Kindred

Start with one memory of them.

A private home for your family's photos, voice notes and recipes.

Free to sign up. No card needed.

Safe, secure and just for your family.

Already have an account? Log in

Your family space is always private and secure. May we use cookies to count visits, see which ads work and show our ads to people who've visited?

Privacy Policy

Last updated: October 2026

Introduction

Kindred ("we," "us," "our," or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our application. Kindred is provided by Property & Places Ltd (trading as Kindred), a company registered in England and Wales (company number 17452888), which is the data controller for your information. Registered office: 66 Paul Street, London, EC2A 4NA. For any questions about this policy or your data, contact us at support@kindred-app.co.uk.

Information We Collect

We collect information you provide directly:

  • Account information (name, email, password)
  • Family member details and relationships
  • Photos, videos, voice recordings, and written content
  • Messages, letters, and recipe information
  • Sensitive Legacy Vault information (financial, legal, personal wishes)
  • Payment information processed through Stripe
  • Waitlist details (your first name and email address) when you join our list on our website or through a Facebook lead form. Meta passes us what you enter in the form.

Why we use your information, our legal basis, and how long we keep it

The law says we must have a legal reason, called a "lawful basis", for each way we use your information. Here is what we do, why, and for how long.

  • Running your account and family space. This covers storing and showing your photos, recordings, letters, recipes, Journal and Legacy Vault to the people you choose, and sending letters when you ask us to. Basis: our contract with you. Kept: while your account is open, then deleted as set out in "Data Retention & Deletion".
  • Taking payments, running trials and giving refunds. Basis: our contract with you. Billing records (amounts, dates, Stripe references) are also kept because tax law requires it. Basis: legal obligation. Kept: 6 years after the end of the financial year they relate to.
  • Service emails, such as invites, reminders, receipts and letter notices. Basis: our contract with you. Kept: records of the emails we send, held by our email provider, for up to 2 years.
  • Waitlist and news emails. Emailing you when Kindred opens and with occasional news, if you have ticked the box to agree. You can unsubscribe at any time. Basis: your consent. Kept: until you unsubscribe or ask us to delete it, or until we stop sending these emails.
  • Helping you when you contact support. Basis: our legitimate interest in answering you and fixing problems. Kept: up to 2 years after your request is closed.
  • Keeping Kindred safe. This covers security, preventing fraud and basic activity logs, such as which pages were requested. Basis: our legitimate interest in running a secure service. Kept: for as long as our hosting provider keeps its security logs, currently up to 2 years.
  • Optional analytics, to see which pages are used most. Basis: your consent through the cookie banner. You can say no and Kindred works the same.
  • Executor access requests, including evidence such as a death certificate. Basis: our legitimate interest, and the interest of your family, in carrying out your wishes safely. Kept: while the request is open and for 12 months after we decide, then deleted.
  • Meeting legal duties, such as answering a valid request from the police or a court. Basis: legal obligation.

Data Security

We implement industry-standard security measures including encryption, secure authentication, and strict access controls. Your data is protected in transit and at rest (see "Data Storage & Encryption" below). However, no method of transmission over the internet is 100% secure. We recommend avoiding uploading anything you would not be comfortable storing digitally. For highly sensitive documents such as passwords or crypto seed phrases, use a dedicated secure storage service. Kindred is not designed to store those. You are responsible for maintaining your password confidentiality.

Data Storage & Encryption

Your data is stored across two separate, secured systems:

  • Application database: your account, family links, text content, Legacy Vault entries, letters, and settings.
  • Off-site object storage: your photos and voice recordings are kept in a dedicated, encrypted storage service (Cloudflare R2, in the European Union) that is physically and logically separate from the application servers and the website you use day to day. Other files you upload are stored by our hosting provider, Base44.

Why we store media off-site: Keeping your media in a separate, purpose built storage system, rather than on the servers that run the app, reduces the attack surface, improves resilience and durability, and means a problem with the website can never expose your files. The storage system has its own access credentials that are completely independent from the app.

Encryption: All data is encrypted in transit (TLS) while moving between your device, the app, and the storage system. Media files are encrypted at rest by the storage provider. Private files are never publicly listed or browsable. They can only be accessed through short lived, signed links issued on demand and tied to your authenticated session.

