Kinrafter Privacy Policy

Effective date: Coming soon (the day Kinrafter launches) Last updated: 13 October 2026

Kinrafter helps you keep your family's important documents and renewal dates in one private place. This policy explains what we collect, what we can and cannot see, how long we keep it, and the choices you have. We wrote it in plain language. If something is unclear, write to us at privacy@kinrafter.com.

Who we are: NN Software Solutions, Telangana, India ("Kinrafter", "we", "us"). We are the data fiduciary under India's Digital Personal Data Protection Act, 2023.

1. The short version

• We can't read your documents. On the Pro plan, your documents, document numbers, notes, photos and family details are encrypted on your phone before anything is uploaded. The key stays on your devices and in the recovery key only you hold. We never have it.
• On the Free plan your documents never leave your phone.
• We don't sell your data, show ads, or use advertising or analytics tools.
• You can export everything and delete your account from inside the app.
• If you lose all your devices and your recovery key, we cannot recover your documents. This is the cost of real privacy, and we'll remind you to set up recovery.

2. What we collect

Your account

• Your name and email address, and a password if you choose password sign-in (the password is handled by our sign-in provider; we never see it in readable form).
• If you use Google sign-in, the name and email Google shares with us.
• Your date of birth, only if you choose to give it.
• The sign-in methods on your account, and which devices are signed in, labelled with the phone's model (for example "Samsung SM-A546E") and when each was last used.
• Your subscription status (Free or Pro).

Your documents and family information (Pro plan) Everything below is encrypted on your phone before it reaches us: document titles, numbers, dates, notes, attached files and scans, family member names, relationships, dates of birth and profile photos, and your reminders. We store only the encrypted result.

What we can see even though your content is encrypted

• That an account exists, when it was used, and how large its encrypted data is.
• When files were added or removed and how many revisions exist.
• Which accounts a family share connects. The email address of a person you invite is stored only in scrambled (keyed hash) form.
• Technical records such as your IP address and request times, kept for security and fraud prevention.

On your phone only (Free plan, and device settings) Your documents and family details, app lock and screenshot settings, and reminder schedules. These stay on your phone. If you delete the app, this local data is gone unless you exported it.

Camera, photos and notifications

• The camera and photo library are used only when you add a document, scan a page, or add a profile photo. Reading text from a scan (to suggest an expiry date) happens on your phone. Nothing from it is sent to us.
• Reminders are scheduled on your phone. Reminder alerts show generic text, never your document details.

3. How we use information

To provide the app and your account, keep it secure, process your subscription, answer support requests, meet legal obligations, and improve reliability. We do not use your information for advertising, and we do not build profiles of you.

4. Who handles data for us

They process data for us under their own security terms. None of them can read your encrypted documents. We do not sell or rent personal data.

5. Family sharing

When you share a document with someone you invite, you choose what to share. They get a read-only copy that is encrypted for them. Stopping sharing removes it from Kinrafter, but a copy they already saved or downloaded stays with them.

6. How long we keep things

• While your account is open: your encrypted data stays until you delete it.
• When you delete a document permanently: its record and encrypted files are removed. Deleted files linger as recoverable markers for up to 30 days and are then purged.
• When you delete your account: your encrypted data and sign-in details are removed. We keep a minimal deletion receipt with no document content, to prove the request was honoured.
• Backups: database backups roll off within 35 days.
• Security logs: kept for up to 12 months; application logs for 14 days.
• Subscription and tax records: kept as long as the law requires.

7. Your choices and rights

You can, at any time:

• Access and take your data with Export in the app.
• Correct your details by editing them in the app.
• Delete documents, family members, or your whole account in the app.
• Withdraw consent by deleting your account.
• Nominate someone to exercise your rights on your behalf if you are unable to.
• Complain. Write to our Grievance Officer below. If you are not satisfied, you may approach the Data Protection Board of India.

We reply within 15 days.

8. Security

Documents are encrypted with AES-256-GCM on your device. Keys never leave your devices. Optional protections include app lock (fingerprint, face or PIN), blocking of screenshots and screen recordings, a 6-digit authenticator code at sign-in, and trusted-person recovery cards. No system is perfectly secure, and we cannot protect copies you export, download or send to others.

9. Children

Kinrafter accounts are for adults (18 and over). A parent or guardian may keep a child's documents and photo in their own account as a family member. We do not knowingly create accounts for children.

10. Changes

If we change this policy in a way that matters, we will tell you in the app before it takes effect, and we will update the date above.

11. Contact

Privacy questions: privacy@kinrafter.com Grievance Officer: NN Software Solutions Support Team, grievance@kinrafter.com, Telangana Security reports: security@kinrafter.com