Kinferry

Privacy

Effective 29 October 2026

Kinferry holds a family's calendar, which means it holds where your children are and when. This page says exactly what is stored, who sees any of it, and how to delete any or all of it.

Who is responsible

Kinferry is run by Maroxa Partners L.L.C-FZ, Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, U.A.E., telephone +971 4 834 1131, which is responsible for your data under data-protection law (the "controller"). For anything on this page, write to hello@kinferry.com.

What is stored, and why

What	Why it exists
Your account — email address and the name you sign up with. Your password is stored as a one-way hash and is never visible to us. If you sign in with Apple or Google instead, your login will be faster but you have no Kinferry password; we keep what Apple or Google passes on: an identifier for your account with them, your email address (with Apple's ‘Hide My Email’, a private relay address in place of your own), and your name. For Apple we also keep one sign-in token, used only to tell Apple to end the connection when you close your account.	So you can sign in, be invited, and reset a password.
Your family — the name you give your family in the app, and the people you add to it: their names, the colours you choose for them, and whether each is an adult or a child, as decided by you. Also the family's time zone, taken from a parent's iPhone.	An event has to belong to somebody. The time zone is used to work out dates in your local time.
Your events — titles, dates and times, venue names and addresses, map coordinates, notes, and who each event is for.	It is a calendar that calculates travel times.
Your home location — the address and coordinates you set during setup.	Drive times are measured from home. It is set once, by you, on a map; the app does not track your position and never asks for location permission.
Things you share in — photos, PDFs, Word/Excel/PowerPoint files and message text you forward into the app, kept with the event they made.	So the original is there when somebody asks "where did that time come from?"
Calendars you subscribe to — the feed address and the events it returns.	To import school and club fixtures, and to notice when one is withdrawn, amended or added.
Reminders — the events you asked to be reminded of, how long before, and when each reminder went out; and for each phone that receives them, its notification address from Apple, its time zone and whether it uses a 12- or 24-hour clock.	So a reminder reaches your phone at the right moment, in your own time. It shows on the lock screen like any notification; your iPhone's settings can hide the preview. Signing out removes the phone; closing your account deletes all of it.
Small operational records — when a drive time was last calculated, how much of Kinferry's voice allowance a family has used this month, counted in characters and in answers, a log of who changed which event when a parent has asked to be told, and each person's answer to the app's question about the AI-powered assistant and reader (allowed, or never to be asked again), with when it was given and the version of the words they saw; for a child, the parent's decision, and which parent made it and when.	Overall cost monitoring, and answering "who moved this?", and sending to the AI only what a person, or for a child a parent, has allowed.
Error reports — when the app fails: the error, the screen it happened on, and the app and phone-software versions. Email addresses and sign-in tokens are masked, and nothing links a report to you, your phone or your family.	To find and fix faults.

There is no advertising identifier, no device fingerprint, no location history, and no behavioural profile. Kinferry does not track you across other apps or websites and lets nobody else do so, so there is nothing for a "Do Not Track" setting to switch off. The app asks for the microphone and speech recognition only when you dictate, the photo library only when you pick a photo, permission to send notifications only when you turn on a reminder, your permission before anything first goes to the AI-powered assistant or reader, and — only where the law requires an age check — your age range when you open an account and set up a family. Nothing else.

Why Kinferry may use it

To give you the service you signed up for — your account, your family's calendar, the reader, the assistant, the voice, drive times, reminders and account emails — because that is our agreement with you. For the people you add to your family, children included, because you chose to run your household's calendar through this app, which gives you and us a legitimate interest in doing so, with the safeguards on this page: no advertising, no profiling, a parent in control, and deletion at any time. For error reports and usage counts, because we have a legitimate interest in keeping Kinferry working, secure and affordable. You can object to any use that rests on a legitimate interest (see What you can ask for). An email address and a name are needed for an account; everything else is up to you, though drive times need a home location. Kinferry makes no decisions about anyone by automated means: when it reads a message or answers a question it only proposes, and a person confirms.

Who else it goes to

Kinferry uses a small number of specialist services. Each gets only what it needs. Supabase, Anthropic, ElevenLabs, Resend, Cloudflare and Expo handle it on Kinferry's behalf under data-processing agreements; Google, Apple and Yahoo handle what they receive under their own privacy policies.

