Privacy Policy

1. Who this policy covers

This policy applies to the KinCue mobile apps, the KinCue website at kincue.app (including invite links, calendar downloads, and the provider console), and the email we send you about your account and invitations.

The service is operated by PrimeQuest Inc, [Registered address] ("KinCue", "we", "us").

2. What we collect

Account information. When you create an account we collect your email address, your display name, and authentication data handled by Google Firebase Authentication on our behalf. If you sign in with Apple or Google, we receive the identifier and email address that service returns to us — we never see your password.

Household and roster information. Adults in a household create profiles for the children and other family members they manage: a name or nickname, optionally a birth year or age group, and which activities each person is enrolled in. You choose how much to enter. A nickname works fine.

Activity and schedule information. The classes, practices, lessons, games, and one-off events you add: titles, times, recurrence, locations, the provider or instructor's name, and any notes you write.

Attendance and absence records. Who attended a session, who was marked absent, cancellations, and make-up sessions. These may be recorded by a parent, by another adult in your household, or by an instructor you gave access to.

Balance and payment records. Amounts owed, amounts you record as paid, session packs, and credits. KinCue records these figures; KinCue does not process payments. We do not collect or store card numbers or bank account details, and no money moves through KinCue.

Invitations and the contacts you use to send them. When you invite another family or another adult, we store the invitation, its code, who sent it, who it was addressed to, and its status. If you send it by email we process that email address in order to deliver it. If you choose to pick a recipient from your device's contacts, that selection happens on your device and we receive only the details for the person you chose.

Support correspondence. If you email us, we keep the message and our reply so we can follow up.

Device and diagnostic information. Standard technical information needed to run and troubleshoot the service: app version, device type and operating system, coarse timestamps, IP address at the time of a request, and crash or error reports. Our web hosting provider logs requests to kincue.app, including invite-link visits.

Analytics. Where analytics are enabled, we use Google Firebase Analytics to understand aggregate usage — which screens are used, whether an invite flow completed, whether the app crashed. We do not use it to build advertising profiles, and we do not enable analytics for advertising purposes.

What we don't collect. We don't ask for a child's precise location, we don't have advertising SDKs in the app, we don't run third-party ad networks, and we don't buy or sell personal information.

3. How we use it

We use the information above to:

• run the service — show your household's calendar, generate the sessions in a recurring series, track absences and make-ups, and keep balances current;
• deliver invitations and let recipients open them, including rendering the public invite page and generating calendar (.ics) downloads;
• let instructors you have authorised mark attendance for the specific enrollment you shared;
• send you service messages: invitations, reminders about upcoming sessions, and notices about your account;
• keep the service secure — detect abuse, prevent unauthorised access, and rate-limit invite codes;
• fix bugs and improve the product; and
• comply with legal obligations.

We rely on the following legal bases where GDPR-style rules apply: performing our contract with you (running the service), our legitimate interests (security, debugging, improving KinCue), your consent (optional analytics and any non-essential email), and legal obligation.

4. Children's privacy

This is the part we care most about getting right.

Accounts are for ages 13 and up. Signing up for KinCue requires being 13 or older. We don't knowingly let a child under 13 create an account.

Children under 13 have no account and no login. A younger child appears in KinCue only as a roster entry inside a parent's household — created by a parent, visible to the household, and controlled entirely by the adults in it. The child does not sign in, does not receive email from us, and has no profile that exists outside their parent's household.

Parents are in control. A parent or guardian can review, edit, or delete a child's roster entry and all of the activity, attendance, and balance records attached to it at any time from inside the app, or by writing to support@kincue.app. Deleting a child's entry deletes the records attached to it.

Children's information is only used to run the service. We use a child's name and schedule to show the family's calendar, notify the household, and — where a parent has shared a specific enrollment — let that instructor mark attendance. We do not use children's information for advertising, we do not build profiles for marketing, and we do not disclose it to third parties except the service providers listed in section 6 who process it on our behalf.

If we learn a child under 13 created an account in spite of our age requirement, we will delete that account and its data. If you believe this has happened, email support@kincue.app and we will act promptly.

5. Who can see your family's information

• Your household. Every adult and 13+ member of your household sees the household's calendar, roster, attendance, and balances.
• Families you invite. When you send an event invite, the recipient sees what that invitation contains: the event title, time, location, notes, and who is hosting. They do not gain access to your household, your other children, or your other activities. An invite link is unlisted but not secret — anyone holding it can view the event details, so only send it to people you mean to include.
• Instructors and providers. When you share an enrollment with an instructor, they get a private link that shows only that enrollment: its sessions, who is enrolled in it, and the balance for it. They cannot see your calendar, your other kids, or your other activities. Their link can expire, and you can revoke it at any time. If their attendance record conflicts with yours, KinCue flags the conflict for your household rather than overwriting either version.
• Nobody else. We don't share your family's information with advertisers, data brokers, or anyone else who wants to market to you.

6. Service providers we use

We use a small number of processors to run KinCue. They handle data on our instructions and are not permitted to use it for their own purposes.

We may also disclose information if we are legally required to, to enforce our terms, or to protect the safety of someone at risk. If we're ever part of a merger or acquisition, your information may transfer as part of that — the policy that applies to it will not get weaker without notice to you.

7. Where information is stored, and for how long

KinCue's data is stored on Google Cloud infrastructure used by Firebase, primarily in the United States, and served through Vercel's global network. If you are outside the United States, your information will be transferred to and processed in the United States and other countries where our providers operate. Where required, we rely on standard contractual clauses and our providers' data-transfer frameworks.

We keep information for as long as your account is active. When you delete your account or a household, we delete or irreversibly anonymise the associated data within 30 days, apart from records we're required to keep (for example, correspondence relevant to a legal claim) and backups, which age out on their own retention cycle. Expired and cancelled invitations are removed on a rolling basis.

Access to production data is limited to the people who need it to operate KinCue. Data is encrypted in transit, and at rest by our infrastructure providers.

8. Your choices and rights

• See your data. Everything about your household is visible in the app. Ask us at support@kincue.app for a copy in a portable form.
• Export your calendar. Any activity's sessions can be downloaded as a standard .ics file.
• Correct it. Edit household, roster, activity, attendance and balance records directly in the app.
• Delete it. Delete a roster entry, an activity, a household, or your whole account from the app, or ask us to.
• Revoke access. Cancel a pending invitation or revoke an instructor's link at any time.
• Email. Service email about invitations and your account is part of the product. You can turn off optional reminders in the app, and any non-essential email has an unsubscribe link.
• Regional rights. Depending on where you live you may have additional rights — access, portability, correction, deletion, objection, or restriction under GDPR/UK GDPR, or the right to know, delete, correct, and opt out of "sharing" under California law. We don't sell or share personal information as those laws define it, and we don't discriminate against anyone for exercising a right. Write to support@kincue.app and we'll respond within the time the applicable law allows.

9. Changes to this policy

If we change this policy in a way that matters, we'll update the date at the top and tell you in the app or by email before the change takes effect. Continuing to use KinCue after that means the updated policy applies.

10. Contact us

Questions, requests, or concerns: support@kincue.app, or write to PrimeQuest Inc, [Registered address].