Privacy Policy

Kinfolio

1. Overview

Kinfolio (the "App") is a privacy-first personal CRM for friends and family. It is built so that we physically cannot access your data: the App has no servers, no accounts, and no trackers. This policy explains what data the App processes and where it lives.

2. Data We Collect

Kinfolio does not collect, transmit, or sell personal data.

• No registration or account is required;
• Nothing you write in the App is sent to the developer's servers — there are none;
• No third-party analytics or advertising SDKs are used;
• No cross-app or cross-site tracking.

A few features can move data off the device — only at your explicit request, and only to destinations you own or choose yourself (your own cloud storage, or an AI provider used with your own key). They are described below; all of them are optional and off by default.

3. Your Notes Stay on Your Device

Everything you record — people, facts, photos, journal entries, dates, tags — is stored in a local database on your device. The App never uploads it anywhere unless you turn on sync (section 4).

4. Sync Through Your Own Cloud (Optional)

You can sync your data between your devices through your own cloud storage — your personal iCloud or your personal Google Drive app folder. We operate no sync servers and are not part of this path at all.

• Before anything leaves the device, the data is end-to-end encrypted (AES-256-GCM) with a key derived from a 12-word recovery phrase that is shown only to you and kept only in your device's secure storage (Keychain/Keystore);
• Neither we nor the cloud provider can read the content — without the phrase the archive is unreadable;
• Signing in with Google (if you choose Google Drive) is used solely so the App can write to its own hidden app-data folder in your Drive;
• Turning sync off with "start fresh", or deleting the App's data in your cloud, removes the archive.

5. AI Features (Optional, Your Own Key)

AI features do nothing until you set them up, and nothing is ever sent in the background.

• With your own API key (e.g. Anthropic or OpenAI): the text you explicitly submit — a description of a person, or a request for conversation topics — is sent from your device directly to that provider, under your own account and that provider's privacy terms. We never see, store, or relay it. The key is kept in your device's Keychain/Keystore;
• If a "Kinfolio server" mode is offered in the future, this policy will be updated first, describing exactly what passes through it and how long it is retained.

6. Device Permissions

• Contacts (optional) — only if you start the import yourself. Names, photos, and birthdays of the contacts you select are read once and processed on-device; nothing is sent over the network. You can revoke access in system settings at any time;
• Calendar (optional) — only if you enable the pre-meeting briefing. Events are read on-device to match meeting participants with your people and to schedule a local reminder; no calendar data leaves the device;
• Camera / photo library (optional) — only to set a person's photo. The image is stored in the local database and goes nowhere else (unless you sync — encrypted, to your own cloud);
• Notifications — birthday, keep-in-touch, and briefing reminders are local notifications scheduled on the device itself. No push servers (APNs/FCM) are involved.

7. Backups, Import & Export

Backups are created only at your request. Each backup is a single file encrypted with AES-256-GCM using a password that only you know, and it is stored wherever you choose to send it (a file, your cloud, a messenger). Without the password the backup cannot be read — by anyone, including us. Plain JSON/CSV export and import are likewise manual, user-initiated actions: the App only creates the file and hands it to you.

8. Your Rights and Control

Since all data lives with you, you are in full control: export a backup at any moment, or delete the App — all data disappears with it. If sync was on, the encrypted archive stays only in your own cloud, where you can delete it yourself or erase it from the App's settings. There is nothing for us to "request" or "erase" — we hold nothing.

9. Children

The App is not directed at children under 13 and does not knowingly collect personal data from children.

10. Policy Changes

If future versions add features that move data in new ways, we will update this policy before launching them and describe exactly what goes where. The "Last updated" date will be revised accordingly.

11. Contact

Email: hollybyte.com@gmail.com