KinboardUK GDPR
Your data and your rights
Kinboard is built for UK families and follows the UK General Data Protection Regulation and the Data Protection Act 2018. This page explains how, and how to use your rights. The full detail is in our privacy policy.
Who's responsible
Pixel Owl is the data controller for Kinboard. Contact: support@pixelowl.dev.
What we hold, and why
| Data | Why | Legal basis | Kept |
|---|---|---|---|
| Email address | Signing in | Contract | Until you delete your account |
| What your family adds | Sharing the diary in your family | Contract | Until deleted |
| Health details you choose to add | Keeping them to hand for your family | Explicit consent | Until deleted |
| Wrong invite codes typed | Stopping code guessing | Legitimate interests | About a day |
| Emails you send us | Helping you | Legitimate interests | Up to two years |
Your rights, and how to use them
- Access and portability. In the app: Settings, Save a backup. This gives you everything in one file. Or email us for a copy.
- Rectification. Edit anything in the app, or ask us.
- Erasure. In the app: Settings, Delete my account. This removes your account straight away, and your family's shared data if you're the last grown-up in it.
- Withdraw consent. Delete health details from a profile at any time.
- Restriction and objection. Email us and we'll stop or limit what you ask.
We answer requests within one month and don't charge for them. We may ask you to email from the address you sign in with, so we know it's you.
Children's data
Children don't use Kinboard themselves and have no accounts. Parents and carers add information about their own children and decide who in the family can see it. We follow the spirit of the ICO's Age Appropriate Design Code: no profiling, no advertising, no tracking and nothing shared outside the family.
Processors
Supabase (database, sign in and files, London) and Apple (purchases and notifications). We have data processing terms with each. We don't use any advertising, analytics or AI services.
International transfers
Your family's data is stored in the UK. We don't transfer it abroad, except where Apple processes purchase information under its own terms.
If something goes wrong
If there's a breach that puts your data at risk, we'll tell the ICO within 72 hours and tell you without delay.
Complaints
Please tell us first and we'll put it right. You can also complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint, 0303 123 1113.