Old photograph: a plain white gabled house with shutters, a family standing in the yard in front of it, about 1885
Carpenter family in front of their house, about 1885.

What you put in your Family File is end-to-end encrypted. We can’t read it.

Effective date: October 15, 2026.

Privacy policy

The short version

This policy explains what Kinsake (“we”, “us”) collects when you use getkinsake.com, app.getkinsake.com and our emails, what we do with it, and the choices you have.

  • What you put in your Family File is end-to-end encrypted. We can’t read it.
  • We keep only what we need to run Kinsake: your account, a title and a date for each reminder, and the routing details listed below.
  • We don’t sell your information, share it for advertising, or use it to train AI. No ads, no third-party trackers.
  • You can export or delete your information at any time.
Seen by
CarsOpens with Incapacity

Car registration

Reminder · Nov 30

Renew online at the DMV, about $96. Plate 7KJM214, paid from joint checking.

What reaches our server

Car registration · Nov 30

Everything else is sealed on your device. We can’t read it, and neither can anyone who breaks into our servers.

You can seal the title too. It then shows as “Sealed item”.

Maya, your sister · Emergency, Incapacity

Car registration

Reminder · Nov 30

Renew online at the DMV, about $96. Plate 7KJM214, paid from joint checking.

Opened for Maya after the 7-day wait you set. Read-only, and logged.

One reminder, as you see it, as our server sees it, and as Maya sees it after a handover you allowed.

What we can see

Everything Kinsake’s servers can read, why, and an example
ForWhat we can seeWhyFor example
RemindersA title and a date for each reminderSo we can remind you on timeCar registration · Nov 30
Reminder emails and notificationsThey carry only that title and dateCar registration · Nov 30
Your householdWho is in your household and Circle, and each person’s roleSo the right people are invited and toldSam · co-owner
The email address of each person you inviteSo your invitation reaches themMaya · trusted contact
Each item’s level, whose it is, when it changed, how large its files areSo a handover releases only what you choseIncapacity · Alex · 2.4 MB
HandoversRequests, wait times, confirmations and check-insSo we can hold the wait and tell youEmergency · 24 hours
The log of who opened whatSo you can read itMaya opened Emergency
Each helper task, with the name and contact you give for the helperSo a helper can open that one task from a linkMeals · Jordan
Signing inYour email addressIt’s your account name, and how handover mail reaches youYour email
That you sign in with Google, if you choose GoogleSo Google can confirm it’s youGoogle
The name you choose to show your CircleSo your Circle knows it’s youAlex
A name and platform for each signed-in device, and when it last syncedSo you can see and remove devicesAlex’s laptop · web
SecurityYour IP address and browser details, handled by our hosting providerTo deliver the site, stop bots on our forms and limit sign-in attemptsKept at most 30 days
WaitlistYour email address, the answers you choose and your consentSo we can email you about the launchOur household · one-time purchase
CountingHow many people visit, where they came from, how many households use each featureTo improve Kinsake, on our own servers, without cookiesNever your File, titles or email
Everything elseItem details, documents, photos, voice notes, passwords and device codes, For later messages, the call logSealed on your device before uploadSealed

No ads, no trackers. We never sell your data, and it’s never used to train AI. No analytics script. We don’t set cookies. The sign-up form loads Cloudflare Turnstile, a bot check, only when you start filling it in.

Old photograph: a family of eight standing on the lawn and porch steps of a two-storey clapboard house, 1908 Old photograph: a man, a woman and two children in front of the porch of a small house behind a wooden fence, 1924 A page from an old family photograph album with four studio portraits of small children
Charles Smoot family in front of their house, 1908. John Anderson and family in front of their house, 1924. A page from the Born family photograph album.

What we collect

What you give us

  • Waitlist: your email address, the answers you choose on the form (including whether you’d prefer a one-time purchase), and your consent to hear from us.
  • Your account: your email address and the name you choose to show your Circle. If you sign in with Google, Google shares your name and email address with us.
  • Your Family File: items, documents, photos, voice notes, passwords and device codes, For later messages and call logs are encrypted on your device. We store only the sealed copy and can’t read it.
  • If you use Kinsake only on your device: your File stays in your browser, encrypted, and nothing in it is sent to us. We see only the page loads any website sees. Your browser can delete stored data (Safari may do so after 7 days without a visit), so keep the backups the app reminds you to make.
  • Reminder titles and dates: we can read these so we can remind you. Keep sensitive details out of a title, or seal the title; it then shows as “Sealed item”.
  • People you invite: their email address and the role you give them.

