Privacy Policy

Last updated: February 26, 2026

1. Who We Are

KinHug ("we", "us", "our") is a private family memory sharing platform. For questions about this privacy policy, please contact us at support@kinhug.com.

2. What Data We Collect

We collect the following types of personal data:

• Account Information: Email address, first name, last name, password (hashed), and account creation date.
• User Content: Photos, voice recordings, text messages, and other memories you share within your family spaces.
• Family Data: Family names, descriptions, member relationships, and invitation emails.
• Technical Data: IP addresses, browser type, device information, and usage logs for security and service improvement.
• Payment Data: If you purchase products (e.g., yearbooks), we process payment information through Stripe. We do not store full credit card numbers.

3. Why We Collect This Data

We use your data to:

• Provide and maintain the KinHug service
• Authenticate your account and secure your data
• Enable family members to share memories privately
• Process payments and fulfill orders (if applicable)
• Send important service notifications and support emails
• Improve our service and prevent abuse

4. Legal Bases (GDPR)

Under the General Data Protection Regulation (GDPR), we process your data based on:

• Contract: To fulfill our service agreement with you
• Legitimate Interests: For security, fraud prevention, and service improvement
• Consent: For optional analytics and marketing communications (you can withdraw consent anytime)

5. Cookies and Consent

We use cookies and similar technologies for:

• Necessary: Session management, authentication, and security (required for service)
• Analytics: Understanding how our service is used (optional, requires consent)
• Marketing: Tracking conversions and advertising (optional, requires consent)

You can manage your cookie preferences at any time by clicking Cookie & Privacy Preferences in the footer.

6. Data Sharing

We do not sell your personal data. We share data only with:

• Service Providers: Hosting providers, email delivery services, and payment processors (Stripe) who help us operate the service
• Legal Requirements: When required by law or to protect our rights and safety

All service providers are contractually bound to protect your data and use it only for the purposes we specify.

7. Data Retention

We retain your data:

• While your account is active: All data is kept as long as you use the service
• After account deletion: Data is deleted within 30 days, except for backups which are retained for up to 90 days for security purposes
• Legal obligations: Some data may be retained longer if required by law

8. Your Rights

You have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data
• Erasure: Delete your account and data (via account settings)
• Portability: Export your data in a machine-readable format
• Withdraw Consent: Opt out of optional analytics/marketing at any time
• Object: Object to processing based on legitimate interests

To exercise these rights, contact us at support@kinhug.com.

9. Children's Privacy

KinHug is intended for use by families, including children under parental supervision. We do not knowingly collect personal data from children under 13 without parental consent. Parents and guardians are responsible for supervising their children's use of the service.

10. Security

We implement reasonable technical and organizational measures to protect your data, including:

• Encryption of data in transit (HTTPS)
• Secure password hashing
• Regular security assessments
• Access controls and authentication

However, no method of transmission over the internet is 100% secure. You are responsible for keeping your account credentials confidential.

11. International Transfers

If you are located in the European Economic Area (EEA), your data may be transferred to and processed in countries outside the EEA (e.g., for hosting). We ensure appropriate safeguards are in place, such as Standard Contractual Clauses, to protect your data in accordance with GDPR requirements.

12. Contact and Complaints

For questions, concerns, or to exercise your rights, contact us at:

Email: support@kinhug.com

If you are located in the EEA and believe we have not addressed your concerns, you have the right to lodge a complaint with your local data protection authority (e.g., Datainspektionen in Sweden).

13. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes by email or through a notice on our website. The "Last updated" date at the top indicates when this policy was last revised.