Privacy Policy

• Family data is private and family-scoped. Content you add to a family space is shared with the relatives you invite and choose, not with the public.
• Kunbaa Care (beta) keeps care details, health details included, for the care circle your family chooses. We never use them for advertising or to train AI, and Kunbaa AI does not read them (Section 9a).
• We do not sell your personal information and we do not use private family content to target advertising.
• Kunbaa's own AI writes digests (and the short nudges and task reminders sent with them), suggests event tasks when you ask, and, where it is switched on, answers your questions. Kunbaa periodically writes you a short recap of the family updates you missed. Kunbaa starts it, it is read-only, it is limited to the family content your own account is already permitted to see, and it reaches you as a notification or in a weekly email. On an event you organise, you can also ask Kunbaa AI to suggest a short task list for that event; a suggestion becomes a task only when you keep it. Both happen with AI only if you allow it, and you can change that at any time (Section 10). Kunbaa AI can also answer your questions about your family, typed or spoken, and keep your conversations for 30 days unless you keep one. Asking Kunbaa AI comes with Kunbaa Plus and Kunbaa Ultra, and works for you only if you allow Kunbaa AI.
• On Kunbaa Plus and Kunbaa Ultra, calls can be translated live. Nobody's voice is sent for translation without their own yes on that call, and Kunbaa keeps no recording or transcript of it.
• Governments and law enforcement. We give information to a government body only when valid legal process requires it, as little as it requires, and we tell you first where we are allowed to. We never sell it or give anyone bulk access (Section 11a).
• You have control. You can access, correct, export, and delete your information, manage permissions and consent, and contact us with any privacy request.
• We operate globally. We aim to align with the EU and UK GDPR, the California Consumer Privacy Act as amended by the CPRA, and the Australian Privacy Act and Australian Privacy Principles.

This policy applies to Kunbaa websites, mobile apps, and related services, including public marketing pages and signed-in product areas.

Signed-in product areas include family trees, member profiles, memories, posts, announcements, comments, reactions, chat, calls, events, tasks, invites, Kunbaa Care, imports of a family-tree file or a chat export, family digests, billing, and account settings.

For most personal information about our account holders, Vritul Pty Ltd is the data controller (under the EU and UK GDPR), the business (under the CCPA/CPRA), and the responsible entity (under the Australian Privacy Act). When a family administrator organises a family space and invites members, they and Kunbaa may share responsibility for how information within that space is handled; Kunbaa remains responsible for the platform, and members remain responsible for the content they choose to add.

We collect the following categories of personal information:

• Account details such as name, the preferred name you choose to be shown to your family, email address, phone number, profile photo, preferred language, time zone, sign-in method, account status, and display preferences. Where we offer relationship names in another language, the words shown beside each relative are worked out on your device from the family tree; the only thing we store is the language you chose.
• Your date of birth, which we ask for once after sign-in to confirm that you meet the 18-and-over rule described in Section 16. If the date entered is under 18, we check it and do not keep it. We keep only how many such dates were entered and when the last one was. That lets a mistake be corrected once; after that, the account can only be removed.
• Family tree and relationship data you choose to add, including relatives' names, relationships, family roles, birth, marriage, death and other life dates (including a record that a relative has passed away with no date), places, nicknames, and profile details — including information about relatives who do not have a Kunbaa account. For members who have joined, this also includes their access level in the family and the permissions a family administrator has set for them.
• Kunbaa Care (beta). If your family uses Kunbaa Care, the details described in Section 9a. Depending on which parts are open for your family and what the family adds, these can be health details; school, activity and timetable details; the names and numbers of teachers, coaches, tutors, carers and others your family works with; where a paper is kept and when it ends; and, for a property, its address and the notes the family keeps about its money, such as bills and value notes.
• People listed on a care page. A care page can name people who have no Kunbaa account, such as the person it is about, a doctor, a carer or a teacher. A family member adds those details, so we receive them from the family and not from the person. If you are listed and have no account, you can ask us for a copy, a correction or removal by writing to privacy@kunbaa.com, and we handle it as a rights request (Section 17). If you have an account, you can also ask a main carer, or use the way to ask your family where the app offers one.
• Waiting lists and public forms. If you join a waiting list on kunbaa.com: your email address, and your answer if the form asks a question. We use them only to tell you when the feature opens and, for the answer, to help choose where it opens first. We count that someone joined, with the page and its campaign tags, and never with your address or your answer. To come off a list, write to us through the contact page. Public forms on kunbaa.com are checked by Google reCAPTCHA (Section 11).
• Festivals your family chooses to plan, where we make that available: the festivals a family administrator says the family celebrates. We use them only to suggest festival plans inside your family. They are never used for ads and never shared outside the family, and we never work them out from names, language, location, or the family tree.
• Files you choose to import, where we make that available: a family-tree file in GEDCOM format exported from another genealogy product, or a chat export made by WhatsApp. The file is read in your browser or on your device and is not uploaded to Kunbaa or kept by us. What reaches Kunbaa is what is needed to place people on your tree: from a GEDCOM file, the names, dates, places, and family links it contains, so they can be matched against the people already on your tree and — only when you confirm — written to it; from a WhatsApp export, only the names you confirm and the relationship you chose for each. No message, photo, or phone number from a chat export is sent to or stored by Kunbaa; a phone number is shown on your screen as a reminder of who someone is. In the Kunbaa app, where we make it available, you can also use it to open that person's WhatsApp chat with their invite typed in: the number goes from your device to WhatsApp only when you tap, and Kunbaa never receives or stores it. Nothing from either file is kept unless you confirm it, and what you confirm becomes ordinary family-tree data under this policy.
• Memories and media you upload, including photos, videos, documents, recipes, voice notes, posts, announcements, comments, reactions, and stories, together with any captions, tags, and metadata (such as timestamps) attached to them, and the audience you chose for a post — everyone in the family, your extended family, or your household. We also record which family members have seen a post or a story (the first time it stays on their screen), so that its author can see who has seen it. That record is shown only to the author, never as a public count, and is deleted with the post or story.
• Messages, calls, and notifications, including chat messages, reactions, read receipts, push tokens, call signaling metadata (such as who is calling whom and call start and end times), timestamps, thread identifiers, and delivery information needed to provide the feature. Where we make it available, this also includes the membership of the family groups Kunbaa maintains in chat — a household, a set of siblings, or an extended family — which is worked out from the relationships recorded on your family tree and kept in step with it, rather than chosen by hand. The content of your private messages is used to deliver and secure your conversations, not to profile you for advertising.
• Invite and contact details you choose to use, such as selected phone numbers, emails, or share links for inviting relatives. When you send an invite through WhatsApp, your device's share sheet or another app, that app receives the message and the number or address you chose, under its own privacy policy; Kunbaa does not receive that number.
• Location information only where you choose to share it, in Family Safety or in a chat. Nothing is collected until you start sharing, and there are three ways to share. A timed live share — for 15 minutes, 1 hour or 8 hours — keeps updating your position until the time you chose, even when you switch apps or lock your phone: about every 15 to 30 seconds on a 15-minute or 1-hour share, whether or not you move, and every few minutes on an 8-hour share. While a timed share runs, your iPhone shows its blue location indicator in the status bar and Android shows a notification. On Android it keeps running even if you swipe Kunbaa away; on iPhone, force-closing Kunbaa pauses updates until you open it again. It uses the same “while using the app” permission as the next level, never asks for “Always”, and ends on its own. While using collects your device location while the app is open and in use, refreshed every few minutes, until you turn it off. Always — on iPhone only in this release, which you enable separately, after an in-app explanation and your phone’s own “Always” permission prompt — also collects your position about once an hour, and when you move a meaningful distance, while the app is closed or not in use, so the family members you choose can see where you are. You can stop any of them at any time in the app, and turning off Kunbaa’s location permission in your device settings stops any further collection. A share in Family Safety is seen only by the family members in your sharing audience; a live location you share into a chat is seen only by the people in that chat.
• Digest content and metadata — the family content your own account is already permitted to see, which Kunbaa sends to its AI provider to write your periodic digest, together with the summary produced for you and the delivery records for it.
• Kunbaa AI conversations — where asking Kunbaa AI is switched on for you: the questions you type or say and Kunbaa AI's answers, kept as text and as a list of your conversations (Sections 10 and 15), and records of each voice conversation (when it started and ended, how many minutes it used, and whether it was ended by a safety check). Kunbaa never stores recordings of your voice.
• Live translation in calls (Kunbaa Plus and Kunbaa Ultra). While a call is translated: your call language and your yes or no on that call, kept only for the call; and the number of seconds translated, kept with the household's plan records to apply the plan's allowance. No recording and no transcript.
• Billing data from payment providers, such as checkout session identifiers, subscription status, plan selection, trial and renewal dates, invoices, country, tax information, and high-level payment metadata. For a plan bought on kunbaa.com this comes from Stripe. For a plan bought in an app store, where we make that available, it comes from Apple or Google by way of RevenueCat and is limited to the purchase record — which product, whether it is active, when it renews or lapses, and an opaque transaction identifier — because the store, not Kunbaa, is the merchant. If an App Store subscription reaches you through Apple's Family Sharing, the record we receive is the same kind; it does not identify the relative who bought it or include their payment details. We do not store full card numbers in either case; card details are handled by the payment processor or the store.
• Founding-family invitations (where we invite a family to be one of Kunbaa's founding families). We keep a one-way hash of the invitation code and of the invited email address, never the code or the address themselves, with who sent the invitation, when it expires, and which account redeemed it. That record is how one invitation is used once and how the number of founding families is counted. A founding year is set up with our payment processor as a subscription on a free year, with no card and no charge, so the processor holds the account's email and that subscription record as it does for any plan, and no card details.
• Device, security, and usage data such as IP address, approximate location inferred from network data, browser and device type, app version, operating system, logs, crash details, fraud signals, referral parameters (including how you first reached kunbaa.com, described in Section 12), and consent preferences.
• Help assistant on kunbaa.com. If you ask our website's help assistant a question, we receive what you type and the page you asked from. We do not keep the conversation. If you ask us to email a person, we send the conversation, your note and the email address you give to our support inbox so we can reply.
• Support and feedback information when you contact us, respond to us, report content, or request account help.

