Privacy Policy
Version 2.0 · Last updated: 23 September 2026
The short version. Kindred is built for parents by a small Swedish company. We collect the minimum we need to help your family find good places and good ideas: your account details, the little you tell us about your children (first name, birth month and year — never more), and the content you choose to share. Your data lives in the EU, we never sell it, and your children's information never leaves Kindred for advertising. Analytics run only if you say yes. You can see, correct, or delete everything, any time.
1. Who we are
Kindred — including Kindred Explore, Kindred at Home, and the website at heykindred.app — is operated by Synova Technology AB (org. nr 559403-0552), Björkrisvägen 16, 167 66 Bromma, Sweden ("Kindred", "we", "us"). We are the data controller for the personal data described in this policy.
You reach us at hello@heykindred.app.
One Kindred account works across all Kindred products. This policy covers them all.
2. What we collect
Your account. Your name, email address, and password credentials (handled by our authentication provider — we never see your password). Optionally, your home city and region.
Your children. Only what you choose to add: each child's first name and birth month and year. We never ask for full birth dates, and we never collect any information directly from children. The apps are built for parents and caregivers — account holders must be 18 or over.
If you use Kindred Explore. Venues you save, reviews and photos you share, and — with your permission — your device's precise location, used to centre the map and show places near you. We do not keep a history of your movements, and your device location is not stored on our servers. Saving a Home Location or Saved Location is always your explicit action.
If you use Kindred at Home. Activities you save, complete, and rate; tips and photos you share; and your generator preferences (time, energy, involvement).
If you visit heykindred.app. The email address (and optional city and country) you give us when joining the waitlist.
Technical data. With your consent, anonymous analytics events (pages viewed, features used). Error reports when something breaks (via Sentry), which include technical details about the failure but are not used to profile you.
3. Why we use it, and the legal basis
Under the GDPR we need a legal basis for each purpose:
| What we do | Why | Legal basis |
|---|---|---|
| Provide your account and the apps' features | So Kindred works for your family | Contract (Art 6(1)(b)) |
| Personalise suggestions using your children's ages | Age-appropriate venues and activities | Contract with you, the parent |
| Highlight venues, activities, and other Kindred products suited to your children's age ranges, including clearly labelled sponsored placements | Showing you things your family is likely to enjoy | Legitimate interest — you can turn off personalised promotions in settings at any time |
| Show your first name on content you share | Community trust | Contract |
| Moderate content and prevent abuse | Keeping the community safe | Legitimate interest (Art 6(1)(f)) |
| Secure our systems and fix errors | Reliability and safety | Legitimate interest |
| Measure how the apps are used (analytics) | Improving Kindred | Consent (Art 6(1)(a)) |
| Measure and run our own advertising | Reaching other parents | Consent |
| Feature community content in our marketing | Showing real experiences | Legitimate interest for content in which no one is identifiable (including after we blur faces), with an opt-out in settings; your separate consent for anything identifiable and for any photo showing a child (see our Terms) |
| Send you the newsletter / waitlist updates | You asked us to | Consent |
Where we rely on consent, you can withdraw it at any time. Where we rely on legitimate interest, you can object (see section 8).
4. Promises we make
- We never sell your data.
- Your children's information never leaves Kindred for advertising. We do not share it with advertisers, venues, or ad networks — including Google.
- Inside Kindred, we may use your children's age ranges (never their names) to highlight venues, activities, and other Kindred products that suit your family. Anything a venue has paid for is always labelled, and you can turn off personalised promotions in settings.
- Our apps contain no ad networks and no tracking-based ads.
- With your consent, we use Google tools to measure and run our own advertising outside the apps — never using your children's information.
5. Children's data
Kindred is used by parents, not by children. We hold the minimum about your children that makes suggestions useful: a first name and a birth month and year. We never collect data from children, never build profiles of them for anyone else, and never share their information for advertising. The only promotional use is the one described in section 4: using age ranges inside Kindred to highlight things that suit your family, which you can switch off.
Photos you share may include your children. Sharing a photo is always your active choice, and our Community Guidelines explain the rules that protect everyone's children. Photos are only used in our marketing if no one in them can be identified — we blur faces and remove identifying details first, and a person checks every image before use — or if you have given separate, recorded permission for that photo. Any photo showing a child, blurred or not, is only ever used with your permission.
6. Who processes your data
We use a small set of service providers (processors). Where a provider processes data outside the EU/EEA, the transfer is protected by the EU–U.S. Data Privacy Framework and/or EU Standard Contractual Clauses.
| Provider | What it does | Where |
|---|---|---|
| Supabase | Database, authentication, file storage | EU (Stockholm) |
| Vercel | Website and app hosting | EU/US (global delivery) |
| OpenAI | Powers AI features (chat assistant, activity suggestions). API data is not used to train their models; retained at most 30 days for abuse monitoring | US |
| Analytics and our own advertising measurement — only with your consent | EU/US | |
| Mapbox | Maps, geocoding, and place search in Kindred Explore | US |
| Sentry | Error monitoring | US |
| Kit | Waitlist and newsletter emails | US |
Venue data in Kindred Explore also comes from the Foursquare Open Source Places dataset — that is data flowing to us about places, not your data flowing out.
We will tell you about material changes to this list (for example, changing AI provider) by updating this policy and noting it in the changelog.
7. How long we keep things
| Data | Kept for |
|---|---|
| Your account, children's details, saved content | Until you delete them or your account. Deleted data disappears from live systems immediately and from encrypted backups within 30 days |
| Venue information you contribute (opening hours, amenities, accessibility, location, and venue photos with no people in them) | Remains in Kindred after you delete your account, no longer linked to you |
| Ratings | Removed with your account; they remain only as part of anonymous totals (for example, "12 parents recommend") |
| Reviews, tips, and activities you publish | When you delete your account, we remove the link to you and strip personal details (such as names, ages, and health information) so the text is anonymous. Anything we cannot reliably anonymise is deleted |
| Photos showing people | Deleted with your account |
| Waitlist email | Until you get access or unsubscribe |
| Analytics data (Google Analytics) | 14 months |
| Error reports (Sentry) | 90 days |
| Consent records | For as long as we need to demonstrate your consent, then deleted |
8. Your rights
You have the right to access your data, correct it, delete it, restrict or object to processing, take it with you (portability), and withdraw consent at any time without affecting your use of Kindred. Most of this you can do directly in the apps; for anything else, email hello@heykindred.app and we will respond within one month.
If you are not happy with how we handle your data, you can complain to the Swedish supervisory authority: Integritetsskyddsmyndigheten (IMY), Box 8114, 104 20 Stockholm.
9. Security
Your data is stored in the EU (Stockholm) with industry-standard encryption in transit and at rest. Database access is protected by row-level security, so your family's data is only ever readable by you. Photos are stored with authenticated access controls.
10. Changes to this policy
When we change this policy, we update the version and date above and keep a changelog. If a change is material, we will tell you in the apps or by email before it takes effect.
11. Contact
Synova Technology AB (org. nr 559403-0552), Björkrisvägen 16, 167 66 Bromma, Sweden. Email: hello@heykindred.app