Who can see your data: Access is strictly scoped. Each family's media is stored under its own isolated namespace, and access is enforced by row-level security on every request. You can only ever see your own family's content. No other family, member, or user can access your photos, recordings, Legacy Vault, or letters. Items you mark as private are visible only to you. Administrators can view aggregate counts (for example, total photos stored) but cannot read your private content, Legacy Vault entries, or letters.

Seamless to you: Because media is fetched securely on demand, the experience feels exactly the same as if files were stored in the app. You won't notice any difference when viewing or uploading. The security happens behind the scenes.

Your rights

Under UK data protection law you have the right to:

  • get a copy of the information we hold about you
  • have wrong information corrected
  • have your information deleted
  • ask us to limit how we use your information
  • object to us using your information on the basis of our legitimate interests
  • get your information in a format you can take elsewhere (Download My Data)
  • withdraw your consent at any time, for example to analytics, without affecting what we did before

To use any of these rights, email support@kindred-app.co.uk. It's free, and we'll reply within one month.

Do you have to give us your information? You need to give us your name and email address to have an account, and payment details if you choose a paid plan. Everything else you add is up to you.

Automated decisions. We don't make decisions about you using only automated means. Executor requests and on-death letters are always reviewed by a person.

Complaints. If you're unhappy with how we've handled your information, please tell us first. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator: ico.org.uk or 0303 123 1113.

Data Retention & Deletion

You can ask us to delete your account at any time by emailing support@kindred-app.co.uk from the email address on your account. We'll confirm the request, delete your account and its content within 30 days, and tell you when it's done. If you pay for a plan, it will be cancelled straight away when your account is deleted. If you're the only member of your family space, the space is deleted too. If others remain, it passes to another member. Please download your data first if you'd like a copy, because deletion can't be undone. Photos and voice recordings are deleted from our file storage straight away. Deleted data is removed from our live systems within 30 days, and copies may remain in our hosting provider's routine backups for up to 12 months: backups taken every 4 hours are kept for 7 days, weekly backups for 30 days and monthly backups for 1 year. They are then deleted. A few records are kept for longer after your account is deleted, such as billing records, which tax law requires us to keep for 6 years. They are listed below.

After your account is deleted, we keep only these records, for these periods: billing records (amounts, dates, Stripe references) for 6 years after the end of the financial year they relate to; records of the emails we send, held by our email provider, for 2 years; support requests for 2 years after they are closed; and executor access evidence for 12 months after we decide on the request. Stripe also keeps its own payment records under its privacy policy. We do not keep any of your personal content, memories, or family data after deletion is complete. Copies of anything deleted may remain in our hosting provider's routine backups for up to 12 months, and are then deleted.

Data exports include your text content and references to uploaded media (file links), not the media files themselves.

AI Usage

Kindred uses AI to generate optional prompt suggestions that inspire you to write down memories, stories, and recipes. Here's what you should know:

  • What AI is used for: Generating short, generic prompt ideas (e.g. "What's a family tradition you'd like to keep alive?"). These are for inspiration only.
  • What data is sent: Only a generic instruction is sent to the AI model, for example, "generate a warm question about family memories." Your stored content (memories, photos, voice recordings, letters, Legacy Vault entries) is never sent to the AI model for prompt generation.
  • Your content stays yours: We do not use AI features on your family's content. You retain full ownership of everything you save in Kindred. AI generated prompts are suggestions. Your stories are your own.
  • Not professional advice: AI prompts are for creative inspiration only. They are not legal, medical, financial, or emergency advice. Always consult a qualified professional for important decisions.
  • Accuracy: Kindred does not guarantee that AI suggestions will be accurate, appropriate, or relevant to your family. You decide what to write and save.
  • Sharing thoughtfully: If an AI prompt inspires you to write about sensitive topics, share thoughtfully and only what you're comfortable preserving digitally.

If you have questions about how AI is used in Kindred, contact us at support@kindred-app.co.uk.