This section covers information we receive from Google when you sign in with Google and, if you choose to connect it where it is available, Google Drive. Google Analytics is a different thing and is described in Section 12.

Signing in with Google

When you choose "Continue with Google", Kunbaa asks Google for the basic sign-in permissions only: your identity, your email address and your basic profile (the OpenID Connect scopes openid, email and profile). Signing in does not give Kunbaa access to your Gmail, contacts, calendar, or the files in your Google Drive.

Google tells us:

• your Google account ID, a number that is unique to your account;
• your name;
• your email address, and whether Google has verified it;
• your profile picture; and
• the language setting on your Google account.

We use this to:

• create your Kunbaa account and sign you in to it each time, using your Google account ID so the same Google account always reaches the same Kunbaa account;
• recognise you if you already have a Kunbaa account with the same email address, but only when Google has verified that address; and
• fill in your profile, so your name and photo can show to the relatives in your family space. You can change them in your profile.

Kunbaa uses the sign-in tokens Google sends only to check who you are, at the moment you sign in. We do not store them.

Connecting Google Drive (optional, where available)

Connecting Google Drive is optional and is off unless you do it. It is not available to everyone: if you do not see "Link Google Drive" in the app's Settings, it is not available to you.

If you choose to connect it, Google asks you to approve the permission called drive.file. That permission lets Kunbaa work only with files you open with Kunbaa and files Kunbaa creates in your Drive. It does not let Kunbaa see the rest of your Drive. Once connected, Kunbaa can:

• list the photos and videos in your Drive that this permission allows, so you can pick which to use;
• copy the photos and videos you pick into your family's Kunbaa archive, or show a photo or video you pick to your family straight from your Drive; and
• save a photo or video you upload through Kunbaa into your Drive.

What Kunbaa keeps when you connect Google Drive:

• your Google account ID, name and email address, so you can see which Google account is connected, and the list of permissions you approved;
• the access and refresh tokens Google gives us. They are encrypted with AWS Key Management Service before they are saved in our database, and Kunbaa uses them only to carry out your requests above. The access token lasts about an hour and is renewed from the refresh token when you use the feature; and
• a copy of any photo or video you chose to import, kept in Kunbaa storage like any other photo or video you add. A copy is not removed when you disconnect Drive; it is kept and deleted as described in Section 15.

We keep the connection details and tokens until you disconnect Google Drive or delete your Kunbaa account.

How we use and share Google user data

We use information we receive from Google only to provide the sign-in and Google Drive features described above. We do not sell it. We do not use it for advertising (Section 12). We do not use it to train AI models. We do not share it with anyone except the service providers that help us run Kunbaa (such as Amazon Web Services, which hosts our servers and database; Section 11), when the law requires it, or inside your family space as described above.

Kunbaa's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Stopping access and deleting your data

• Take back Google's permission. You can remove Kunbaa's access to your Google account at any time at myaccount.google.com/permissions. This applies to both Sign in with Google and Google Drive, and the tokens we hold stop working.
• Have us delete the Drive connection. Email privacy@kunbaa.com and we will delete the saved connection details and tokens.
• Delete your account. When your account is deleted, the saved Google Drive connection and its tokens are deleted with it, and Section 15 explains what happens to the rest of your information. Deleting your account does not remove Kunbaa's permission inside your Google account, so please also use the Google link above.
• Questions or requests. Write to privacy@kunbaa.com. Your rights are in Section 17.

• Directly from you when you create an account, add content, invite relatives, message, call, purchase a plan, or contact support.
• From other family members who may add information about you to a shared family space, such as your name, your place in the family tree, or a photo of you — including from a family-tree file or a chat export a relative chose to import and confirmed (Section 3).
• From a file you choose to import, read where you chose it; the file itself is not uploaded, and only what you confirm is written (Section 3).
• Automatically through your device and browser as you use Kunbaa, including usage, diagnostic, and security data.
• From service providers such as payment, sign-in, analytics, and infrastructure partners, consistent with this policy and their terms.

Kunbaa may ask for permission to access device features such as photos, camera, microphone, contacts, notifications, clipboard, local files, or biometric unlock. We use these permissions only for the feature you choose to use, and you can change them at any time in your device settings. When you import a family-tree file or a WhatsApp chat export, your browser or phone asks you to choose the file; Kunbaa reads it there and does not upload it (Section 3).

Camera and microphone access may be used for chat attachments, profile updates, recording video greetings for your family, and family voice and video calls. Call audio and video are sent between the people on the call and are not recorded or stored by Kunbaa. If you agree to live translation on a call, the audio of what you say on that call also goes from your phone to OpenAI, our AI provider, to be turned into text while you speak (Section 10). Call signaling metadata helps connect and end calls, but Kunbaa is not an emergency calling service.

Location permissions are opt-in. Kunbaa requests foreground (“while using the app”) access the first time you share your location — by turning on Family Safety sharing or by starting a live location share in a chat — and requests background (“Always”) access only if you choose the Always level on iPhone, after showing you what will be collected and how often. A timed live share never needs “Always”: it runs on the while-using permission, keeps updating in the background only until the time you chose, and your phone shows that it is running. Background collection under Always is limited to roughly hourly updates plus movement of a meaningful distance. Location is never used for advertising and never sold, and Family Safety location is never visible outside your family space. You can pause or stop sharing, and revoke the permission, through the app or your device settings. Location sharing may be hidden or unavailable in some release profiles.

While sharing is on, we keep your most recent shared position so the people you chose can see it on the Live Map, and turning sharing off clears that stored position. A timed share also ends by itself: the moment its time is up, your position is hidden from everyone else — even if your phone is switched off or has no signal — and the stored position is deleted within about an hour. Signing out of Kunbaa ends the live location shares started on that phone, the same as stopping them; if the phone cannot reach us at that moment, they end at their set time instead. Turning off Kunbaa’s location permission only stops your phone sending new positions: until the share ends or you stop it, the people you shared with can still see the last position it sent. A live location you share into a chat is seen only by the people in that chat, never by someone you have muted or who has muted you, and anyone removed from the chat stops receiving it. When a chat share ends — at its time, when you stop it, or when you are removed from the chat — its position is no longer shown, and the chat keeps only a note that you shared your live location and when, never where you were. If your family has saved places, we also keep a short log of arrivals and departures at those places — these are the entries behind alerts such as “Ella got home”. That log is kept for 7 days and then deleted automatically; it is visible only to the family members you share your location with; it is deleted as soon as you turn sharing off; and it is deleted with your account. When a timed share ends by itself, your entries in that log are hidden from everyone else at the same moment and are deleted on the same 7-day clock at the latest. Location is never used for advertising and is never sold or shared with third parties for their own purposes.

