Privacy

Privacy policy

Draft prepared November 7, 2026. Not adopted. This page is withheld from search indexing until a reviewed policy replaces it.

Who this draft is about

[Counsel: name the legal entity, the address, and the contact that should receive privacy requests. The public mailbox in the site config is hullanderink@gmail.com until that is changed.]

Kincrest is a family organizer. The product beta is a separate web app. This marketing site is the public pages at getkincrest.com, including pricing and the contact form.

This marketing site

These pages do not run an account system and do not embed a payment form. The contact form opens your email app. The message stays in that email; this website does not store it.

The site loads the Inter typeface from Google Fonts. That request can send an IP address to Google. [Counsel: keep Google Fonts, or self-host the files.]

This site does not include its own analytics script and does not set its own cookies. [Counsel: confirm that statement at launch, including any host-level logs at Netlify or Firebase.]

The beta app

The beta is built to store a household: member names and roles, calendar events, chores, meals, recipes, groceries, and, for parents, bills, budget categories, receipts, and vault entries. Sign-in uses an email and password. Invites use a one-time code.

[Counsel: document the actual processor (the beta uses Firebase), retention, deletion, export, and who inside the company can read household data.]

Kid accounts

The app has parent and kid roles. Kid accounts can use the calendar, chores, and meals. Bills, budget, and the password vault are withheld from kid accounts. [Counsel: review children’s privacy rules, including COPPA where it applies, before this page can go into effect. Confirm age gates, parental consent, and what a kid account is allowed to store.]

Password vault

The beta encrypts vault entries on the device before sync and requires the app lock first. The product describes the stored vault as scrambled data that kid accounts cannot open. [Counsel: review the crypto design before any security claim is published. Do not treat this paragraph as a warranty.]

Offline copies

The app can keep a copy on the phone and sync later. The lock is a PIN, plus Face ID, Touch ID, or fingerprint when the device supports it. [Counsel: describe what remains on a lost or shared phone.]

Payments

Plus and Crest are meant to be sold on this website through Stripe Payment Links. No link is connected yet. When a link is added, checkout happens on Stripe’s page. This site does not embed Stripe.js. [Counsel: name Stripe, the data sent at checkout, refunds, and tax on the subscription.]

What this draft does not decide

Lawful bases, sale or sharing of personal information, or advertising.
Retention periods and deletion requests.
International transfers.
A final list of service providers.

Questions about this draft can go to the contact form. That does not create a privacy request process. [Counsel: publish the real request path when the policy is adopted.]