Service	What reaches it
Supabase (hosting, database, sign-in, file storage) — on Amazon Web Services in Tokyo, Japan.	Everything in the table above. This is where Kinferry's data lives.
Anthropic (Claude, the AI behind the reader and the assistant).	Only what you ask of it. When you share something: the message, photo or document, any note you add, and the names of the people in your family, so it can tell who an event is for, and, if you add information to an event you already have, that event. When you amend proposed events in words: your instruction and those events. When you press Go in the assistant: what you said or typed, with your calendar as you see it — every event from two weeks back onwards, with its title, times, place and who it is for (or only “Busy” where that is configured as being all you can see) — and the names of your family's people and connected calendars, so the AI-powered assistant can answer. The assistant never sends your notes or attached files. Anthropic's commercial terms, which govern Kinferry's use, do not allow it to train its models on what Kinferry sends (anthropic.com/legal/commercial-terms, section B). Nothing goes to Anthropic until you have allowed it in the app; for a child's own login, until a parent has.
ElevenLabs (the voice).	The text of the answer to be read aloud. No recording of you is ever sent: dictation is done by your own phone. ElevenLabs' ability to use that text to train its models is deactivated for Kinferry's account. ElevenLabs keeps a copy of the text and the audio in its history for Kinferry's account; Kinferry deletes that copy every day.
Google Maps Platform.	The place names and addresses you type, venue coordinates and your home coordinates — to suggest event locations as you type the location name, find them on the map, and work out drive times. They are sent from Kinferry's server, not from your phone. Google handles them under its own privacy policy (policies.google.com/privacy) and may use them to improve its services.
Google (signing in with Google).	Only if you sign in with Google. Google confirms to Kinferry who you are, and so knows that you use Kinferry and when you sign in. Google's sign-in software in the app sends Google your Google account identifier and your phone's internet address, from which Google may estimate your general location to prevent fraud, and, by Google's own description, information about your device and the sign-in for its own analysis. Google handles all of this under its own privacy policy (policies.google.com/privacy).
Resend (email delivery).	Your email address and the contents of account emails — confirmation, invitation, password reset. Resend may use them only to deliver the email and may not sell them. It keeps its own record of which address each email went to and when, and uses that record to run its service and to guard against fraud, spam and misuse.
Cloudflare (the website kinferry.com, and forwarding of email sent to hello@kinferry.com).	When you visit the website: your internet address and browser, as with any website; the site sets no cookies and runs no tracking. Email you send to hello@kinferry.com passes through it on the way to our mailbox.
Yahoo Mail.	Emails to hello@kinferry.com, and our replies to them, use Yahoo Mail's servers, under Yahoo's own privacy policy.
Expo (app updates).	Each time the app starts, it asks Expo whether a newer version of the app's own code is ready. The request carries your phone's operating system, the app's version and a random code that stands for this installation of the app, not for you or your account, together with your phone's internet address, as with any internet request. Nothing about you or your family is sent.
Apple.	What the App Store records about a download, under Apple's own privacy policy. The map you set your home on is Apple Maps. If you turn on a reminder, Kinferry sends it to your iPhone through Apple's push notification service: your phone's notification address and the reminder's words, for example “Maxi needs to leave in 1h for football”. A reminder never says where. If you sign in with Apple, Apple confirms to Kinferry who you are, and so knows that you use Kinferry; when you close your account, Kinferry tells Apple to end that connection. If you chose ‘Hide My Email’, every email Kinferry sends you passes through Apple's relay.

Kinferry is run from the UAE, and these services are abroad for most users. Your data is stored in Japan by Supabase, whose contracting company is in Singapore; Anthropic, ElevenLabs, Resend, Google and Expo process what they receive mainly in the United States; Cloudflare and Yahoo, both US companies, may handle it in several countries. For users in the EU, the UK and Switzerland, these transfers are covered by the European Commission's standard contractual clauses (with the UK and Swiss additions), and for ElevenLabs, Resend, Google, Cloudflare and Expo also by the EU–US Data Privacy Framework; for Yahoo, by that Framework alone. The clauses are published by the European Commission (eur-lex.europa.eu/eli/dec_impl/2021/914/oj) and form part of each company's data-protection terms: supabase.com/legal/dpa, anthropic.com/legal/data-processing-addendum, elevenlabs.io/dpa, resend.com/legal/dpa, cloudflare.com/cloudflare-customer-dpa, expo.dev/terms and business.safety.google/controllerterms.

Dictation

When you dictate, the recognition is done by your phone's own speech recognition, not by Kinferry. On an iPhone that may involve Apple's servers, depending on your device and settings; Apple's privacy policy governs that part. Kinferry receives only the finished text.

Children

Kinferry is a tool for a parent to run a household's week. It is not aimed at children as an audience, and it is not designed for a child to sign up on their own: the app is designed for an account to be opened by an adult first, who creates the family and is responsible for it. Only adults may open an account; the terms of use say so. Where the law requires an age check, the iPhone is asked for the person's age range when they open an account, and anyone under 18 is refused; the answer is used for that check only and is not kept.

A child is added by a parent. The parent puts the child in the family in order to add and allocate events to that child, decides which events are theirs, and decides whether the child gets a login of their own and, if so, what they may see and change once they have logged in. What a parent enters about a child is entered at that parent's sole discretion, is kept only to run the family's calendar, and can be seen only by the people the parent allows.

A child's own login. Before a child's login is created, the parent confirms that the child is at least 13 or, if younger, that they are the child's parent or legal guardian and consent to the login. The parent also decides whether the child may use Kinferry's AI-powered assistant and reader, and can change that at any time in the app; if the parent allows them, the parent also confirms knowing that the login includes Kinferry's AI-powered assistant and reader. We then email the parent, at their own account address, what the login lets the child do, what will be held and which services process it, for their information and records; at the same time we send the child their invitation. The child accepts it by choosing a password or, if their own Apple or Google account uses the invited address, by signing in with that account. Once the child has signed up, we email the parent again to confirm it and to say how to withdraw. We keep a record of the parent's consent.