Location information is provided on a best-effort basis and cannot be guaranteed to be accurate, complete, current, or continuously available. GPS signal, device settings, connectivity, and other factors can delay, omit, or misplace a location, and a shared location may be out of date. Family Safety and the Live Map are convenience features, not a substitute for direct contact or professional monitoring. Kunbaa is not an emergency, security, or safety-monitoring service. In an emergency, or if you believe someone is at risk, call your local emergency number and rely on official emergency services — do not rely on Kunbaa location data.

Biometric matching, such as Face ID or fingerprint unlock, is handled by your device operating system. Kunbaa does not receive or store your fingerprint or face scan.

If you allow contact access on mobile, Kunbaa uses selected contact details to help you invite relatives. We do not publish or harvest your address book.

• To create, secure, and maintain your account and family space.
• To provide family trees, member profiles, memories, posts, announcements, chat, calls, events, tasks, invites, and notifications.
• To deliver media, generate thumbnails, sync content across devices, and keep the family archive usable.
• To write and deliver the periodic family digests described in Section 10, from the family content each member is already permitted to see.
• To process sign-in codes, account recovery, support requests, invitations, service notices, and important product updates.
• To process subscriptions, invoices, refunds where required, tax-related information, storage limits, and billing support.
• To keep Kunbaa reliable and secure, detect abuse, prevent fraud, troubleshoot errors, enforce our terms, and protect users.
• To understand public website performance, improve accessibility and product quality, and measure marketing where permitted by law, using cookies only as your consent choices allow.
• To comply with legal obligations and protect users, families, rights, property, and Kunbaa.

Where the EU or UK GDPR applies, we rely on the following legal bases to process your personal information:

• Performance of a contract — to provide the accounts, family spaces, messaging, calls, media storage and paid features you request under our Terms of Service.
• Consent — for optional analytics cookies, the measurement of our own ads described in Section 12, certain device permissions (such as location, camera, microphone, contacts, and notifications), and marketing communications. You can withdraw consent at any time.
• Explicit consent: for health details and other sensitive details in Kunbaa Care. The person gives it, or a parent or guardian gives it for a child. It can be withdrawn at any time. Section 9a says how.
• Legitimate interests — to secure the platform, prevent fraud and abuse, debug and improve the service, count visits to our public pages, and run our business, where those interests are not overridden by your rights.
• Legal obligation — to meet tax, accounting, consumer-protection, and other legal and regulatory requirements.
• Vital interests — in rare cases, to protect someone's life or physical safety.

Kunbaa is private by default. Content you add to a family space is shared with the relatives you invite and the members who already have access, according to your family workspace settings and the actions you take. It is not published to the open internet, indexed by search engines, or made available to people outside your family space by us.

On Kunbaa Plus and Ultra you can narrow a post further within a family space: when you post you choose whether it reaches everyone in the family, your extended family (two generations up and down from you, and their partners), or your household (your parents, partner and children), as those relationships are recorded on the family tree. The audience is applied on our servers to every place the post can appear — the wall, the feed, the media library, comments, reactions, and mentions — on the app and the website alike, so a relative outside it never receives the post. On the free plan, a new post reaches everyone in the family. Family administrators also set each member's access level and permissions (posting, adding people to the tree, messaging); those control what a member can do, not what they can see. The family groups Kunbaa maintains in chat are read from the tree in the same way: who is in a household, a set of siblings, or an extended-family group follows the relationships recorded on the tree, is limited to relatives who have joined your family space, and changes only when the tree does.

Private calendar links (Kunbaa Plus). On Kunbaa Plus you can ask for a private calendar link, so your calendar app shows your family's events. A link is made only when you ask for one, and it works without signing in: anyone holding it sees the family events you can see — each event's title, place, description, time, and a link back to the event on Kunbaa — from 30 days ago to 12 months ahead, up to 300 events. It never shows guests, replies, hosts, call or join links, or anyone's name. The link is shown to you once, and Kunbaa keeps only a one-way hash of it. Making a new link, turning the link off, leaving the family, your Kunbaa Plus ending, or deleting your account stops it at once. Calendar apps may keep a copy of what they already fetched. Kunbaa records only when the link was last used.

We do not sell your personal information, and we do not use private family content — your family tree, private messages, private posts, private media, events, tasks, or the digests we write for you — to target advertising to you or anyone else. Kunbaa Plus and Kunbaa Ultra have no ads. The Free plan shows no ads today, and any ads on Free would not be personalised. Our Ads & Monetization Policy sets out these limits. We will update it before any ad appears, and our Terms as well before any ad appears on the Free plan.

Kunbaa Care lets a family keep care details in one private place and share the work of looking after someone. A care page is about one person, or a property. Kunbaa Care is a beta feature that opens in parts, and not every family has every part. This section covers all of them. A part that is not open for your family does not show in the app, and nothing can be added to it. Kunbaa Care is not open in the United Kingdom or the European Economic Area.

It is a record-keeping and coordination tool, not medical advice and not a medical record (see our Terms, Section 8B). Kunbaa Care is not an emergency service. In an emergency, call your local emergency number.

What a care page holds. A care page is about one person in your family tree, or about a property (see Property, below). The person does not need a Kunbaa account. In this section, Care details means everything a care page holds. Depending on what is open for your family and what your family adds, a page about a person can hold:

• where the person lives (the country, and the city if you add it), the time zone of the page, and the languages they speak;
• health details: conditions (with when and by whom they were diagnosed, if you add it), medicines (the name, dose, times, prescriber and refill date), allergies, blood group, vaccines, medical appointments, and notes;
• on a page about an adult, readings: a number your family typed, with its date and who typed it, shown in a list and a plain plot;
• contacts such as a doctor, a pharmacy or a neighbour, and the people your family works with, such as the carers and helpers your family hired itself, tutors, teachers and coaches (a name, what they do, a phone number, an agency and when they come);
• reminders, and tasks with who does them, when, and whether they were done;
• on a page about a child, school details (the school, the year or grade, the curriculum, a link to the school's portal, the timetable and what to bring), and goals the family sets;
• the care circle: who is in it, their role, and who added them and when;
• the agreement given when the page was started: who gave it (the person themselves; a main carer who says they asked the person, that the person agreed and that the person is 18 or over; or a parent or guardian, for a child), which wording was shown, and when.

A care page can also hold a weekly timetable: what happens, on which days, when and where, such as school, sport and classes, and who takes them. A care page can note where a paper is kept and when it ends. It does not hold the paper.

Kunbaa Care does not read anything from Apple Health, Health Connect or any other device or service. It does not ask for identity numbers, bank details or tax numbers, and it has no field for them. It gives no advice about medicines or doses. Readings are only what your family typed: it does not judge them, and it shows no ranges, targets, averages or alerts. Only add what your family needs, and only with the person's agreement or where you are allowed to act for them.

Who can see it. A care page is seen by the person it is about, if their own Kunbaa account is linked to it, and by its care circle: up to 25 people, including up to three main carers, each a confirmed member of the family. The person it is about can see every part of their own page. Each part of the page has its own audience, which the main carers choose and the page shows. Health conditions, the emergency card, where papers are kept, and a property's bills, value notes and access details start with the main carers only and can never be shown beyond the circle. Contacts and medicines are the one exception to the circle: on a page about an adult they can be shown, at most, to every confirmed member of the family. Appointments, reminders, tasks, readings, timetables, school details, and the people your family works with are never shown beyond the circle. When someone is added to the circle, or a part is shown to more people, the change waits 24 hours unless another main carer, or the person cared for, agrees sooner; showing a part to fewer people happens at once. Health conditions, where papers are kept and a property's access details open only if you signed in during the last 12 hours. On every request, our servers check who you are and your place in the circle or the family before they return anything.

Who comes off a page. Families decide who is on a care page. We act on the law, court orders, regulators and broken rules. Coming off a page ends access, not rights. If you are listed and have no account, write to us at privacy@kunbaa.com.

What we do not do with it. We never use Care details for advertising, and we never use them to train any AI. Kunbaa AI does not read Care details. Care details do not appear on the family wall, in stories, in Kunbaa TV or in family digests. We do not sell Care details or share them with third parties. The service providers that host Kunbaa and deliver its notifications (Section 11) handle them only to run the service for us.

Notifications. When Care reminders are on for your family, a reminder on your phone says only how many care tasks there are and the first name of the person they are for, or the short name of a property. It never says what the tasks are, and never names a condition, a medicine, a school or an address. A note in your Kunbaa notifications says who did what, such as who was added to a care circle or which part was shown to more people. It never says what is on the page.

