Privacy policy
Kinally processes only what the family calendar, tasks and shopping list need in order to work. Each household's data is separated and visible only to its members.
Who the controller is
The controller is Hostinec Hub s.r.o., the operator of Kinally. For data protection questions, use the address on the Contact page.
What we process
We process only what the service needs. We do not collect location, we do not read other applications and we do not build advertising profiles.
| Category | Specific data | Where it comes from |
|---|---|---|
| Account | Email, name and profile identifier from your Google account | From you at sign-in |
| Household | Household name, timezone, member roles | You enter it when creating one |
| Profiles | Member or child name, profile type, colour | You enter it in the app |
| Calendar | Event title, time, location, notes, who drops off and collects, travel time | You enter it in the app |
| Tasks and shopping | Task title, owner, due date, state; list items | You enter it in the app |
| Invitations | Invitee email (optional), role, hash of a one-time token | You enter it when inviting |
| Activity records | Who created, changed or deleted a record in the household, and when | Generated automatically |
Data about children
A child's profile is created by an adult member and usually holds only a name or nickname and a profile type. Children have no account and do not sign in.
Information about where a child is, when, and who takes and collects them is the most sensitive data in the service. It is available only to members of that household and is never shared with third parties for any purpose beyond running the service.
Why we process it
| Purpose | Legal basis |
|---|---|
| Providing the service you signed up for | Performance of a contract (Art. 6(1)(b) GDPR) |
| Securing the service and preventing abuse | Legitimate interest (Art. 6(1)(f) GDPR) |
| Activity records of changes in a household | Legitimate interest — traceability in a shared space |
| Measuring website traffic | Consent (Art. 6(1)(a) GDPR) |
| Processing text you give the assistant | Performance of a contract — you trigger the feature yourself |
How long we keep it
Household data is kept while you use the service. When you leave a household, your membership is removed and your profile is detached from your account.
When you ask for your account to be deleted, we remove your memberships, detach your profiles, and delete in full any household where you were the only remaining member. We keep only a record that the deletion happened, with no personal data in it.
Who we share it with
We do not sell or share personal data for advertising. Data reaches only the processors the service cannot run without; the full list and their roles are on the Subprocessors page.
Text you give the assistant is sent to the language model provider with storage disabled, so it is not used for training. Do not put anything into the assistant that you do not want processed outside our infrastructure.
Your rights
- Access to the data we hold about you.
- Correction of inaccurate data — some of it you can edit in the app, the rest we correct on request.
- Erasure of your data and deletion of your account.
- Portability — an export in a machine-readable format.
- Restriction of processing and objection to processing based on legitimate interest.
- Withdrawal of consent to traffic measurement, at any time and without consequence.
- A complaint to your supervisory authority.
Security
Each household's data is separated at the database level by rules evaluated on every query, not in the application. Sign-in goes through Google; we store no passwords. Invitations are stored only as a hash, never as a usable link. Details are on the Security page.
Common questions
Do you sell data to advertisers?
No. We do not sell or share personal data for advertising and we do not build advertising profiles.
Can the operator see our calendar?
Access is restricted by database rules to household members. We access content only where strictly necessary to resolve a problem you report to us.
What happens to our data if we stop using the service?
You can export it and have it deleted. Without action from you it stays stored until you ask for erasure.