Last updated: August 27, 2026
We collect your name, email address, and the photographs you submit to us for digitization. We also collect basic usage data such as sign-in times to maintain security.
We use your email address to authenticate you and send service-related communications. We use your photographs solely to provide the digitization and hosting service you requested. We do not sell, rent, or share your personal data or photographs with third parties for marketing purposes.
Your digitized photographs are stored securely on Cloudflare R2 object storage. All files are encrypted at rest and in transit. Access is restricted to authenticated members of your family gallery only.
Your gallery is private by default. Only people you explicitly invite by email can access it. We do not make your photos public or share them with other KinPhotos users.
This one is optional, and it starts switched off. If you turn it on for your gallery, we measure the faces in your photos and give each photo a fingerprint, so we can suggest who might be in a picture and point out when the same print has been scanned twice. Those measurements are kept with your own gallery and used for nothing else. They are never compared against another family's photos, never used to advertise to you, and never sent to an outside AI or cloud-vision service. We do the work ourselves. Suggestions stay suggestions: nothing is written onto a photo until someone in your family says yes. Turn the feature back off and every face measurement and photo fingerprint we made is deleted. The names and dates your family added stay, because those are yours.
Your password is hashed using bcrypt before storage. We never store or transmit your password in plain text and cannot recover it if lost.
We use Supabase for database hosting, Cloudflare R2 for photo storage, Resend for transactional email, Vercel for application hosting and traffic analytics, Stripe for payments, and Google Ads to measure our advertising. Payments are taken on Stripe's own checkout page: Stripe receives your name, email address and card details directly, and we never see or store your card number. Each of these services has its own privacy policy and security practices.
We retain your data for as long as your account is active. If you wish to delete your account and all associated data, contact us at privacy@kinphotos.com and we will process your request within 30 days.
You have the right to access, correct, or delete your personal data at any time. You may also request a copy of all data we hold about you. Contact us at privacy@kinphotos.com to exercise these rights.
We use a session cookie to keep you signed in. Google's advertising tag sets a first-party cookie so we can tell which ads lead to sign-ups. We do not use third-party advertising cookies, and we do not use cookies to follow you around other websites.
For privacy-related questions or requests, email privacy@kinphotos.com.