Measurement. The app counts which screens are opened, Care screens included, in our own product analytics (Section 12): the screen's path with any identifiers removed, never a name or anything you typed. These counts never say which person or property a screen was about. Some versions of the mobile app also tell Google Analytics which Care screen was opened (for example, that the emergency card screen was opened), as part of the measurement described in Section 12. It never receives Care details. The “Share anonymous usage data” switch in the app's Settings turns both off on that phone.

How it is kept. Care details are stored on our servers with the rest of Kunbaa (Section 13), encrypted with a key used only for Kunbaa Care. The app and the website show them while you use them and do not save them on your device.

How to withdraw. An agreement given for a care page can be withdrawn at any time. If the page is about you, or you gave the agreement for a child, tell a main carer, or write to us at privacy@kunbaa.com. Where the app offers a way to withdraw on the page itself, you can use that. Withdrawing does not by itself remove what is on the page, so say whether you want the details deleted: a main carer can delete them, and we handle a request to us as a rights request (Section 17). Where care pages about a child are open for your family, withdrawing on a page about a child closes it to everyone but the parents and guardians in its circle, and you are offered deletion.

How long it is kept, and how to remove it. Care details are kept until someone in the care circle removes them or the page is deleted.

• A main carer can delete any record on the page; deleting a health condition needs a recent sign-in. A helper can delete some reminders, appointments and tasks, as the app shows. A deleted record leaves the page at once and leaves our backups within 35 days (Section 15).
• A main carer can remove a helper or viewer from the circle, and that person loses their access through the circle straight away. Removing another main carer waits 24 hours, unless another main carer or the person cared for agrees sooner. The only main carer cannot be removed until another main carer is added.
• We keep a record of who opened or changed health conditions, where papers are kept or a property's access details, who changed the emergency card, and changes to the circle and to who can see what. It holds no Care details and is deleted after two years.
• Where the app offers it, a main carer can delete a whole care page: it waits 7 days, any main carer can stop it, and the others are told. Otherwise a main carer can delete its records one by one, or ask us to delete the page. A main carer can also ask us for a copy of the page (Section 21). A copy you have saved stays with you after a page is deleted.

If you delete your account. The Care records you added are about the person cared for, or the property, so they stay on that page for the rest of the care circle. On every page whose circle you are in, your account is taken off those records, and your place in the circle and any change you asked for that was still waiting are removed. If you were the page's last main carer, the page and its records stay for the rest of the circle.

If the care page is about you, deleting your account does not delete it: your health details and the rest of the page stay for the rest of its care circle. To have them removed, ask a main carer to delete them, or ask us (Section 21).

If you were the only person in a page's care circle, the page and its records are not deleted. After that, until someone takes it over, only the person the page is about can open it, if their own Kunbaa account is linked to it, and the family's members can still see any contacts and medicines that were shown to the whole family. If you were the only member of your family, the family is closed with your account (Section 15), and nobody can open its care pages at all. You can ask us to delete these records (Section 21).

A page with no main carer. Where the app offers it, the person the page is about, or else someone in its circle, or else a family admin, can ask to take the page over. The request waits 7 days, and anyone in the circle can cancel it. A family admin who takes a page over does not see its health conditions or papers. A page that stays without a main carer for 12 months is closed, with 30 days' notice.

Children. Where care pages about a child are open for your family, a care page can be about a child. A child never signs in, sees or ticks anything: the page is a record adults keep. Kunbaa accounts are still for adults only (Section 16). Where those pages are open, these rules apply to every page about a child:

• Who may start it. Only a keeper: a parent or guardian the family tree links to the child. A family admin is not a parent or guardian by title. An admin may name a keeper, and the other keepers are told. A parent's partner counts only once an admin names them.
• The agreement. Before any detail about the child is kept, the keeper says that they are the child's parent or guardian and that they agree to Kunbaa keeping these details for the family. We record who said it, which wording was shown and when, and we ask again each year. We may also ask one other adult in the family one question: whether the keeper is the child's parent or guardian. That adult sees nothing on the page and gets no place in the circle.
• Other parents. Another living parent the family tree links to the child's household is told that a care page exists and can ask to join. They see nothing on it unless the main carers add them. If telling them is not safe, the person starting the page can say so: the page does not start and nothing is sent.
• Who can see it. Every part of a page about a child starts with the main carers, and nothing on it is ever shown beyond the care circle. Only a keeper can be a main carer.
• What it never holds. A page about a child has no place for marks, attendance, behaviour, live location, class lists, group photos or readings, and no AI reads it.
• Growing up. The child may read this page at 18. The parents are told 30 days before. Nothing widens on the day. The person can then ask to take over the page and read all of it, including notes. If they have no account, a main carer records that they agreed, or that they cannot decide this and the main carer is allowed to act for them. If neither has happened 90 days after their 18th birthday, the page turns read-only, a copy can be saved, and it is deleted 12 months later with 30 days' notice.
• If the last main carer goes. Only another keeper can take the page over, after 7 days. Family admins read nothing. If no keeper comes forward in 90 days, the page is closed and deleted, with notice. It is never deleted while a request to take over waits.

Property. Where property pages are open for your family, a care page can be about a property: a home, a flat, a house or land, where your family lives or in another country. It holds no health details. Whoever starts it says that they help look after the property for the family. Depending on what is open and what your family adds, it can hold:

• a short name, its kind, and its country, currency, area unit and time zone;
• its address, who holds keys, the meter and the building office, never where a key is kept and no codes;
• jobs, with who does them and when, and the people your family works with on it;
• bills your family notes: the bill, the amount and who dealt with it. There is no field for an account or a card, and Kunbaa takes no payments;
• value notes: a figure a family member typed, the date it is from, where it came from and who added it;
• where its papers are kept and when they end, such as ownership, tax, insurance, building, warranty and legal papers. It does not hold the papers.

The address and the other access details never appear on a list, in a notification, in our analytics or in our logs. Kunbaa keeps what your family adds. It does not prove who owns anything. A label such as owner or co-owner is your family's own. Beside every value note the app says: “Your family's own note. Kunbaa did not work this out and has not checked it. It is not a valuation, and not legal, tax or financial advice. For a decision, ask a qualified professional where the property is.”

When the last person labelled as an owner deletes their account, the property's records are removed, with notice. On a page with no main carer, someone in its circle, or else a family admin, can ask to take it over: the request waits 7 days, the circle can cancel it, and all family admins are told. A family admin who takes it over sees its jobs, people and address, and its value notes and its notes of where papers are kept are deleted after 90 days.

In plain words, see how Kunbaa AI works in our Terms.

Two different things in this section involve AI, and they are not the same. The first is Kunbaa's own AI, Kunbaa AI, which writes family digests, suggests tasks for an event when you ask, and, where it is switched on, answers your questions. The second is the help assistant on kunbaa.com, which answers questions about Kunbaa from our own pages. Kunbaa runs both.

Kunbaa's own AI: family digests and event task suggestions

Kunbaa's own AI does two things. It writes family digests: short, periodic recaps of the family updates a member missed — new posts and announcements, photos and videos added to the family archive, upcoming birthdays and events, and family tasks involving them — delivered as a notification or in a weekly email, together with the short nudges (a birthday coming up, a new event) and task reminders Kunbaa sends. Kunbaa starts them; you do not ask for them. Without Kunbaa AI, all of these arrive in plain, fixed wording. And it suggests event tasks: when you organise an event and tap "Suggest tasks with Kunbaa AI" on that event's page, Kunbaa proposes three to six preparation tasks and one short note for that event, and you choose which to keep, edit, drop or report. Nothing is suggested unless you ask on that page. Asking Kunbaa AI questions is described in its own part below. Digests and event task suggestions are included for every account at no cost, and nothing AI-related is sold today.

To write a digest, we send the family text needed to summarise it to OpenAI, our AI provider, directly. Kunbaa's own AI uses no other AI provider. To suggest event tasks, we send only that event's title, type, date, place and the number of guests — never the guest list, the event's description, or anything from chat. Both are permission-scoped: a digest is written only from what the signed-in member's own account is already allowed to see, through the same access rules that apply to them, and a suggestion only for an event that member may organise. Both are also read-only — Kunbaa's AI never posts, comments, messages anyone, creates events or tasks, or changes the family tree; a suggested task becomes a task only when you keep it.

We never use your content to train AI models, and our AI provider is not allowed to either. Private family content is also never used for third-party ad targeting. We record usage and related metadata to apply rate limits, prevent abuse, control cost, and keep the feature reliable. These commitments bind the provider Kunbaa chooses for its own AI, OpenAI.

