Privacy policy

How Kinrova handles family, account and care-coordination information.

Last updated: 4 November 2026

Who is responsible

Tecnotrade S.r.l., Via Samoggia Vecchia 2, San Giovanni in Persiceto, Italy, is the controller for Kinrova. Simone Resca is the privacy contact. For access, correction, deletion, objection or privacy complaints, email support@kinrova.app and write “Kinrova Privacy”. Do not send passwords, sign-in codes or payment details.

Adults and children’s profiles

Accounts are for adults aged 18 or over. Children do not sign in: an adult creates and manages any child profile and must be entitled to provide the information. A profile may include a name or nickname, dates, routines, school or transport details and care needs. Enter only what is necessary and avoid health details, identity documents and intimate information.

Information and why we use it

We handle account and sign-in details, family membership, shifts, availability, care requests and acceptances, invitations, sync and support messages. Depending on what you enter, plans may reveal schedules, locations, travel or family routines. We use this information to provide and secure the service, share the plan with authorised members, send requested invitations and notifications, record responses, support users and administer store purchases. We do not sell family-plan information or use it for targeted advertising.

We rely on the steps needed to provide the service, legal obligations and proportionate security interests. We ask for consent where required by law and you may withdraw it. Some providers receive information only when you choose their sign-in, push notification or store-payment feature.

Sharing within a family

The family coordinator chooses whom to invite. A caregiver sees only the information needed for requests addressed to them; an invitation does not automatically give access to the whole family calendar or its history. Adult members of a shared plan can see information needed to coordinate care. Consider who will see information before adding another person’s details.

Service providers and locations

Kinrova is hosted on an October CMS server in France (OVH). A daily BackupManager process copies the October MySQL database and application files to Amazon S3 in Frankfurt, Germany. The configured rotation keeps all copies for 7 days, daily copies for 14 days, weekly copies for 8 weeks, monthly copies for 4 months and yearly copies for 2 years. A restore can reinstate information present in that snapshot; restored data must be checked against deletion requests. Backup restoration and deletion reconciliation have not been independently tested.

Depending on the feature used, providers include the October-configured email service, Google and Apple sign-in, Firebase Cloud Messaging and Apple Push Notification service, and Apple App Store or Google Play for purchases. These providers may process information in other countries under their own terms and safeguards. Kinrova does not receive full payment-card details from the stores.

Retention and deletion

We keep account and family-plan information while it is needed to provide an active plan. When an account or plan is closed, we revoke access and delete or anonymise information that is no longer needed, subject to other members’ legitimate plan records, legal duties and unresolved disputes. Technical security logs are kept only for operational and security needs and rotated under the server’s log settings. Support correspondence is retained only as long as needed to handle the request or a related legal matter.

Backup copies follow the rotation above and may therefore contain information deleted from the live service until the relevant copy expires. If a copy is restored, information in it may reappear and deletion requests must be applied to the restored service. Store records remain subject to Apple’s or Google’s retention policies.

Your choices and rights

Depending on the law that applies, you may ask to access, correct, delete or restrict your information, object to certain uses, receive portable data or withdraw consent. We may ask for proportionate identity verification. Some plan information may remain visible to other adult members where necessary for their own plan, with your identity removed or anonymised where possible. Deleting Kinrova does not cancel a store subscription; cancel it separately in the store account.

Contact support@kinrova.app. You may also complain to the Italian Garante, the UK Information Commissioner’s Office (ICO) or the Australian Information Commissioner (OAIC), as applicable.

Security and regional rights

We use access controls and security measures appropriate to the service, but no system can guarantee zero risk. UK users retain their applicable UK data-protection rights. Australian users retain rights available under Australian privacy and consumer law. Mandatory local rights are not limited by this policy.