Privacy policy

Kin, operated by dhailabs · Last updated October 26, 2026

Kin (kin.dhailabs.com) is a private, mindmap-style family board. This page explains what Kin stores, who can see it, and how to get it removed. Questions: [email protected].

What we store

Your Google email address and name. You sign in with Google. Kin asks Google only for basic sign-in information (the openid email profile scopes) and keeps your email address and your name. Kin never sees your Google password, and it accepts only Google accounts with a verified email address.
Board content. What you and your family add to a board: the board name, person cards (name, notes, birth year, color, position), and the relationship links between them with their type (for example parent, sibling, or married). We also record when the board was last saved and the email address of the person who saved it.
Dates of birth. Who can see and change a date of birth depends on whether the card has been claimed by someone's Gmail:
- Unclaimed cards: only the board owner can add or change the date of birth, and only the board owner can see it.
- Claimed cards: once a person connects their Gmail to a card, only that person (the card owner) can change its date of birth. The board owner can no longer see or edit it, but can still see that the card is claimed and whether it is confirmed.
- Show or hide: a card owner chooses whether to show their date of birth to everyone on that board. It is hidden by default, so only the card owner sees it. If they choose to show it, the board owner and members can see it but not change it. Cards that were already claimed before this setting existed start hidden.
These rules are enforced by our server: a date of birth is only ever sent to people allowed to see it. A keyed one-way hash of each date of birth is kept so a member can confirm which card is theirs by entering their own name and date of birth; the server checks the match and never tells the member what is on file. If you are invited and add your own card, the name and date of birth you enter are stored on that card.
Members and invites. The Gmail addresses an owner invites, pending invites, the members of each board (email and join date), and which member is linked to which card. Kin does not send email: owners share invite links or messages themselves.
Security records. Short-lived counters that limit repeated card-confirmation attempts, and a per-board log of the last 50 card-link events (user id, time and outcome, with no names or dates of birth).
Phone number (optional, not currently offered). The code includes an optional phone sign-in that is turned off today. If it is turned on and you add a number, Kin stores the verified number, and a number once used stays reserved to your account. One-time codes are stored only as hashes for 10 minutes, and your IP address is used for rate limiting in counters that expire within an hour. If it is turned on, we will name the text-message provider on this page first.

Where it is stored

Kin uses two service providers:

Google handles sign-in.
Cloudflare hosts Kin and stores accounts and boards (Cloudflare Pages, Workers and Workers KV). Your data is stored on Cloudflare’s global network, so it may be stored and processed in data centers outside your country. Like any web service, Cloudflare processes technical request data such as IP addresses to deliver and protect the site.

If we add another provider, such as for analytics or text messages, we will list it here before it is used.

Cookies and browser storage

kinboard_session: keeps you signed in. Signed, HttpOnly, Secure, SameSite=Lax, and expires after 30 days. It holds only your account id and an expiry time.
kinboard_oauth_state: a random value used for about 10 minutes during Google sign-in to protect against forged sign-in requests.
Your browser’s local storage keeps an offline copy of boards you open, the board you last used, and a flag that you have signed in on this browser before (so you skip the intro page). Signing out removes the cached boards.

Kin uses no advertising or tracking cookies.

Analytics

Analytics are currently off. If they are turned on, Kin will use a cookieless analytics service that counts page views and three events (landing page viewed, Google sign-in clicked, board created). It sends the page address without any query string, so invite links are never included, and it sends no names, email addresses, or board content. We will name the analytics provider on this page before turning analytics on.

Who can see your information

Board members. A board is visible only to its owner and the people the owner invites. Members can view and edit the board, but cannot see or change dates of birth except their own, or ones a card owner has chosen to show. Everyone on a board can see the email addresses of its owner and members.
dhailabs. As the operator, dhailabs can technically access stored data. We access it only to run, secure, and support Kin, or when the law requires it.
dhailabs never sells personal data and never uses it for advertising.

Keeping and deleting data

When an owner deletes a board, it becomes read-only and can be restored for 30 days. After that it is permanently deleted by a daily cleanup job, including its cards, invites, and member links.
Owners can remove members and revoke invites at any time.
There is no self-serve account deletion yet. Email [email protected] from your Google address to delete your account or get a copy of your data. We handle deletion and data-copy requests within 30 days of receiving them. To prevent account takeover, your Google email address stays reserved to your Kin account even after deletion.

Children

You must be at least 13 years old to create a Kin account. Boards often include cards about children. Owners decide what goes on a card, and should add only what the family is comfortable sharing with the people they invite.

Changes and contact

If this policy changes, we will update this page and its date. Contact dhailabs at [email protected].