Safety layers on Kunbaa's own AI. Every request Kunbaa's own AI makes runs behind a fixed safety instruction placed above all family content, so nothing a member wrote can change how the model is told to behave; the content sent in and the text that comes back are both passed through an automated moderation check; and if that check cannot run, the digest or suggestion is not written rather than written unchecked. These layers have no opt-out. Any task Kunbaa AI suggests can be reported from the event page; a report goes to our moderation queue with the words you saw, and the suggestion itself is never stored. Kunbaa's AI does not generate sexual content, violence, hate or harassment, self-harm content, or content that sexualises minors, and a blocked request is recorded as a category and an identifier only, never as the words themselves.

Gift ideas. When you add or edit a gift idea, its name, note and link text are run through the same automated content check, OpenAI's moderation service, which receives the text only to classify it and returns a verdict. An idea that fails the check is not saved. If the check cannot run, the idea is not saved and you can try again. Links are stored as text and are never opened or previewed by Kunbaa. Gift ideas are seen only by the confirmed members of the family you added them in; a relative's “I'm getting this” mark is never shown to you.

Family video greetings. When you add a clip to a family video greeting, Kunbaa stores the video, its sound, your caption and your name on Amazon Web Services. Until it plays, only you and the relative who started it can watch your clip, and the person it is for cannot see it. Then every confirmed member of the family can. Clips have no public link: they play only through short-lived private links. Your caption is run through the same automated content check as gift ideas, OpenAI's moderation service, which receives the text only to classify it; a caption that fails the check, or that cannot be checked, is not saved. Kunbaa does not automatically scan the video or its sound. Any member can report a clip. A reported clip is held back from the family, though the relative who started the greeting can still see it, and our moderators may watch it. While you are a member of the family you can remove your own clip at any time; the relative who started the greeting can also remove it, or you can ask us at privacy@kunbaa.com. Deleting your account deletes your clips. A clip under review after a report is kept until the review ends. If the review clears it, a clip you removed or one from a deleted account is then deleted; a clip found to break our rules stays hidden and is kept as a record. Clips and captions are never used to train AI models.

You choose whether AI writes your digests and suggests your event tasks. Kunbaa asks before its AI writes or suggests anything for you. After you finish setting up, the Kunbaa app and kunbaa.com show a one-time permission prompt, "AI digests and event plans", with two answers: "Allow Kunbaa AI" and "No thanks"; the same prompt is offered on an event's page if you have not yet answered when you go to plan one. Until you allow it, nothing is sent to an AI provider to write a digest or suggest tasks for you. If you allow it, Kunbaa sends text you can already see to OpenAI, our AI provider: for a digest, the text of recent family updates — posts and comments, events, birthdays, and tasks, with the names of the people in them; for an event plan, only that event's title, type, date, place and guest count. Photos, videos, chat messages and live locations are never sent (a photo's caption is text and can appear in a comment). OpenAI uses that text only to write for you and to run a safety check on it, and does not use it to train its models. Kunbaa asks OpenAI not to store what it sends; under its API terms OpenAI may still keep it for up to 30 days to monitor for abuse, or longer where the law requires it, and then deletes it. If you answered the earlier prompt, "AI family digests", before September 25, 2026, you are asked once more, because what we send changed when event task suggestions were added; until you answer again, nothing is sent for either.

If you choose "No thanks", or later turn the setting off, it applies to your account in both directions: no digest is written for you with AI and no event tasks are suggested for you — you still get your updates and the standard starter tasks, just without AI — and nothing you post is sent to AI for anyone's digest, and no event you created is planned with AI for anyone else, including a relative who allowed it. Closing the prompt without answering is not a yes; nothing is sent and you will be asked again later. You can change your choice at any time in Settings: on kunbaa.com under Profile, Preferences, "AI digests and event plans", and in the Kunbaa app under Settings. A change applies to digests written and suggestions made after it. We keep a record of your answer — allowed or declined, when, on which surface, and which version of this notice you saw — so that every part of Kunbaa follows it, and we ask again only if what we send or who we send it to changes.

Digests reach you as notifications and in a weekly email, so declining the notification permission means no digest notifications will arrive. The family updates a digest summarises stay readable in the app either way.

Family stories (Beta, on Kunbaa Plus and Ultra). On a relative's page you can ask Kunbaa AI to write a short story about them. The first time, Kunbaa asks your permission with a short notice that names stories; until you allow it, nothing is sent. For a story, Kunbaa sends OpenAI that relative's name and how you are related, the dates and places in their family-tree record, the names of their close relatives, and the titles and short summaries of moments they appear in, and only what was created by relatives who have allowed stories themselves. A child's story uses only names and moment titles. Photos, videos, chat messages, live locations and Kunbaa Care records are never sent. Kunbaa checks the story against those details, leaves out anything they do not support, shows it to you and keeps no copy. The same safeguards as Kunbaa AI apply, and nothing is used to train AI models.

Restoring old photos with AI (Kunbaa Plus and Ultra). You can ask Kunbaa to restore an old photo that you added to your family's photos. It is not available to every account yet. Kunbaa asks you to confirm before each restore. The photo you picked is then sent to OpenAI, our AI provider, through Kunbaa's own servers, with Kunbaa's fixed instruction to repair it. Nothing you type is sent with it, and the instruction never describes a person. The photo, and the copy that comes back, both pass through OpenAI's automated moderation check; if a check flags it or cannot run, no copy is made and the restore is not used up. OpenAI uses the photo only to restore it and to run that check, and does not use it to train its models; under its API terms it may keep it for up to 30 days to monitor for abuse, or longer where the law requires it. The restored copy is a new photo labelled “Restored with AI”, saved beside your original and seen by the same people. Your original is not changed. We record that a restore was made and by whom, never the picture.

Asking Kunbaa AI: questions, voice and your conversations

Where it is switched on. You can ask Kunbaa AI about your family in the Kunbaa app and on kunbaa.com — for example "when is Dadi's birthday?" or "help me plan Sunday lunch" — by typing or by talking to it. Asking comes with Kunbaa Plus and Kunbaa Ultra; talking to it out loud is not available to everyone yet. It answers you only after you choose "Allow" in the Kunbaa AI permission prompt, a short question with two equal answers, "Allow" and "Not now", and links to these pages. If you choose "Not now", Kunbaa AI does not answer you and nothing you created is sent to it for anyone else.

What is sent, and to whom. To answer a question, Kunbaa sends OpenAI, our AI provider, your words, your earlier Kunbaa AI conversation, and the family details the answer needs — names, relationships, birthdays and other family-tree details, events, tasks and goals, and, when you ask about them, posts, memories and recent messages from chats you are in. It is only what your own account is already allowed to see, and never anything created by a relative who has not allowed Kunbaa AI. Photos, videos and live locations are never sent. OpenAI uses it only to answer you and to run a safety check, does not use it to train its models, and is asked not to store it; under its API terms it may still keep it for up to 30 days to monitor for abuse, or longer where the law requires it.

Talking to Kunbaa AI. When you talk to Kunbaa AI, your voice goes from your phone or browser straight to OpenAI over an encrypted connection, and its spoken answer comes back the same way. Kunbaa never records or stores your voice or its spoken answers. OpenAI handles that audio on the same terms as text: it does not use it to train its models, and it may keep it for up to 30 days to monitor for abuse, or longer where the law requires it. To keep every conversation safe, the words of each thing you say and of each answer are sent to Kunbaa as text while you talk: Kunbaa checks them, lets Kunbaa AI answer only what passes the check, and stops an answer and ends the conversation if the answer fails. That text is used for the check and is not kept. Kunbaa keeps a record of each voice conversation — when it started and ended, how many minutes it used, and whether a safety check ended it — to apply your allowance and to look into abuse.

Live translation in calls. On Kunbaa Plus and Kunbaa Ultra, someone on a call can turn on live translation. Each person decides for themselves on each call: nothing they say is sent until they tap Allow, and nobody under 18 can turn it on for their own voice. When you allow it, your voice goes from your phone straight to OpenAI, our AI provider, over an encrypted connection, and is turned into text while you speak. The text of each sentence comes to Kunbaa, which checks it, has OpenAI translate it into the languages of the others on the call, checks the translation, and sends it to them. Their phones show it as a caption or read it aloud in the phone's own voice, never a copy of anyone's voice. Kunbaa never records or stores the audio and keeps no transcript or translation; it keeps the number of seconds translated, to apply the plan's allowance. OpenAI does not use any of it to train its models, and it may keep it for up to 30 days to monitor for abuse, or longer where the law requires it. Translations are made by a machine and can be wrong.

