Last updated: April 6, 2026
We collect your name, email address, and the photographs you submit to us for digitization. We also collect basic usage data such as sign-in times to maintain security.
We use your email address to authenticate you and send service-related communications. We use your photographs solely to provide the digitization and hosting service you requested. We do not sell, rent, or share your personal data or photographs with third parties for marketing purposes.
Your digitized photographs are stored securely on Cloudflare R2 object storage. All files are encrypted at rest and in transit. Access is restricted to authenticated members of your family gallery only.
Your gallery is private by default. Only people you explicitly invite by email can access it. We do not make your photos public or share them with other KinPhotos users.
Your password is hashed using bcrypt before storage. We never store or transmit your password in plain text and cannot recover it if lost.
We use Supabase for database hosting, Cloudflare R2 for photo storage, Resend for transactional email, and Vercel for application hosting. Each of these services has its own privacy policy and security practices.
We retain your data for as long as your account is active. If you wish to delete your account and all associated data, contact us at privacy@kinphotos.com and we will process your request within 30 days.
You have the right to access, correct, or delete your personal data at any time. You may also request a copy of all data we hold about you. Contact us at privacy@kinphotos.com to exercise these rights.
We use a single session cookie to keep you signed in. We do not use tracking cookies or third-party advertising cookies.
For privacy-related questions or requests, email privacy@kinphotos.com.