Privacy Policy

Last updated April 28, 2026

KINFOLX is a family photo vault. This policy explains what we collect, why, and how we keep your memories safe. Questions? Email support@kinfolx.ai.

What we collect

• Account info: email, display name, profile photo (if you provide one).
• Photos and videos you upload: scanned family photos, imported images and videos from your device library (iCloud, Google Photos, or Gallery), and any metadata (timestamp, who uploaded it, storage path).
• Face data: we run face detection on your photos to cluster people. The face thumbnails and mathematical face embeddings are stored with your family vault.
• Cross-vault face matching (opt-in): when you connect your vault to another KINFOLX user’s vault and both of you turn on face matching, KINFOLX checks the faces in your photos against theirs to suggest shared people in your trees. Face matching is off by default and requires explicit opt-in by both sides for each connection. Only matched face previews (thumbnail crops) are shared with the other side during your review — raw face embeddings never leave their original vault. You can turn matching off at any time from connection settings; existing confirmed links remain by default to avoid breaking already-merged trees, with an option to unlink everything at the same time.
• Tree data: names and relationships you add (parents, partners, children, friends). Only members of your vault can see it.
• Memorial content: obituary text you write, photos you choose for a memorial, and AI-edited variants. Memorials stay private to your vault unless you explicitly mark one public, in which case the memorial page becomes visible to anyone with the link.
• AI-generated derivatives: restored photo variants (Legacy plan) and AI-polished obituary drafts are saved alongside your originals. You can discard these at any time. Originals are never overwritten.
• Pending-edit requests: when a non-owner family member suggests a tree change, we save the request (name, role, who suggested it) until the owner approves or declines.
• Subscription status: whether your account has a paid plan and which entitlement, received from RevenueCat.
• Usage data: basic crash and error logs so we can fix bugs. No advertising trackers.
• Location (live events only): when you host a live event and tap "Use my current location," we read your device's one-time coordinates to set the venue geofence. We never read your location passively or in the background. Attendees who opt into live photo sync allow their photos' EXIF GPS coordinates to be checked against the geofence on-device — those coordinates are never sent to KINFOLX unless the photo itself matches and uploads.
• Live event photos (auto-collected): when you opt into live photo sync for an event, we scan your camera roll for photos taken inside the event's time window AND inside the venue geofence. Only matches are uploaded. You can turn this off at any time, and uploads can also be moderated or removed by the event host.

What we do with it

• Show your photos and tree to you and the people you invite.
• Auto-cluster faces so you don't have to tag every photo.
• Keep the service running (auth, storage, face processing).
• Notify you about activity in your vault (new invites, approvals, important account changes).

What we do NOT do

• Sell your data or photos.
• Share your data with advertisers.
• Use your faces to train third-party AI models.
• Access your photos for any purpose other than running KINFOLX.
• Track your location passively or in the background. We only read location when you explicitly tap a button asking us to (e.g. "Use my current location" in live event setup).

Where it lives

Photos, videos, and restored variants are stored in Google Firebase Storage. Face embeddings, tree data, and memorial content live in Google Firestore. Face detection uses Google Cloud Vision; face embeddings, memorial text editing, and photo restoration use Google Vertex AI (Gemini and Imagen models) inside our own Google Cloud project. Your data is not sent to any third-party AI provider outside the Google infrastructure our app runs on.

Children

KINFOLX is intended for people 16 and older. Family photos may include children, and that's expected — but the person running the account must be an adult who has the right to upload those photos. We do not knowingly create accounts for users under 16.

Your rights

• Access & export: email support@kinfolx.ai and we'll send you a copy of your data.
• Delete: tap Settings → Delete account in the app. This removes your profile, your uploaded photos, your memberships in every vault, your pending requests, and your AI-generated derivatives. Photos other members uploaded stay with them.
• Leave a vault: you can leave a shared vault without deleting your account.
• Take a memorial private: you can toggle a memorial back to private at any time from the memorial editor, which removes it from public view.
• Discard AI output: restored photo variants and AI-polished obituary edits live alongside your originals. You can keep the original, keep the AI version, or delete either.

Subscriptions

Paid plans (Lite, Family+, and Legacy), the memorial public-URL products ($49.99 first year, $10.99 yearly renewal), and the Event Boost consumable ($9.99 for +500 photos and +5 GB per live event) are billed through the App Store or Google Play. We receive subscription and purchase status via RevenueCat; we do not see your payment card details. Promo codes redeemed in-app grant entitlements through the same system and are tracked so we can honor your access period. Refund requests are handled by Apple / Google per their platform policies.

Changes

If we update this policy in a way that affects what we collect or how we use it, we'll notify you in the app. Your continued use of KINFOLX means you accept the updated policy.