Spoken answers. Where it is on, you can ask to hear a written answer read aloud. Kunbaa sends the text of that answer, which has already passed the safety check, to OpenAI to turn into speech, and plays it to you; Kunbaa does not store the audio. OpenAI does not use that text to train its models, and may keep it for up to 30 days to monitor for abuse, or longer where the law requires it.

Talking on your phone. On some phones, where it is on, you can talk to Kunbaa AI using the phone's own speech recognition and voice. Your voice stays on your phone: only the words it heard are sent, the same way as a typed question, and the answer is read aloud by the phone. Kunbaa keeps a record of how many minutes you used, to apply your allowance.

Your conversations, and how long they are kept. Your questions and Kunbaa AI's answers are kept as text so you can see your earlier conversations in a list, open one and carry on. Only you can see them; your relatives cannot. Each message is kept for 30 days from when it was sent and then deleted, unless you choose Keep on that conversation. A kept conversation stays until you stop keeping it (its messages are then deleted 30 days later), delete it, or delete your account. Messages saved before October 17, 2026 keep the up to 90 days they were saved with. You can delete any conversation, or all of them, at any time. What Kunbaa AI may draw on from your earlier questions when it answers a new one lasts no more than 30 days, even in a kept conversation. Live voice conversations are not kept as conversations.

The same safety layers. Every question and every answer, typed or spoken, goes through the safety layers described above: a fixed safety instruction above everything a member wrote, an automated check of what goes in and what comes out, and no answer at all if the check cannot run. There is no opt-out. Kunbaa AI can make mistakes; check what it says before you rely on it.

Please check AI-generated output before sharing it or relying on it, especially for health, legal, financial, safety, emergency, or sensitive family matters. AI output can be incomplete, inaccurate, or unsuitable for your situation. This applies to a Kunbaa digest too.

The help assistant on kunbaa.com

It is an AI assistant that answers questions about Kunbaa from Kunbaa's own help, pricing and policy pages, and it can be wrong; our pages and this policy are what count. It cannot see or change any account.

To answer, it sends your question, up to three earlier questions from the same conversation and passages from our pages to our AI provider, through Vritul's own AI service, which keeps a record of usage and never the words. Our AI provider may not use them to train or improve its models, we ask it not to keep the request, and it keeps an abuse-monitoring log for up to 30 days. Automated safety checks read what you type and what the assistant answers. Please do not type passwords, payment details or health information.

Outside AI apps

Kunbaa does not offer a way to connect an outside AI app or assistant to your account.

• With relatives, family admins, and invited participants according to your family workspace settings and the actions you take.
• With service providers and sub-processors who help us operate Kunbaa, under contracts or equivalent safeguards appropriate to their role.
• With our payment provider (Stripe) and tax or fraud-prevention partners when you buy or manage a paid plan on kunbaa.com — or, where we make in-app purchase available, with the app store that bills you and with RevenueCat, which records that purchase so your plan works across your family's devices.
• With Google Ads, to measure our own ads: if you came from one of our ads on Google and accepted optional cookies on kunbaa.com, the click identifier Google added to the ad's link and the time you signed up (Section 12).
• With legal authorities, regulators, or professional advisers when required by law or reasonably necessary to protect people, rights, safety, property, or Kunbaa.
• In connection with a merger, financing, acquisition, restructuring, or sale of assets, subject to appropriate safeguards and notice where required.

We do not sell your personal data or share it for cross-context behavioural advertising. Private family content is not used for third-party ad targeting.

Your family's content is yours. Vritul gives it to a government or law-enforcement body only when the law requires it, and then as little as the law requires.

• Valid legal process only. We disclose information in response to a warrant, court order, notice or other demand that is valid and enforceable against Vritul under Australian law. An informal request is not enough.
• Requests from other countries go through the processes Australian law recognises, such as mutual legal assistance, unless a law that binds Vritul requires otherwise.
• Narrow. We check each request. We push back on one that is unclear, too broad or not valid, and we disclose only what it lawfully requires.
• We tell you. Before we disclose, we tell the person or the account owner about the request and what we will disclose, so they can object. We do not do this when the law forbids it or in an emergency. If we could not tell you first, we tell you afterwards when that is allowed.
• Emergencies. We may disclose information without a legal demand only when we believe in good faith that it is needed to prevent a serious and imminent threat to someone's life, health or safety, as the law permits.
• Child safety. Where Kunbaa is used to make or share child sexual abuse material, we preserve the evidence and report it to the eSafety Commissioner in Australia, and to the National Center for Missing & Exploited Children (NCMEC) where United States law applies. We take legal advice when we do.
• Regulators. We comply with removal and other notices from regulators with authority over us, such as the eSafety Commissioner under the Online Safety Act, and with requests from the Office of the Australian Information Commissioner about privacy rights.
• What we never do. We do not sell your data. We do not give any government bulk or ongoing access to it. We do not build a way in for anyone. Nothing from Kunbaa is used to train AI models, ours or a provider's.
• Records. We keep a record of every request we receive and what we did.

Where your data is stored. Kunbaa is operated from Australia. Our servers and database run on Amazon Web Services, and the public website runs on Vercel (Section 13). Those providers can receive legal demands under the law of the country where they operate, including the United States, and they handle them under their own published policies.

Questions about this section go to privacy@kunbaa.com. The rules for what you may do on Kunbaa are in our Acceptable Use Policy.

We use essential technologies to keep Kunbaa working. On public pages, we may use optional analytics, attribution, and consent tools where permitted by law and your choices. We request consent before loading non-essential cookies in regions where consent is required, and you can revisit your choice through the cookie settings control on the site.

Inside the app and signed-in areas we use our own product analytics to understand how features are used so we can improve Kunbaa. These measurements are privacy-preserving: identifiers are one-way hashed, and we record only pseudonymised activity (for example that a screen was opened or a call was started) — never your names, message content, photos, precise location, or private family content. We do not sell this data and do not share it with advertisers or data brokers.

Google Analytics (Firebase). The mobile app also sends a copy of the same events to Google Analytics through Google's Firebase Analytics SDK, so that app and website usage can be read together in one report. What Google receives is narrower than our own pipeline: the pseudonymous event name and its properties (for example that a screen was opened or a call was started, and which feature or screen it concerned), the app release it came from, and the device and app metadata the Firebase SDK collects on its own — device model, operating system and app version, approximate country inferred from the network, and a random app-instance identifier that Google generates; and a few coarse account-level attributes with no identifier in them: whether you are signed in, your plan tier, your role in the family, whether Kunbaa AI is enabled, and which billing rail and interval your family uses. Google never receives your name, email, Kunbaa account or family identifiers, message content, photos, precise location, or private family content. The app does not collect the advertising identifier, does not use Google's advertising features, and grants Google analytics storage only, with ad storage and ad personalisation switched off. Google processes these events as our service provider under the Google Analytics terms and keeps them for the retention period we set in Google Analytics, currently 14 months. On the website, Google Analytics loads only after you accept optional cookies and follows your cookie and consent choice.

Visit counts on kunbaa.com. Our own server counts how many times kunbaa.com's public pages are opened, whether or not you accept optional cookies. It keeps daily totals for each page, broken down by the campaign tags in the link you followed (such as utm_source and utm_campaign), the country your connection comes from, and the name of the website that linked to us, if any. To tell how many different people open a page each day, rather than how many times it is opened, our server turns your IP address (for IPv6, only its first half) and your browser's description into a code, using a secret that is made fresh each day and set to expire soon after that day ends. The code is kept, with the page, campaign tags and country it was seen on, for two days, then deleted automatically, usually within a few days more; once the day's secret is gone it cannot be turned back into your address, it does not carry from one day to the next, and the counter does not keep the address or browser description themselves. Beyond that two-day code, the counter sets no cookie and keeps no IP address, browser or device details, or account, and does not record each visit. Sign-in, invitation, event and email pages, and anything you see once signed in, are not counted. We keep the totals for up to two years.

Subscriptions bought on the website. If you had accepted optional cookies when you subscribed to Kunbaa Plus on kunbaa.com, we keep the random identifiers Google Analytics set in your browser with that checkout at our payment provider, Stripe. Our server uses them to tell Google Analytics when the subscription's free trial starts and each time a payment or a refund goes through: the amount and the tax in it, the currency, the billing interval, any discount, whether it was a first payment, the end of a trial, a renewal or a change of plan, and Stripe's reference for the invoice. This is how we learn which of our pages and campaigns lead to subscriptions. Google still never receives your name, email, card details or Kunbaa account identifiers, and these reports are marked as not for advertising use. If you had not accepted optional cookies, nothing is stored and nothing is reported. Changing your cookie choice later does not reach a subscription you have already bought; to stop these reports, email privacy@kunbaa.com and we will.

