Draft

Privacy

Last updated 19 October 2026

This is a draft written for the private alpha, in plain words. It has not been reviewed by a lawyer yet, and the full privacy policy will replace it before the beta. If anything here is unclear, write to [email protected] and we will answer in person.

The short version

Kinsort is a private place for a family and its closest friends. We do not run ads, we do not sell anything about you, and we have no one to sell it to. You pay for Kinsort, so you are the customer.

What we hold

What we can and cannot see

Your family’s photos are encrypted with a key that is unique to you. We can unlock them to make your book and send grandma’s email. We will not for anything else, we have no advertisers who would want us to, and there is a button that gives you everything back.

To be plain about the limit: we hold the keys, so Kinsort is not end-to-end encrypted. Your trust rests on how we run the business, on the encryption of each person’s data, on erasure, and on your ability to leave with everything.

Leaving, and taking everything

Who else touches your data

We use a small number of services to run Kinsort: storage and delivery of files, a database host, a server host, an email service, and Apple’s and Google’s push notification services. Payments, when they start, go through Apple and Stripe. A full list with the reason for each will be published as the subprocessors page before the beta.

Who can use Kinsort

Account holders must be 18 or older. Kinsort has no accounts for children. During the alpha and beta, Kinsort is available in the United States only.

This website

This site sets no cookies and runs no tracking scripts. Our host counts page visits on the server, without identifying anyone, and we ask for nothing else.

Contact

[email protected]