KinAgenda privacy policy

Effective and last updated: 12 October 2026.

Cozyapps is the studio name used by the independent developer of KinAgenda: Kids' Activities, based in Kazakhstan. In this policy, "we" means the individual operating KinAgenda under that name. This policy explains how we handle information when you use KinAgenda. Contact us at frenk.q8@gmail.com about privacy or your data.

Information we use

When you create an account, we process your email address, account identifier and sign-in information through Supabase. If you sign in with Google, Google supplies basic account details such as your email, name, account identifier and profile-image reference. We do not receive your Google password.

Your family plan includes the family name and time zone, children's names and colour markers, adult names and optional family labels, invitations, activities, locations you enter, recurring schedules, preparation lists, transport assignments and acceptance. We keep a change history and a record of confirmed imports so adults can understand what changed.

Photos are optional. We save a small profile image for an adult or child, rather than the original photo, and remove camera and location metadata from that image.

If you use message import, we process the text or screenshot you choose, any accompanying note, the extracted draft and your corrections. A screenshot may contain information about other people. Crop or remove unrelated personal information before uploading it.

If you enable notifications, we process a push token, an app-generated device identifier, account and session identifiers, notification preferences, the selected interface language and delivery records. These connect reminders and family updates to the right account and phone.

Our service providers may process technical information such as IP addresses, request times and error records to operate and protect their services. If you contact support, we receive your email and the information you include.

How we use information

We use this information to sign you in, maintain the family plan, share confirmed changes, coordinate transport, process imports you request, deliver optional notifications and respond to support requests. We also use account checks and limited usage records to prevent unauthorized access and control service usage.

KinAgenda does not sell personal information or include advertising. The current app has no purchase or subscription processing.

Sharing within your family

Adults who join your family can view and edit its schedule, preparation lists and transport plan. They can also see family profile photos and imported source material while it is available. The Admin can invite or remove adults and delete the family. Moderators can edit the plan and accept their own transport assignments.

Removing an adult ends their server access. A phone that is offline may still display its previously cached information until it reconnects and checks access. Information someone has copied or saved outside KinAgenda cannot be removed through the app.

AI processing

When you ask KinAgenda to create or update a draft from a message, our server sends OpenAI the text or screenshot, children's and adults' names and internal identifiers, the family time zone and a reference date. For an update, it also sends the selected activity and recurrence details needed to interpret the change. We do not send your password, sign-in tokens or profile photos in the extraction request.

AI can make mistakes. A draft changes the family schedule only after an adult reviews and confirms it. Manual entry remains available without AI processing.

We request that OpenAI does not store the response as saved application state. This does not mean zero retention. OpenAI's standard abuse-monitoring logs may contain input and output and normally remain for up to 30 days, with exceptions described in its data controls. Deleting a source in KinAgenda does not delete copies retained by OpenAI. OpenAI does not use API data for model training by default.

Service providers

• Supabase provides account authentication, database storage, synchronization and server functions.
• OpenAI processes the messages and screenshots you submit for AI drafts, with the context described above.
• Google provides optional Google sign-in and Firebase Cloud Messaging for Android push delivery. Our current support email is also hosted by Google.
• Expo's push service routes notifications to Android delivery services. Notification text is discreet and does not include children's names, activity names or addresses. Routing data includes family and occurrence identifiers.
• Resend delivers account emails through the configured email service.

These providers receive information needed for their services. They may process it in countries other than your own.

Storage and retention

We store shared KinAgenda data with Supabase in Ohio, USA. The app keeps a cached schedule and photos on your phone for viewing offline, plus unfinished input for recovery. Signing out clears that account's cached shared schedule, photos and editor drafts. Device preferences such as language and appearance can remain.

Shared schedules and profile photos remain until they are removed through the relevant controls or the family or account is deleted. Deleting a source does not cancel the activity confirmed from it.

Imported text, screenshots, unconfirmed drafts and captured review context expire 30 days after import. The app stops serving them at expiry. An hourly cleanup removes the retained source content and draft from active storage. You can remove them sooner from review or an activity's Original messages. The confirmed event, confirmation record and source link can remain in the family plan.

Registered push devices expire after 90 days without registration renewal. Our notification cleanup removes expired registrations and delivery jobs older than seven days. Family-level import usage counts remain for up to 60 days. They record usage counts rather than message contents.

We aim to remove support correspondence within 90 days after a request is resolved. If you request its deletion sooner, we remove it unless we need to keep specific information to meet a legal obligation or resolve a dispute. We explain any such exception when responding to your request.

Backup copies and provider operational logs follow separate retention schedules for operating and protecting their services or meeting legal obligations. Deletion from the active database does not mean immediate erasure of every backup or provider log. Contact us about a deletion request and we will explain any information that remains, the reason and its applicable retention period.

Permissions and security

KinAgenda uses the system image picker for the image you select. It does not read your whole photo library or private messaging accounts. You can type or paste information instead. The app does not request camera, microphone or device-location access. Android keyboard dictation is handled by your keyboard provider under its own settings and policies.

Notifications are optional. You can change KinAgenda notification settings or revoke notification permission in Android Settings.

We use encrypted network connections and backend account and family-access checks. Family information is not end-to-end encrypted. The service must process it to provide sharing and AI imports. We do not include raw family messages, screenshots, passwords or access tokens in application diagnostic logs.

Your choices and account deletion

You can correct family details, edit or cancel activities, remove imported sources and remove profile photos in the app. An invited adult can leave the family without deleting their account or the other adults' plan.

To delete your account, open Settings, My account, Account actions, then Delete account. You need an internet connection and a recent sign-in.

Deleting an Admin's account also deletes the family they own, including its shared schedule, imported sources, children's photos and invitations. Other adults' separate accounts remain. Deleting a Moderator's account removes their account, membership, account photo and associated account records. The remaining adults keep the shared family plan. Shared content and history can still refer to past activity, and imported source material remains until removal or its 30-day expiry.

You can also request deletion by emailing frenk.q8@gmail.com from the address used for KinAgenda. We may need to verify that you control the account before acting. Do not send your password or sign-in code. We aim to reply within two working days and complete a verified deletion request within seven calendar days. We follow any shorter deadline required by law. If a request needs more work or specific information must remain, we explain the reason and timing. See Delete your KinAgenda account.

Shared history or an imported message may still identify you after your account is deleted. Email us if you want personal information removed from those records. We review what needs to be removed while preserving the remaining adults' confirmed activities where appropriate, and explain any information that must remain.

Children and privacy requests

KinAgenda is for adult parents and caregivers. Children do not create accounts. Adults may enter children's names, photos and schedules, so the app does process information about children. Only add information you are entitled to share with the family members you invite. Contact us if you believe someone has supplied a child's information without authority.

Depending on where you live, you may have rights to access, correct, delete or obtain a copy of personal information, or object to or restrict its use. Email us to make a request. We may need to verify your identity and explain which shared family records are affected. Where applicable, you can also contact your local data-protection authority.

Changes

We will update this policy when KinAgenda's data handling changes and update its effective date. We will provide additional notice for material changes where required.