Privacy Policy

1. Information we collect

We collect information you provide when you create and use KinPilot, such as account details, family profiles (including children, added by an adult family member), reminders, documents, health records, recipes, vehicle information and preferences. We also collect technical information needed to operate and secure the service, such as session, device and security logs.

2. Google account and Calendar data

If you choose to connect Google Calendar, KinPilot requests read-only access to the calendars you authorize. We use this data only to display and synchronize selected calendar events inside your family workspace.

• We do not ask for or store your Google password.
• Google access and refresh tokens are encrypted at rest.
• You choose which Google calendars are visible in KinPilot.
• Calendar access is read-only; KinPilot does not modify Google Calendar events in this integration.
• You can disconnect Google Calendar at any time from KinPilot or revoke access from your Google Account.

3. How we use information

We use personal information to provide KinPilot features, synchronize family data, send requested reminders and notifications, process subscription payments, improve reliability, prevent abuse and protect accounts. We do not sell personal information and we do not use Google user data for advertising.

4. Google API Services User Data Policy

KinPilot use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide or improve user-facing features that are prominent in KinPilot.

5. The Pilot AI assistant

When you ask the Pilot AI assistant a question, KinPilot retrieves only the data relevant to that question, not your whole family’s records. Health, medical-provider and insurance information is never sent to the external AI provider, and we do not use your family’s data to train any AI model.

6. Data sharing and service providers

We do not sell personal data. We share the minimum data necessary with the following service providers, each limited to the information needed to perform their function:

• Stripe — subscription payment processing.
• DeepSeek (AI provider) — approved task instructions and minimized, pseudonymized non-health facts needed for eligible Pilot AI requests; raw family identifiers and the raw user message are not sent.
• Microsoft Azure Document Intelligence — optional document analysis, when enabled.
• Google — Sign in with Google, and optional Calendar sync (see above).
• Apple — Sign in with Apple, iOS subscription purchases and purchase verification, and push notifications.
• SMTP2GO — transactional email delivery.
• A WhatsApp messaging integration we operate ourselves, for the reminder notifications you opt into.

7. International data transfers

Some of the providers above may process data outside your own country. Where required, we rely on appropriate contractual and legal safeguards for those transfers.

8. Data storage and security

Family data is logically isolated by family workspace. We use access controls, field-level encryption for sensitive data, encrypted secrets and tokens, private object storage, malware scanning for uploaded files, and other security controls appropriate to the service. No online service can guarantee absolute security, so we continually review and improve these safeguards, including reducing what leaves KinPilot’s systems in the first place.

9. Retention and deletion

We retain data while your account or family workspace is active and as needed to provide the service. If you cancel your subscription, KinPilot retains your household data for 90 days before it becomes eligible for permanent deletion, which still requires explicit administrator approval — see the Billing, Cancellation & Data Retention Policy for the full timeline. You can permanently delete your KinPilot account from Settings → Identity & security. If you are the billing owner of a shared household, billing ownership must first be transferred so deletion does not remove other members’ shared data. A household that belongs only to the deleting account is permanently removed with its stored files. Sign in with Apple authorization is revoked as part of deletion when connected. You may also contact us using the address below.

10. Your choices and rights

Depending on your location, you may have rights to access, correct, delete or export personal information and to object to or restrict certain processing. You may also withdraw connected-account permissions at any time.

11. Children and family profiles

KinPilot may contain profiles for children created and managed by a parent or guardian, not by the child directly. KinPilot does not knowingly collect information directly from a child. The account holder is responsible for having the appropriate authority to add and manage a child’s information.

12. Changes to this policy

We may update this Privacy Policy as KinPilot evolves. Material changes will be reflected by updating the date on this page and, when appropriate, by providing additional notice.

13. Contact

For privacy questions, data access or deletion requests, contact: [email protected]. KinPilot is a DreamtecLabs product.