Privacy Policy

1. Who We Are

KinPass Inc. ("KinPass," "we," "us," or "our") operates the KinPass mobile application and website located at kinpass.io. We are a care coordination platform that helps families and organizations share critical care information with caregivers.

For questions about this policy, contact our privacy team at: [loading...]

2. Information We Collect

Account Information

When you create a KinPass account, we collect your name, email address, and password (stored as a cryptographic hash). We may also collect your role (parent, caregiver, organization administrator) to personalize your experience.

Care Profile Information

KinPass is designed to store detailed care information that you choose to enter, including:

• Medical history, conditions, and diagnoses
• Medication names, dosages, and schedules
• Allergy information and severity levels
• Emergency contacts and healthcare providers
• Behavioral triggers and calming techniques
• Daily routines, sleep schedules, and meal plans
• Activity logs and caregiver notes
• Documents, records, and uploaded files

This information constitutes Protected Health Information (PHI) under HIPAA and is treated with the highest level of privacy protection.

Usage Information

We collect information about how you interact with the app — which features you use, when you log in, and general performance data — to improve our service. This data is anonymized and aggregated.

Device Information

We collect standard mobile device identifiers, operating system version, and app version to provide technical support and ensure app compatibility.

3. How We Use Your Information

We use the information we collect to:

• Provide the KinPass care coordination service
• Enable authorized caregivers to access care information you've shared
• Power AI-driven care insights and behavior pattern analysis
• Send notifications about medications, care activities, and account security
• Improve app performance and develop new features
• Comply with legal obligations
• Provide customer support

We do not sell your data. We do not use your care profile data for advertising. We do not share your health information with third parties for their commercial purposes.

4. Information Sharing

We share your information only in the following circumstances:

With Caregivers You Authorize

When you invite a caregiver to access a care profile, they can see the information you've explicitly shared with them at their permission level. You control who has access and can revoke it at any time.

Service Providers

We use trusted third-party services to operate KinPass, including cloud infrastructure (Google Firebase), AI processing (Anthropic), email delivery (Resend), and payment processing (RevenueCat / Apple). These providers are contractually bound to protect your data and may not use it for any other purpose.

Legal Requirements

We may disclose information if required by law, court order, or to protect the safety of a person.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before this occurs and your data remains subject to this privacy policy.

5. HIPAA Compliance

KinPass operates on HIPAA-eligible infrastructure provided by Google Cloud (Firebase). For enterprise and healthcare organization customers, we offer a Business Associate Agreement (BAA) that formalizes our HIPAA compliance obligations.

If you are a healthcare provider or organization covered by HIPAA and would like to enter into a BAA with KinPass, please contact: [loading...]

All PHI stored in KinPass is encrypted at rest and in transit. Access is controlled by role-based permissions that you set. Our audit trail tracks every access event.

6. Children's Privacy (COPPA)

KinPass is designed to store care information about children, but the service is used by adults (parents, guardians, and caregivers). We do not knowingly allow children under 13 to create accounts.

Care profile data about a child is controlled by the parent or legal guardian who created the profile. That person has full control over what information is stored and who can access it.

If you believe a child under 13 has created an account without parental consent, please contact us immediately at [loading...]

7. Data Retention

We retain your care profile data for as long as your account is active. When you delete your account, your data is permanently deleted within 30 days, except where we are required to retain it by law.

You can export your care data at any time from within the app settings. This is your data and you have the right to take it with you.

8. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of the data we hold about you
• Correction: Request that we correct inaccurate data
• Deletion: Request that we delete your account and associated data
• Portability: Receive your data in a portable format
• Restriction: Request that we limit processing of your data
• Objection: Object to certain types of processing

To exercise any of these rights, contact: [loading...]

9. Security

We use industry-standard security measures to protect your data:

• AES-256 encryption at rest and TLS 1.3 in transit
• Role-based access controls limiting who can see what
• Multi-factor authentication available for all accounts
• Regular security audits and penetration testing
• Complete audit trail of all access events

If you discover a security vulnerability, please report it responsibly to [loading...]

10. Cookies

Our website uses essential cookies to maintain your session and remember your preferences. We use analytics cookies (anonymized) to understand how visitors use our website. We do not use advertising cookies or tracking pixels.

See our Cookie Policy for details.

11. International Users

KinPass is operated from the United States. If you are accessing our service from outside the US, please be aware that your data will be processed and stored in the United States. We comply with applicable data transfer requirements.

12. Changes to This Policy

We may update this privacy policy from time to time. When we make significant changes, we will notify you by email and display a notice in the app. Your continued use of KinPass after changes take effect constitutes your acceptance of the revised policy.

13. Contact Us