Turning it off. In the mobile app, the switch under Settings → “Share anonymous usage data” (that is the switch's label in the app today; what it sends is the pseudonymised events described above, not anonymous data) is on until you turn it off. Turning it off stops both our own product analytics and the Google Analytics copy on that device, and discards anything our own pipeline has buffered but not yet sent; it does not delete events Google already received, which expire under the retention period above. On the web, analytics follows your cookie and consent choice and is sent only after you accept optional cookies — apart from the subscription reports above, which follow the choice you had made when you subscribed, and the visit counts above, which use no cookie.

What our own servers record. Separately from the app and the website, our servers keep a pseudonymised record when certain things happen in your account or your family: for example that an account was created, an invitation was sent or accepted, a post or an event was made, a subscription started, or a family tree file was imported (how many people it added, never who they are). These records carry one-way hashed identifiers in place of your account and family, and never your names, message content, photos, precise location, or private family content. Our servers make them when the action happens, so the switch in the app and your cookie choice on the website do not turn them off. We use them to count how Kunbaa is used and to check that it works. We do not sell them or share them with advertisers or data brokers. Each record is deleted after about 400 days, and the records about your account are deleted when you delete your account.

How you first reached us (the kunbaa_acq cookie). Only after you accept optional cookies, kunbaa.com sets one first-party cookie, kunbaa_acq, with a copy in your browser's local storage. It holds how you first reached kunbaa.com: the campaign named in the link you followed (its source, medium, campaign, content and term), the path of the page you landed on, the address of the website that sent you (its domain only), when you first visited, and, if you came from one of our ads on Google, the click identifier Google added to that link. No advertising tag reads it. When you create an account, our server reads it once and keeps those details with your new account, together with the country your connection comes from. The cookie is then replaced by a marker that holds nothing about you, so the same first visit is never recorded again; your browser keeps that marker for up to 400 days. Until then, the cookie lasts up to 90 days. If you reject optional cookies, or later withdraw your consent, both copies are deleted. Without your acceptance nothing is stored in your browser for this and no click identifier is kept; if the link you sign up from itself names a campaign, we note that campaign with your new account. When an account is created in the mobile app from a link that opened it, or on Android from a Google Play link that named one of our campaigns (the campaign tags Google Play hands the app once, when it is first opened after install), we note that campaign the same way, and never keep a click identifier from the app.

The page you signed up from (the kunbaa_signup_for cookie). Some of our pages are written for one kind of family, for example adult children looking after a parent, or new parents. A sign-up link on such a page names that page's topic, and kunbaa.com keeps it for up to an hour in a cookie, kunbaa_signup_for, while you sign in, so your new account starts with the steps that page described. It holds only the topic of the page, never anything about you, and it is set whatever your cookie choice because the sign-up needs it, and it is cleared once you are signed in. We keep that topic with your account and in the pseudonymised records described above. If you sign in to an existing account from such a page and it has no topic yet, it is kept the same way.

The help assistant keeps a random id in your browser's storage to apply fair-use limits; it is not used for advertising or analytics.

Measuring our own ads. When you reach kunbaa.com from one of our ads on Google, the link carries a click identifier that Google adds. If you accepted optional cookies on kunbaa.com and then create an account, we keep that identifier with your account and send it back to Google Ads with the time you signed up, so we can see which ads bring families to Kunbaa. We send no name, email address, phone number or other detail about you, and we don't use it to show you ads anywhere.

Kunbaa Plus and Kunbaa Ultra have no ads. The Free plan and public kunbaa.com pages show no ads today. kunbaa.com does not load Google Ads, AdSense or any other advertising network, and sets no advertising cookie. Accepting optional cookies turns on Google Analytics and the first-visit cookie described above, which is how we measure our own ads. If we ever add ads, they will appear only on the Free plan or on public pages seen signed out, never in Kunbaa Plus or Kunbaa Ultra, in the app or when you are signed in on kunbaa.com. They will not be personalised: we will not choose them using your profile, what you do in Kunbaa, your family's content or location, or tracking across other companies' apps and websites. We will update this policy before any ad appears, and our Terms as well before any ad appears on the Free plan. Signed-in family trees, private chats, private posts, private media, private events, private tasks, billing screens, and family admin areas are not ad inventory.

Private family content is not used to personalize third-party ads. Read more in our Ads & Monetization Policy.

Kunbaa is operated from Australia and uses global infrastructure and service providers. Your information may be processed in countries other than where you live, including Australia, the United States, and other locations where our providers operate. These countries may have data-protection laws that differ from those in your country.

When we transfer personal information internationally and the law requires it, we use appropriate safeguards, such as the European Commission's Standard Contractual Clauses, the UK International Data Transfer Agreement or Addendum, and additional technical and organizational measures intended to protect the information. You may contact us for more information about these safeguards. These safeguards cover Kunbaa and its service providers.

We use technical and organizational measures intended to protect Kunbaa, including account verification, access controls, encryption of data in transit, private media delivery patterns, logging, monitoring, and abuse-prevention controls. Secrets are stored in managed secret stores rather than in application code.

No online service can guarantee perfect security. You should use a secure email account, protect your device, use a strong and unique password or secure sign-in method, and invite relatives carefully when sharing sensitive family information. If we become aware of a personal data breach that is likely to create a risk to you, we will notify you and the relevant regulators as required by applicable law.

We keep personal information for as long as reasonably necessary to provide the service, maintain family spaces, support users, comply with law, prevent abuse, resolve disputes, and maintain backups. When we no longer need information, we delete it or de-identify it.

Kunbaa AI conversations are kept as text for 30 days per message, unless you keep the conversation; a kept conversation stays until you stop keeping it, delete it, or delete your account (Section 10). Kunbaa never stores recordings of your voice.

Live translation in calls: Kunbaa keeps no audio, transcript or translation. Each person's yes or no and call language are kept only while the call lasts. The count of seconds translated is kept with the household's plan records.

Retention periods vary by data type. For example, we keep account and family content while your account is active; we keep billing and tax records for the period required by law (often up to seven years); and our server logs keep account ids (never the content of messages, posts or photos) for up to 90 days, for security. Database backups roll off within 35 days, so something deleted can remain in a backup for up to 35 days before it is gone for good. A file you import is never stored by Kunbaa: it is read where you chose it and discarded when the import finishes. We keep a short record of an import's progress, so an interrupted import can continue where it stopped, and the report of what was written; the people you confirmed are part of your family tree from then on and follow the family-content rules above.

Photos and videos sent in chat have their own clock, and it depends on your family's plan. On the free plan we keep a file sent in a chat for 90 days from the time it was sent if it was sent on or after December 5, 2026, and for 12 months if it was sent before that date. We then mark it as expired, which immediately stops it being served (the message stays and a placeholder takes the file's place), and at least 14 days later we delete the stored file and its thumbnail from our storage. Before that time is up, a member who administers or edits the family can save a copy of the file to the family archive, as a post on the family wall, and that copy is kept like any other archive content. While a family is on a paid plan, files sent in its chats stay in those chats instead of expiring (they are chat files, not archive content), and a file kept while the family was on a paid, settled subscription is never put back on an expiry clock afterwards.

Three limits on that, so it is clear what expiry can and cannot reach. It applies only to files sent in chat: a photo posted to the family wall, attached to an event or set on a person's profile is archive content and has no expiry clock at all. It is forward-only: only files sent after we switched this on can ever expire, and anything stored before that date is treated as archive content. And the copy your own phone keeps to show you a photo or play a video is outside our systems: depending on the app version it sits in the phone's cache, which the phone can clear whenever it needs the space, or in an encrypted store the app keeps on the phone. Either way it stays on that phone, it is not a backup, and we cannot restore from it. If we ever change this in a way that shortens what is kept, we will tell you at least 30 days beforehand, as our Terms set out.

Newer versions of the mobile app also keep a copy of your recent chats on your phone, so that they open without waiting for the network: your chat list, with your relatives' names and the last line of each chat, and the most recent messages of conversations you have opened. The copy is encrypted, stays on that phone, and is left out of the phone's backups. Signing out of Kunbaa on that phone removes it, and so does deleting the app. Like the photo and video copies above, it is outside our systems and we cannot restore from it.

Location data has its own, shorter clock — in fact two of them. The recent positions behind the map and the arrival and departure log for saved places are kept for 7 days and then deleted automatically. The latest position you shared is not on that clock: we hold it while sharing is on — for a timed share, until shortly after it ends, as described below — so it has no fixed lifetime and no retention period to wait out. Turning sharing off clears all three at once, and so does deleting your account.