What is held about a child. Their name, the colour the events of that child are shown in the calendar, the events they belong to, and whatever a parent has put in those events. If the parent has given them a login: also the email address they were invited at, a password stored as a one-way hash (incapable of being read by the app or its developers) or, if they sign in with Apple or Google instead, the sign-in details listed under “Your account” above, and anything the child types into an event they are allowed to change or, if a parent allowed it, asks the assistant, the parent's decision on the AI-powered assistant and reader, and, if they turn on reminders, the reminders they set and their phone's notification address. Nothing else is asked of a child, and nothing is inferred about one.

What a child is never subject to. No advertising and no advertising identifier, no analytics or tracking by Kinferry, no profile built from their behaviour, nothing bought or sold, no public page, no feed, and no way for anybody outside their own family to see them or reach them. A child's login opens their own account page and nothing else within Settings: they cannot connect or remove a calendar, invite anybody, or change what another person sees. As far as the parent allows, a child can add events and change or delete the ones that are theirs alone; and, only if the parent allows the AI-powered assistant and reader, ask the assistant about the plan and share a message or document in, the same as is available for a parent. Without them, the child has no microphone and nothing they share is read. What they ask or share goes to Anthropic's AI as described under “Who else it goes to”, and answers read aloud go to ElevenLabs. If a child signs in with their own Apple or Google account, Apple or Google handles that step under its own terms for that account.

Removing a child. What is held about a child is kept for as long as they are in the family, unless a parent removes it sooner. A parent can see and correct what is held about their child, take the child out of the family, or take away their login, in the app at any time. Taking a child out deletes them and the events that were theirs alone; shared events stay, without them. Closing the family account deletes all of it. If you believe a child has opened an account on their own, or a child's details are in Kinferry without their parent's knowledge, write to hello@kinferry.com: they will be deleted, and you will be told when it is done.

Deleting everything

Settings › Account › Close account, in the app. It deletes your login and your membership of any family. If you signed in with Apple, Kinferry also tells Apple to end its sign-in connection with Kinferry. If you were the last parent in a family, that family goes too: its events, its people, its calendar connections, and the files stored with its events. The logins of the other people in that family are deleted with it, unless they also belong to another family. If the family carries on without you, the events you added stay with it, and so does your name in the record of changes a parent asked to be told about. This cannot be undone, and there is no backup copy kept for you afterwards. If you would rather have a copy of your family's data before you go, ask at hello@kinferry.com and we will send it.

Otherwise, data is kept for as long as the family uses Kinferry. Events stay until somebody deletes them; a calendar connection can be removed with or without the events it brought in. An account that has neither created nor joined a family is deleted after 30 days, or at once if it was refused on grounds of age. Emails to hello@kinferry.com are kept for 12 months after the conversation ends; requests about your data, and our answers, for 3 years, to show they were handled.

What you can ask for

You can ask to see what is held about you and get a copy in a common, machine-readable format; have it corrected or deleted; have its use limited while a question is sorted out; or object to how it is used. A parent can ask on a child's behalf. Most of it you can simply do yourself in the app, which is the faster route; otherwise write to hello@kinferry.com and you will get an answer from a person within one month — for a complicated request up to two months more, and you will be told why within the first month. We may ask you to confirm who you are. If you are unhappy with how your data is handled, tell us first: we acknowledge a complaint within 30 days. You can also complain to the data-protection authority where you live or work — in the UK the Information Commissioner's Office, in the EU your national authority.

How it is kept safe

• Everything travels encrypted between your phone, Kinferry and the services above, and is stored encrypted at rest by Supabase.
• Each family's data is fenced off in the database itself, not merely hidden by the app: a request for another family's events returns nothing.
• Within a family, a parent decides what each member sees — everything, times and places only, busy-only, or nothing — and what a person can amend, and that too is enforced by the database.
• Files you share in are kept in private storage. The app opens one only for a member of your family, through a link that stops working after an hour.
• When you choose a password, the app checks it against “Have I Been Pwned's” list of passwords exposed in other services' breaches. Your password is first turned into a scrambled code (a hash) on your phone, and only the first five characters of that code leave your phone — not the first five letters of your password, and never the password itself. Have I Been Pwned sees your phone's internet address, as any website would.
• Only Kinferry's developer can reach the database, to run and repair the service. Kinferry's data is not sold, rented or licensed to anyone, and is shared only as this page describes.

No system is perfect. If a security breach puts your family's data at risk, you will be told without undue delay — what happened, what it means for you and what you can do — and it will be reported to the data-protection authorities where the law requires.

Changes

We may update this policy from time to time. Whenever it changes, the app flags it in Settings until you have opened the new version. A change we reasonably believe matters to you — and always a new use of your data, a new service or country that receives it, a change in who runs Kinferry, or a change in how you exercise your rights — is flagged before it takes effect. We will not use data we already hold in a materially different way without asking you first.