfers, direct card payments, and off-platform payment recording.
Generate court-admissible reports, comprehensive audit trails, and downloadable PDF documentation when requested by you or authorized through Court Access Codes.
Provide AI-powered features, including the Grace AI assistant, message tone analysis, content suggestions, co-parenting guidance, and automated weekly digest emails.
Send push notifications, in-app alerts, and email notifications for new messages, payment requests, event reminders, document expiration alerts, caregiver approval requests, and important updates.
Record and verify GPS-based exchange check-ins with timestamps, location proof, and optional photo documentation for custody dispute records.
Maintain comprehensive, forensic-grade audit logs of all user actions including logins, logouts, data creation, modifications, deletions, exports, and session events.
Synchronize your Kinnekted calendar events with external calendar applications via authenticated iCal feeds.
Provide multi-language support and interface translation in 25+ languages, including right-to-left layout support.
Manage subscription billing, free trials, promotional codes, and account status through Stripe.
Track custody time splits, missed visitations, and recurring schedule patterns for reporting and analytics.
Enforce dual-approval safeguards for deleting payments, documents, events, and caregiver access to prevent unilateral evidence destruction.
Improve, personalize, and optimize the Service through usage analytics and custom event tracking.
Respond to your support requests and communicate with you about the Service.
Comply with legal obligations and enforce our Terms of Service.

3. AI Features and Data Processing

Our Service includes AI-powered features such as the Grace AI assistant, message tone analysis, smart content suggestions, weekly digest generation, and co-parenting guidance.

3.1 In-App Consent

Before you can use Grace AI for the first time, you are presented with an in-app disclosure that explains what data is sent, who receives it, and your protections. Grace AI is not activated until you explicitly consent to data sharing. You may withdraw consent at any time by disabling Grace AI in Settings.

3.2 What Data Is Sent to Third-Party AI Providers

Your messages and prompts typed into Grace AI.
Relevant co-parenting context (child names, event summaries, schedule data) needed to generate accurate, personalized responses.
Feedback ratings (thumbs up/down) and optional comments you submit on AI responses.

3.3 Who Receives This Data

Data is sent to OpenAI and Google (via the Base44 platform) solely to generate AI responses. These providers process your data only to fulfill your specific request. They do not use your personal data to train their AI models.

3.4 Your Protections

Your data is not used to train any AI models.
Grace AI conversations are private to your account and are not shared with other users.
AI-generated responses are provided for informational purposes only and do not constitute legal, medical, financial, or professional advice.
Weekly digest emails generated by Grace AI summarize your co-parenting activity and are sent only with your consent.
You can disable Grace AI at any time in Settings. When disabled, no data is sent to AI providers.
You may submit feedback on AI responses to help us improve quality. Feedback is stored with your user ID.

4. How We Share Your Information

We may share your information in the following circumstances:

With Co-Parents and Caregivers: Information you add to shared child profiles, calendars, messages, payment records, activity logs, and documents is visible to other authorized participants in your co-parenting network, based on their assigned permissions (view, post, create events, payments). Permissions can be customized per caregiver and require dual-approval to modify.
Court Access: When you generate a Court Access Code, authorized individuals (judges, attorneys, mediators, court officials) can access a read-only report of your shared records for the specified children. Reports may include messages, payments, calendar events, exchange check-ins, activity logs, documents, and audit trails. You control when codes are generated, their expiration dates, usage limits, and can revoke them at any time.
Calendar Feed Subscribers: When you generate a calendar feed URL, any application or person with that URL can view your Kinnekted events in read-only format. You can regenerate the feed token at any time to revoke previous access.
Service Providers: We share data with trusted third-party services that help us operate the platform, including:
- Stripe (payment processing, subscription billing, ACH transfers, Connect payouts)
- Firebase (push notifications via FCM, authentication)
- AI providers — OpenAI and Google (for Grace AI features, tone analysis, weekly digests)
- Email delivery services (for notifications, alerts, weekly digests, and account communications)
- Geocoding services (for converting GPS coordinates to addresses during exchange check-ins)
Legal Requirements: We may disclose your information if required by law, subpoena, court order, or other legal process.
Safety: We may disclose information if we believe it is necessary to protect the safety of any person, prevent abuse, or to prevent illegal activity.
Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our Service before your data is transferred and becomes subject to a different Privacy Policy.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