Who we share your information with

We don't sell your information or use it for advertising. We share it only with:

  • The people you choose in Kindred: your family members, letter recipients and the executors you name.
  • Companies that run parts of Kindred for us, under data processing contracts:
    • Base44, Inc., part of Wix.com: app hosting and database, storage of other files you upload, and sending app emails through Twilio SendGrid
    • Cloudflare: storage of photos and voice recordings (Cloudflare R2, in the European Union)
    • Stripe: payments (we never see or store your full card details)
    • Microsoft: our support email (Microsoft 365)
  • Sign-in providers. If you choose "Continue with Google, Microsoft, Facebook or Apple", that company tells us your name and email address. Their own privacy policy covers what they do.
  • Others where the law requires it, such as the police, a court or a regulator. Or, if Kindred is ever sold, the new owner, who must protect your information in the same way.

Information stored outside the UK

Some of these companies store or access information in the United States and other countries outside the UK. When information leaves the UK, it is protected in these ways:

  • App data (your account, family space, text, letters, Journal, Legacy Vault and other files) is stored by Base44 on servers that may be in the United States. For transfers outside the UK, we rely on safeguards approved under UK data protection law.
  • Photos and voice recordings are stored in the European Union on Cloudflare R2. The UK government recognises the EU as protecting data properly. Cloudflare is a US company and is also certified under the UK Extension, with the UK's approved data transfer contract (the UK Addendum to the EU standard contractual clauses) as a back-up.
  • Payments: Stripe is certified under the UK Extension, with the UK International Data Transfer Addendum as a back-up.
  • App emails: Twilio SendGrid sends our app emails. For transfers outside the UK, we rely on safeguards approved under UK data protection law.

Email support@kindred-app.co.uk if you'd like more detail.

Legacy Vault & Sensitive Data

Your Legacy Vault information is strictly private and only accessible to you via role-based access controls. Trusted executors or family members designated by you can submit a request for access to your Legacy Vault after your passing. The request requires passcode verification, evidence upload (such as a death certificate), and manual review by a Kindred administrator. If approved, the administrator chooses which specific Legacy Vault sections to release. Access is read only, scoped to selected sections, revocable, and may expire. Evidence documents are uploaded to private storage and are only visible to platform administrators for review. Nothing unlocks automatically. Kindred does not automatically verify death. Passcode verification confirms email access only, not legal authority. Kindred is not a will, probate service, legal executor service, death verification service, or official legal vault. Letters can be sent to recipients by email after explicit author confirmation (date-based and manual letters) or after manual admin review and approval (on-death letters). Release of on death letters is by manual review only. Kindred does not automatically send or release letters. Letter content sent to recipients includes only the letter itself, the author's name, and Kindred branding. No other family content is shared. Letters are not legal documents. We recommend keeping formal legal arrangements outside the app and consulting a solicitor for estate planning.

Children, other people and sensitive information

Age. You must be 13 or over to create a Kindred account, and 18 or over to buy a plan. If we learn that someone under 13 has an account, we will close it and delete their information.

Information about children. Families often add photos, recordings and stories about their children. Only members of your family space can see them. We never use them for advertising or share them publicly. A parent, or the young person once they're 13, can ask us at any time to remove content about them.

Information about other people. When you invite someone, write them a letter or name them as an executor, you give us their name and email address. We use these only to send the invite or letter, or to run the executor process. Our email tells them who it's from. Please only add information about other people if you think they'd be comfortable with it. Anyone can ask us to remove information about them.

Sensitive information. Memories, letters, the Journal and the Legacy Vault may include sensitive details, such as health, religion, ethnicity or sexuality. We only store this and show it to the people you choose. We never use it to profile you or for advertising. Where the information is about you, we rely on your explicit consent, which you give by choosing to add it. You can withdraw that consent at any time by deleting it.

People who have died. UK data protection law protects living people. However, we treat memories, letters and Legacy Vault notes about people who have died with the same care and privacy as everything else.

Cookies & Analytics

When you open Kindred, our hosting platform records basic page visits. That happens before you choose Accept or Decline on the cookie banner, so we can keep the service running and see overall traffic. Separately, we ask for your consent to optional analytics that help us improve Kindred, for example which product screens are used most. If you accept, those optional counts are switched on. If you decline, they stay off. Your consent choice is stored locally in your browser. You can change your choice at any time by clearing your browser data. Essential cookies required for authentication and core functionality are always active regardless of your choice.

Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by updating the "Last updated" date and posting the revised policy on our website.

Contact Us

If you have questions about this Privacy Policy, please contact us at:

support@kindred-app.co.uk

Your family space is always private and secure. May we use cookies to count visits, see which ads work and show our ads to people who've visited?