What we receive when you use Kinsake

  • Routing details we need to run the service: which household and Circle you belong to and your role; for each item, its handover level, whose it is or whether it’s shared, when it changed and how large its files are; handover requests, waits, confirmations and check-ins; and the log of who opened what.
  • Helper tasks: each task you hand to a helper, with the name and contact you give for them, so the helper can open that one task from a link. Helper tasks never hold sealed details.
  • Your devices: a name and platform for each signed-in device and when it last synced, so you can see and remove devices.
  • Security and abuse prevention: our hosting provider processes your IP address and browser details to deliver the site, check that forms aren’t filled in by bots (Cloudflare Turnstile) and limit sign-in attempts. We keep these logs for at most 30 days.
  • Simple counts: how many people visit, where they came from (the referring site and link tags), their country, and how many households use each feature. These counts never include what’s in your File, reminder titles, email addresses or names, and households are counted with a code that changes every week.
  • Cookies and browser storage: one sign-in cookie on app.getkinsake.com, and the landing page remembers your light or dark choice in your browser. No advertising or tracking cookies.

We never ask for anyone’s Social Security number. If you keep one in your File, it is sealed and we can’t read it.

How we use it

  • To run Kinsake: store your sealed File, send reminders, run handovers and check-ins, deliver For later links, and keep your account secure.
  • To send the emails you need: reminders, your weekly digest, and handover and security alerts. If you joined the waitlist, we email you about the launch; you can unsubscribe at any time.
  • To improve Kinsake, using only the simple counts above.
  • To prevent abuse and to follow the law.

We don’t use your information for advertising, and we never use it to train AI models.

Who we share it with

We don’t sell or rent personal information, and we don’t share it for advertising. We share it only with:

  • Service providers that help us run Kinsake, under contracts that limit how they use it:
    • Cloudflare: hosting, database and file storage (sealed copies only), email delivery, bot checks and our simple counts.
    • A backup email delivery service, for handover and security emails if Cloudflare’s email is down. We’ll name it here before we start using it.
    • Your browser’s push service (for example Apple, Google or Mozilla): delivers notifications, which are encrypted so it can’t read them.
    • Google: only if you choose to sign in with Google.
    • Stripe: after the beta, when paid plans start; we never see your full card number.
  • The people you choose: your co-owner and the people in your Circle see what you give them, as explained on our How protection works page. People you invite see your name and email address.
  • When the law requires it: we respond only to valid legal process. Because of encryption, we can only provide what we can read: account and routing details, and sealed copies we can’t open.
  • If Kinsake is sold or merged: your File stays sealed, so a new owner can’t read it any more than we can. This policy and our shutdown pledge carry over. If a new owner wants to use your information in a different way, we’ll tell you at least 90 days ahead, and you can export and delete everything first.

Your choices and rights

  • Export: download everything at any time, in formats you can open without us. Exports are made on your device.
  • Delete: delete your account from the Security center. It’s removed from our live systems right away and from our backups within 30 days.
  • Correct: edit your File and your account at any time.
  • Emails: unsubscribe from the waitlist and the weekly digest at any time. While you have an account, we still send handover and security emails, because they protect you.
  • Your privacy rights: wherever you live in the US, you can ask us what we hold about you, ask for a copy, ask us to correct it or ask us to delete it. Write to hello@getkinsake.com; we’ll confirm the request comes from you. We won’t treat you differently for asking.

We don’t sell or share personal information for advertising, so there is nothing to opt out of. We also honor the Global Privacy Control signal.

How long we keep it

  • Your account and File: until you delete them.
  • Waitlist: until you unsubscribe or ask us to delete it, or 12 months after launch, whichever comes first.
  • Simple counts: kept only as totals.
  • After a death: a household stays so the family can use what was handed over. We keep it as long as at least one person with access signs in within 3 years. After 3 years with no sign-in, everyone with access gets three emails over 90 days, each with a link to export, and then we delete it. A living co-owner can delete it at any time; when no owner is alive, two people who hold After death must agree (one if there is only one).

Security

Your File is sealed on your device before it reaches us, and only you and the people you choose can open it. Our How protection works page explains exactly what we can and can’t see, and the one honest limit of our design.

One honest limit: the wait before a level opens is enforced by our server. If someone in control of our server worked together with one of your trusted contacts, they could open that person’s levels early. They could never open a level you didn’t give that person, and we still can’t read your sealed items. A later update will require two trusted contacts to open After death.

Children

Kinsake is for adults 18 and over. We don’t knowingly collect personal information from children under 13. If you think a child has signed up, write to us and we’ll delete the account. Families can keep information about their children in their File, where it’s sealed.

Handover and the people you choose

When you set up a handover, you choose who may see which parts of your File, and after what wait. Kinsake doesn’t verify deaths or illness itself: a level opens when someone you chose asks for it and nobody stops the request in time, and After death also needs a second person you chose to confirm.

Changes to this policy

We’ll post changes on this page. For important changes, we’ll email you before they take effect.

Contact

hello@getkinsake.com

Please also read our Terms of service.