5. Data Security

We take the security of your data seriously and implement appropriate measures, including:

Encryption of data in transit (TLS/SSL) and at rest.
Private file storage with time-limited signed URLs for sensitive documents — URLs expire after a short period and must be regenerated for each access.
Dual-approval safeguards for deleting payments, documents, events, and caregiver access — preventing unilateral evidence destruction. Both co-parents must approve before records are permanently removed.
Immutable message records that cannot be edited or deleted after sending, ensuring court-admissible integrity.
Comprehensive audit logging of all actions (logins, logouts, creates, updates, deletes, exports, session events) with forensic-grade timestamps for complete accountability.
Role-based access controls (RLS) limiting data visibility to authorized users only, enforced at the database level.
Automatic session expiration after 5 minutes of inactivity, with forced re-authentication.
Unique, randomly generated tokens for calendar feed authentication — revocable and regeneratable at any time.
Secure authentication via third-party providers with no passwords stored by Kinnekted directly.
Address confidentiality options for users with protective orders or safety concerns.

While we strive to protect your information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

6. Subscription & Billing

Subscription plans (monthly, yearly), free trials, and promotional codes are managed through Stripe. We store your subscription status, plan type, trial dates, promotional code usage, and cancellation dates on your user profile.
All payment processing for subscriptions is handled entirely by Stripe. We do not store credit card numbers, CVVs, or full bank account details.
Stripe may collect and process your payment information according to the Stripe Privacy Policy.
When you cancel your subscription, you retain access until the end of your current billing period. Your data is preserved and accessible if you resubscribe.
Free trial periods are offered to new users. No credit card is required to start a trial.

7. Calendar Synchronization

Kinnekted offers the ability to subscribe to your co-parenting calendar from external calendar applications (Google Calendar, Apple Calendar, Outlook, and others) via an authenticated iCal feed URL.
The feed URL contains a unique, randomly generated token tied to your user account. Anyone with this URL can view your Kinnekted events in read-only format.
You can regenerate your calendar feed token at any time from Settings, which immediately revokes access from any previous subscribers.
External calendar applications may cache and periodically re-fetch your feed data. Kinnekted does not control the caching or refresh behavior of third-party calendar applications.
You may also subscribe to external calendar feeds (iCal URLs from other services). Those URLs and fetched event data are stored to display a combined calendar view within Kinnekted.

8. GPS & Location Data

The Exchange Check-In feature collects precise GPS coordinates, accuracy readings, and timestamps only when you explicitly initiate a check-in action. Location tracking is never performed in the background.
GPS data may be reverse-geocoded using third-party services to provide human-readable addresses.
Check-in records (including coordinates, addresses, timestamps, type, photos, and notes) are stored as part of the co-parenting record and are accessible to all participants in the relevant child's network.
Check-in data may be included in court-access reports and data exports.
You can enable or disable the Exchange Check-In feature at any time from Settings. When disabled, no location data is collected.

9. Push Notifications

Kinnekted uses Firebase Cloud Messaging (FCM) to deliver push notifications to your device.
When you enable push notifications, your FCM device token is stored on our servers and associated with your user account.
Push notifications may be sent for: new messages, payment requests, event reminders, document expiration alerts, caregiver approval requests, exchange check-in reminders, and other important updates.
You can customize notification preferences (email notifications, push notifications, and notification types) from the Settings page.
You can revoke push notification permissions at any time through your device's system settings or within the app.

