1. Who is responsible
Kinetwo is operated by Andrii Plashevskyi. Postal contact: Bulgaria, Varna, bul. Vladislav Varnenchik 36a, 9000. For privacy requests, email support@vickand.com. For general support, email support@vickand.com.
2. What we process
Depending on what you use, Kinetwo processes account and profile details from sign-in; membership and permissions in your shared space; plans, tasks, lists, calendar dates, goals, expenses, trips, packing lists, passes, photos and other records you choose to save. Records created in earlier versions can also include wishes, notes, polls, memories, vault items and time capsules.
Care records can include a name or nickname, birth date, care events, medicine entries, schedules, notes and attachments. A parent or legal guardian confirms their role before creating or transferring a child’s profile. Baby records can sync with the shared space and are visible to its invited member. A profile for another adult, including its medicine records and files, stays on the device and is not uploaded to Kinetwo or shared with a partner. Removing the app or losing the device may erase device-only records; operating-system backups may contain them.
Pass recognition runs on the device. A photo’s printed store and cardholder names may be read to suggest editable card details. Recognition does not send the photo, detected text or membership number to a merchant lookup service. If you save the photo and enable sync, it follows the same storage and sharing rules as other attachments.
We also process the minimum technical data needed for sync, security and delivery: device push tokens if you enable notifications, offline mutation identifiers, diagnostic errors without the content of your notes, and subscription status. Payment-card details are handled by the app store, not Kinetwo. Kinetwo does not create accounts for children; parents and legal guardians enter care information on their behalf.
3. Why we process it
We use information to provide the app, sync your records, apply your sharing choices, send reminders you enable, restore purchases, secure accounts, and respond to support or legal requests. Where required by law, we rely on performance of our agreement, legitimate security interests, your consent for optional permissions and sensitive information, or a legal obligation. Turning off optional notifications does not disable your records.
4. Sharing and service providers
Only people with access under the app’s permissions can see a shared record. Invitations use a private link: you do not need to enter your partner’s email address. The invited person signs in with their own account and chooses whether to join before viewing shared records. Older invitations may remain linked to an email hash until accepted or expired. Share an invitation only with the intended recipient.
We use Supabase for authentication, database, functions and private storage when connected services are enabled; RevenueCat for subscription entitlement status; Apple and Google for store purchases and sign-in where chosen; Resend for account and support email delivery where enabled; and APNs/FCM for enabled push delivery. Opening a map or searching for a place can send the selected coordinates, search text and your network request to the map provider, including OpenStreetMap services. Kinetwo does not collect location in the background. Each provider has its own privacy information.
We do not sell personal information, run advertising trackers, or send children’s care records, doses or notes to a generative-AI service.
5. Security and storage
Connected data travels over TLS and is controlled with database row-level security and private file-storage rules. Shared photos and attachments are not intended as public files. Vault files and time-capsule text are encrypted before upload using a key managed by the service. This is not end-to-end encryption: authorized service infrastructure can access the key to operate the feature. Keep independent copies of irreplaceable or highly sensitive records.
Authenticated sessions, offline changes, device caches and operating-system backups may remain on your device. No online service can promise perfect security or uninterrupted availability.
6. How long information stays
Records generally remain while an account or its shared space is active, subject to backup, security and legal needs. Deleting an account removes that person’s access; shared records may remain for an active partner where the product allows it. When a whole space is removed, associated files are queued for deletion. Backup removal follows the provider’s rotation schedule, which the publisher must verify before launch.
7. Your choices and rights
You can change sharing and notification choices in the app, export available account data, edit records, or request account deletion in Settings or at our account deletion page. Depending on where you live, you may request access, correction, erasure, portability, restriction or objection, and complain to your local data-protection authority. Email support@vickand.com with a privacy request. We may verify your identity before acting.
8. Children and changes
Kinetwo accounts are for adults. A parent or legal guardian may choose to record a child’s care data. We do not knowingly allow children to create their own accounts. We may update this policy as the service evolves and will notify users of material changes where required.