How private is Kunbaa?

What private means here

• Invite-only. The only way into your family's space is an invite from someone already in it. There are no public profiles, no search, no discovery. The tree, the photos and the chat are shared only with your family.
• No ads on Plus and Ultra, and no personalised ads on Free. The free plan has none today, and Kunbaa doesn't build advertising profiles from your family's life.
• No data sold. Your family's data is never sold or shared for advertising. Kunbaa is paid for by its plans, not by your family's data.
• Adults hold the accounts. Kunbaa accounts are 18+. Children appear in the tree and photos, added by the adults, which also means Kunbaa doesn't collect account data about children.

What private does not mean

Kunbaa is not end-to-end encrypted, and we'd rather tell you that than let you assume otherwise. Here's the honest picture:

• Everything travels encrypted between your device and our servers, and calls are encrypted in transit.
• Content stored on our servers is not end-to-end encrypted. It can't be, while the product does what it does: our servers read your family's updates to put your digests together (and, if you turn on Kunbaa AI, send their text to OpenAI to write them), and the app generates previews and thumbnails of your photos so they load fast. End-to-end encryption would make both impossible.
• A few others handle content so Kunbaa can run. If you turn on Kunbaa AI, the text of family updates goes to OpenAI to write your digests (never photos, videos or chat messages). When someone asks Kunbaa AI (it comes with Kunbaa Plus and Kunbaa Ultra), their question and the family details it needs, such as the tree, events and posts they can already see, go to OpenAI to write the answer, under the same terms: no training, and never photos, videos or live locations. Notifications carry a line of text, such as the sender's name and the start of a chat message, through Expo's, Apple's and Google's push services, and emails go through our mail service. If someone reports a post or a message, we keep a copy to review it. And we disclose information when the law requires it.

If what you want is Signal for families (a place where nobody, including the service, could ever technically read anything), Kunbaa isn't that, and we won't pretend it is. What we promise is narrower and true: invite-only, no public feed, no data sold, and what you share goes only to your family and the few services named above.

Your data stays yours

Privacy also means being able to leave. Your family's archive is never deleted for non-payment. It stays readable to everyone in the family, and anything kept under Kunbaa Plus stays kept; adding is limited to the free allowance until you renew. On the free plan, photos and videos sent in chat are kept for a year from sending and then let go, which is the one thing the archive promise does not cover. You can request a complete copy of your family's archive at any time. See getting your data out of Kunbaa and how to delete your account.

The formal documents

The plain-English version above is the promise. The formal versions live in the Privacy Policy and on the security page.

Common questions