10. Data Retention

Active Accounts: We retain your data for as long as your account is active and as needed to provide the Service.
Messages and Audit Logs: Messages are immutable and retained as part of the court-admissible record. Audit logs are retained for the lifetime of your account. These records cannot be individually deleted to preserve legal integrity.
Exchange Check-In Records: GPS check-in data is retained for the lifetime of your account as part of the court-admissible record.
Payment Records: Payment and expense records are retained for the lifetime of your account for legal documentation and tax purposes.
Documents: Documents in the Document Vault are retained until explicitly deleted through the dual-approval process, or until your account is deleted.
Grace AI Conversations: AI conversation history is retained while your account is active. You can disable Grace AI to stop generating new conversation data.
Account Deletion: You may request permanent deletion of your account through Settings by typing "DELETE" to confirm. Upon deletion, we will remove your personal data within 30 days, except where retention is required by law or for legitimate legal purposes (e.g., ongoing court proceedings). Active subscriptions are automatically cancelled upon account deletion.
Inactive Accounts: We may delete accounts that have been inactive for an extended period after providing notice.

11. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights:

Access: Request a copy of the personal data we hold about you.
Correction: Request correction of inaccurate or incomplete data through the Settings page or by contacting us.
Deletion: Request deletion of your personal data through the account deletion feature in Settings, subject to legal retention requirements and the dual-approval safeguards described above.
Data Export: Export your data (messages, payments, events, documents, activity logs, exchange check-ins, and audit trails) in PDF format through the Settings page, Court Access Portal, or individual export features throughout the app. You can customize which data sections, children, and date ranges to include in exports.
Data Portability: Download your calendar data via the iCal feed for use in external applications.
Opt-Out of AI: Disable Grace AI features at any time in Settings. When disabled, no data is sent to AI providers.
Push Notifications: Manage or disable push notifications through your device settings or the app's notification preferences page.
Email Notifications: Customize which email notifications you receive through the Settings page, including weekly digests, event reminders, and payment alerts.
Calendar Feed: Revoke external calendar access at any time by regenerating your calendar feed token.
Address Confidentiality: Mark your address as confidential to prevent it from appearing on any reports or exports.
Language Preference: Change the interface language at any time from Settings. Language preference is stored on your profile.
Marketing Communications: Opt out of promotional emails by following the unsubscribe link in any marketing email.

12. Children's Privacy

Kinnekted is designed for use by adults (parents, guardians, and caregivers) to manage co-parenting responsibilities. The Service is not intended for direct use by children under 13 (or the applicable age in your jurisdiction). We do not knowingly collect personal information directly from children. Child-related data entered by parents and caregivers is protected by the same security and access controls described in this policy, including role-based permissions and dual-approval deletion safeguards.

13. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have different data protection laws. By using the Service, you consent to the transfer of your information to these countries. We take steps to ensure your data receives adequate protection in accordance with this Privacy Policy. Our Service supports 25+ languages and is used by families internationally; data processing infrastructure is located in the United States.

14. Third-Party Links and Services

The Service may contain links to third-party websites or services that are not operated by us, including:

Stripe for payment processing and subscription management
Google, Apple, and Microsoft calendar services for iCal feed subscriptions
Discord for community engagement
Firebase for authentication and push notification delivery
Third-party AI providers for Grace AI features

We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access.

15. Cookies and Tracking Technologies

Kinnekted uses local storage (localStorage) to store your authentication tokens, theme preferences, language settings, and other session-related data on your device.
We use custom analytics event tracking to understand how features are used and improve the Service. This data is aggregated and does not include personally identifiable information beyond your user ID.
We do not use third-party advertising cookies or trackers.

16. Disclaimer of Liability

Kinnekted is a communication and organizational tool for co-parenting. The Service, including Grace AI, does not provide legal, medical, financial, therapeutic, or professional advice. You should consult qualified professionals for advice specific to your situation. Kinnekted is not a substitute for legal counsel, therapy, or mediation services.

While we design features to support court-admissible record-keeping (immutable messages, audit trails, GPS check-ins), the admissibility of any records in a legal proceeding is ultimately determined by the applicable court and jurisdiction. Kinnekted does not guarantee that records generated through the Service will be admissible in any specific legal proceeding.

Kinnekted is not responsible for the actions, communications, or conduct of any users of the Service. Users are solely responsible for the content they create, share, and transmit through the platform.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We may also send you a notification through the Service or via email. Your continued use of the Service after changes are posted constitutes your acceptance of the revised policy.

18. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at:

Email: Kinnekted@firstcoastlaw.org
Phone: 904-624-1349

Back to Home