Security at the core

Your content is private to your family space. There are no public profiles and no public pages, and nothing is indexed by search engines. It reaches other services only so Kunbaa can run: notifications and emails to your family, and, if you turn on Kunbaa AI, the text of family updates sent to OpenAI to write your digests. Beyond that, it leaves only if you download a copy and share it yourself.

Everything between your device and Kunbaa travels over HTTPS (TLS), and calls are encrypted in transit. Your family's data is stored encrypted at rest on Amazon Web Services: every database table and every stored photo and video, with keys AWS manages. Kunbaa is not end-to-end encrypted; the Help Center explains why, plainly.

Sign in with a code sent to your email, or with Apple or Google. There is no password to remember or lose. On supported devices there is also biometric unlock for faster access to the same account without Kunbaa storing your face or fingerprint. Google sign-in is accepted only for a verified address.

Kunbaa accounts are for adults, 18 and over. Children appear in the tree and throughout the photos, added and looked after by the adults, which also means Kunbaa is not collecting account data about your kids.

Invites, posts, memories, and announcements all sit behind invite-only family access. The only way into your family's space is an invite from someone already inside. There is no discovery, no search, and no way for a stranger to ask to join. Within the family, a post can be narrowed to your extended family or your household, and that choice is enforced on our servers.

Delete content you no longer want to keep, and delete your account from the mobile app under Settings, then Privacy and account, or by email if you cannot sign in. There is no self-serve download-everything button yet; email support and we will prepare a complete copy of your family's archive for you.

Whoever runs the family sets each member's level (Admin, Can post, or View only) and three switches per person: post on the wall, add people to the tree, message family members. They are chosen as the invite is sent, changed any time from the member's profile, and a member who wants more asks the admins through Request access; the server checks the permission on every write, not just the screen.

We do not sell your personal data, and private family content is not used for ad targeting or ad measurement in private areas.

Voice and video calls (one-to-one, or a group of up to 6 started on Kunbaa Plus or Ultra) happen inside your invite-only family space and are never recorded by Kunbaa. Family Safety location sharing and the Live Map are strictly opt-in. They are off until you turn them on, shared only with the relatives you pick, for 15 minutes, 1 hour or 8 hours or until you stop, and you choose whether sharing runs only while the app is open or, on iPhone, continues with it closed.