Live location shared for a set time has a limit of its own. When a timed share in Family Safety ends, your latest position is hidden from everyone else at that moment and deleted within about an hour, even if your phone is switched off. Live location shared into a chat keeps no last position: once the share ends, the chat shows only that it has ended, and the stored position is deleted within about an hour of the end — straight away if you stop the share yourself. Deleting your account deletes all of it.

Kunbaa Care records, including pages about a child, notes of where papers are kept and pages about a property, follow their own rules, set out in Section 9a.

Help assistant counts are kept against the random id and a one-way scrambled form of your IP address for two days, then deleted; a conversation you send to a person is kept as a support message.

When you delete your account, what you shared with your family stays with them, with your name taken off, unless you choose to also remove your shared photos and posts. Copies relatives saved as their own, and anything under a safety review, are not removed. If you are the only admin of a family that has other members, you first ask a member to take over as admin, and they accept. If nobody accepts within 14 days of your first request, you can delete your account anyway, and admin passes to the member who has been in the family longest. A family you are the only member of is closed and deleted with your account.

You can delete certain content through the product where controls are available. Deleting content or your account may not immediately remove every copy from backups, logs, legal or billing records, or shared family spaces where another member retains a lawful copy. Account deletion instructions are available on the Kunbaa account deletion page, and you can contact us for help with any access, correction, or removal request.

Kunbaa is a family platform, and family spaces often include information about children — but Kunbaa accounts are for adults aged 18 and over. The Service is not directed to children, and we do not offer child or teen accounts. Anyone under 18 takes part only as information an adult family member records about them, never as an account holder.

Kunbaa accounts are not for anyone under 18. An account is created when someone signs in, before we ask for a date of birth. If the date shows the person is under 18, we do not keep the date, the account cannot be used, and the person can remove it from that screen straight away. Removing it deletes the account's details as described in Section 15 and on our account deletion page. We do this to meet the U.S. Children's Online Privacy Protection Act (COPPA), the children's-data provisions of the GDPR and UK GDPR, and comparable laws: because there are no child accounts, we do not seek verifiable parental consent for a child to use Kunbaa. Where an adult family member adds information about a child to a family tree, memory, photo, or event, we process that information on the family's behalf, and the adult who added it is responsible for having the authority to share it.

Kunbaa accounts are for adults, and live translation follows the same rule: nobody under 18 can allow it for their own voice.

Where care pages about a child are open for your family, a parent or guardian gives their own recorded agreement before any detail about the child is kept (Section 9a). That is an adult's agreement for a record adults keep. It does not open an account for the child, and the child never signs in.

If you believe someone under 18 has created an account, or that a child's information has been added without the required authority, contact us at privacy@kunbaa.com and we will take appropriate steps to review and, where required, delete it.

Keep care and health details about a relative in Kunbaa Care, where you choose who can see each part (Section 9a), and out of posts, chat and shared albums. Anywhere in Kunbaa, add only what your family needs, and only what you are allowed to share.

One part of Kunbaa is made for children: the Kunbaa TV stories (Section 16a). Children can watch them without an account, and Kunbaa collects no personal information from them there.

Kunbaa TV shows Kunbaa's own animated stories, such as Kunbaa Tales. It appears in the Kunbaa app, on kunbaa.com for members who are signed in, and as a separate app for televisions, Kunbaa TV for Android TV. The stories are made for children and families. The television app has no account and no sign-in.

What the television app keeps, on the television only: the profile last chosen (Kids or Family), the parent PIN that locks the Kids space (in the device's secure storage), the story language and subtitles last chosen, and a copy of the public list of episodes. None of these is sent to us. The television app has no analytics, no advertising and no advertising identifier. Unless the television is linked to a family (below), Kunbaa does not collect personal information through it.

What it asks for: the public list of episodes, from kunbaa.com. Like any request to a website, it reaches our servers with the device's IP address and type, which our hosting keeps briefly in its logs for security.

Playing a story: the television app plays the episodes, their pictures and their subtitles from Kunbaa's own servers, delivered by our hosting provider's content network (Amazon CloudFront). The device's IP address is used to deliver the video and is not kept by us: those servers keep no access logs. Nothing is sent to YouTube or any other third party. From the next version of the Kunbaa app, the Kunbaa TV tab plays from the same servers too. Until a member has that version, the tab in their Kunbaa app plays episodes in YouTube's embedded player, in its privacy-enhanced mode, with the episodes marked on YouTube as made for kids, and YouTube (Google) receives the information it needs to stream them, such as the IP address and device information, under Google's Privacy Policy.

Watching on kunbaa.com: a member who is signed in plays the episodes, their pictures and their subtitles from the same servers, through the same content network. The browser's IP address is used to deliver the video and is not kept by us, and no part of the video comes through YouTube or any other third party. The story language and subtitles last chosen are kept in that browser's local storage, under the member's account identifier, so they are there next time. They are not sent to us, and they stay in that browser until its stored data is cleared.

Family on Kunbaa TV: a member can link a television to their family by approving a code from it in the Kunbaa app. The television then holds a read-only key (in its secure storage) and a random identifier it made for itself, which it sends to us so one television's links stay together; we keep the link, the identifier and the name the member gave the television. A linked television, in its Family profile only and never in the Kids profile, shows the videos and photos family members shared with everyone in the family, with the sharer's name and the date, and anything a member sends to it from the Kunbaa app with Play on TV. They are fetched through links that last ten minutes and are held only while they are shown: nothing is saved on the television. So a family video plays smoothly on a television, the first time a linked television plays it we make one smaller copy of it (at most 1080p), kept in the same private storage as the original, shown only to linked televisions under the same rules, and deleted whenever the original is. A member who chooses not to appear on family televisions is left out. Unlinking the television in the app, leaving the family, signing out of all devices or deleting the account signs the television out at once and removes the family's pictures from it.

Depending on where you live, you have some or all of the following rights over your personal information. We will respond to valid requests in accordance with applicable law and may need to verify your identity first.

You can manage many preferences directly in Kunbaa, including notification settings, profile details, family sharing, optional cookies, device permissions, and who can see each post you share. App-store and platform settings may also give you controls over tracking, notifications, and device access. A plan bought on kunbaa.com is managed there, under Settings → Plans; a plan bought in an app store is managed — and cancelled — in that store's own subscription settings, and deleting your Kunbaa account does not cancel it. To make a request, email privacy@kunbaa.com. You will not be discriminated against for exercising your rights.

If a care page lists you and you have no Kunbaa account, you can use these rights too, at the same address. Coming off a care page ends access to it, not your rights over your own information (Section 9a).

EEA and UK (GDPR). Our legal bases are described in Section 8. You have the right to lodge a complaint with your local data-protection authority, such as your national supervisory authority in the EEA or the UK Information Commissioner's Office. Where a representative or Data Protection Officer is required, their contact details will be published here before or at launch in the relevant region. Kunbaa Care is not open in the EEA or the UK.

California (CCPA/CPRA). In the prior 12 months we may have collected the categories of personal information described in Section 3 for the business purposes described in Section 7. We do not "sell" personal information and do not "share" it for cross-context behavioural advertising as those terms are defined under the CPRA. California residents have the right to know, access, correct, delete, and limit the use of sensitive personal information, and to be free from discrimination for exercising these rights. You may submit a request as described in Section 17, and you may use an authorized agent.

Australia (Privacy Act and Australian Privacy Principles). We handle personal information in accordance with the Australian Privacy Principles. You may ask us to access or correct your personal information, and you may complain to us at privacy@kunbaa.com. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).

India. You may ask us to access, correct or delete your personal information, and you may raise a grievance with us, at privacy@kunbaa.com. Where India's Digital Personal Data Protection Act gives you more, including going to the Data Protection Board of India, you keep those rights.

Kunbaa may contain links to third-party websites, apps, or services that we do not control, including content shared by other members and the app stores. This policy does not apply to those third parties, and we are not responsible for their privacy practices. Please review their privacy notices before providing them with your information.

We may update this policy as Kunbaa changes, as laws or platform requirements change, or as we add new features. We will update the Last updated date above and, where required, provide additional notice such as an in-app message or email. Your continued use of Kunbaa after an update takes effect means you accept the revised policy.

Kunbaa is operated by Vritul Pty Ltd (Australia). For privacy questions, requests, or complaints, contact our privacy team at privacy@kunbaa.com. We will acknowledge and respond to your request within the time required by applicable law.