KINDRED← Home

Privacy Policy

Effective September 6, 2026. This policy covers the KINDRED website (including the founding-family pre-order) and the KINDRED mobile app. KINDRED is operated by Viacheslav Nechyporenko, an individual based in Vancouver, British Columbia, Canada (“we”, “us”).

The short version: we collect what we need to run a private video mailbox between your family members and nothing else. No ads, no data sales, no tracking across other apps or sites. Children never create accounts. You can have everything deleted by emailing vvnechyporenko@gmail.com.

1. What we collect and why

On the website.

  • Waitlist: your email address and language preference, so we can tell you when KINDRED opens.
  • Founding-family pre-order: your email address; your answers to three questions (where the grandparents live, the children’s age bands, how the family stays in touch today); the price and wording variant you were shown; and, if you arrived from a link or ad, its campaign tags (UTM parameters). We use these to decide whether and how to launch, and to contact you about your reservation.
  • Payment card: when you reserve a spot, your card is entered on a page hosted by Stripe and stored by Stripe. We never see or store card numbers. Stripe gives us a customer reference, the card brand, and its last four digits. Nothing is charged until we open your invite, and we email you before any charge.
  • Site analytics: page views, referrer, country, and device type through Vercel Web Analytics, which does not use cookies or identify individuals. We also record which step of the pre-order page was reached, without any personal details until you enter your email.
  • One functional cookie (kp, 30 days) remembers which price you were shown so it does not change while you are deciding. It is not used for advertising.

In the app.

  • Account: your email address, used to sign you in with a magic link. No password is stored.
  • Family: the display names you give family members, and invite links you create.
  • Video letters, challenges, and reactions: the recordings you make and their metadata (who sent them, when, how long). They are stored privately and shown only to the family members you invited. We do not watch, scan, transcribe, or analyse your videos, and we do not use them to train anything.
  • Push notification token: a device identifier used only to deliver “new letter” notifications to your own devices.
  • Usage analytics and crash reports: anonymous events such as “recording started” or “playback finished” and crash diagnostics, so we can find and fix bugs. These never include video content, names, or email addresses.

2. Children

  • Every account is created and controlled by a parent or legal guardian. Children do not sign up, and we do not knowingly collect personal information directly from a child under 13 (or under 16 where that is the local threshold).
  • Children use the app on a parent’s device in a simplified “kid mode” that the parent turns on. There is no child login, profile, or friend list, and no way to contact anyone outside the family the parent set up.
  • Recordings a child makes are made under the parent’s account and are the parent’s to view, share within the family, or delete.
  • We show no advertising to anyone, use no advertising SDKs, and never track children across other apps or websites.
  • A parent can review or delete everything connected to their family at any time (see section 7).

3. Legal basis

We rely on your consent (when you join the waitlist, reserve a spot, or record a video) and on our legitimate interest in running and securing the service and in deciding whether to launch it. For payments we process data to perform the agreement you enter when you reserve a spot. In Canada we follow PIPEDA and British Columbia’s Personal Information Protection Act. If you are in the European Economic Area or the United Kingdom, the GDPR rights in section 7 apply to you.

4. Who we share it with

We do not sell personal information and we do not share it with advertisers. We use these providers to run KINDRED, each bound by its own privacy terms and handling only what its job requires:

  • Vercel (website hosting and cookie-free site analytics, United States)
  • Neon (website database: waitlist and pre-order records, United States)
  • Stripe (payment card storage and processing)
  • Supabase (app database, sign-in, and private video storage; videos are served through short-lived signed links, never public URLs)
  • Expo (push notification delivery through Apple and Google)
  • Resend (transactional email such as sign-in links)
  • PostHog and Sentry (anonymous usage analytics and crash reports in the app)

We may also disclose information if the law requires it, or to protect the safety of a child or the security of the service.

5. Where it is stored

Our providers store data in the United States. If you use KINDRED from Canada, Europe, or elsewhere, your information is transferred there and protected by the providers’ standard contractual safeguards. Data in transit is encrypted (TLS), video files are private objects reachable only through expiring links, and access to production systems is limited to the operator.

6. How long we keep it

  • Waitlist and pre-order records: until we launch and either convert your reservation into an account or you cancel, and in any case no longer than 12 months after the pre-order closes. Saved cards are released at Stripe at the same time if no charge was made.
  • Video letters: until the sender or a parent in the family deletes them, or you ask us to delete the family. Recordings that were started but never sent are removed automatically within a few weeks.
  • Accounts: until you ask us to delete them. Deletion removes the family, its members, and all recordings; backups age out within 30 days.
  • Analytics and crash data: kept in anonymous form for up to 12 months.

7. Your rights

Wherever you live, you can ask us to: tell you what we hold about you; correct it; delete it; give you a copy in a portable format; stop using it for a particular purpose; or withdraw consent you gave earlier. Email vvnechyporenko@gmail.com from the address on the account and we will act within 30 days and confirm when it is done. Parents can exercise these rights for their children. You can also complain to your privacy regulator: in Canada the Office of the Privacy Commissioner, in British Columbia the OIPC, and in the EEA or UK your national data protection authority.

8. Security incidents

If a breach creates a real risk of significant harm to you, we will notify you and the relevant regulator as the law requires, and tell you what happened and what we are doing about it.

9. Changes

We will post any change here with a new effective date. If a change materially affects how we use your information, we will email account holders and pre-order customers before it takes effect.

10. Contact

Viacheslav Nechyporenko
Vancouver, British Columbia, Canada
vvnechyporenko@gmail.com