Privacy Policy

Last updated: October 21, 2026

This policy explains what personal data Kinfold collects, why, and what you can do about it. It applies to the Kinfold Android app and the website at kinfold.org.

Who we are

Kinfold is operated by Hireful SRL, Romania ("we", "us"), which is the controller of your personal data. For any privacy question or request, contact us at privacy@kinfold.org.

What we collect

Account details: your email address, an optional display name, and your password, which we store only as a one-way hash.
Content you create: shopping lists and items (including quantities, notes and prices you enter), groups and their members, todos and budgets.
Sharing data: share links you create and the people who join your lists or groups.
Technical data: sign-in session tokens, and the IP address, device user agent and time of requests, which our servers log to keep the service secure and to diagnose errors.

We do not use advertising, we do not use third-party analytics or tracking, and we do not sell or rent your personal data.

How we use it

To create and run your account and sign you in.
To store your lists, todos and budgets and sync them across your devices.
To share content with the people you choose.
To protect the service against abuse and to fix problems.

Under the GDPR, we process your data to perform our contract with you (providing the service) and, for security logs, based on our legitimate interest in keeping Kinfold safe and reliable.

Who can see your data

Content you put in a shared list or group is visible to its members. Otherwise we only share data with service providers that run Kinfold for us, under data processing agreements:

Cloudflare – hosting, networking and request logs.
Neon – our database, hosted on Amazon Web Services in Frankfurt, Germany (EU).
Google – distribution of the app through Google Play.

Some providers may process data outside the EU. Where they do, they use safeguards recognised under the GDPR, such as the EU Standard Contractual Clauses.

Security

All data is encrypted in transit (HTTPS). Passwords are hashed, and sign-in tokens on your phone are kept in the device's secure storage.

How long we keep it

We keep your data while your account exists. When you delete your account, we delete your personal data right away; it can take up to 15 minutes before you are signed out on all your devices. Copies may remain in encrypted database backups for up to 30 days before they are overwritten. Server logs are kept for a short period for security and troubleshooting.

Deleting your account

You can delete your account at any time in the app (Account → Delete account), or by following the steps on our account deletion page.

Your rights

You can ask us to access, correct, delete or export your personal data, and to restrict or object to how we process it. Email privacy@kinfold.org and we will respond within one month. You also have the right to complain to your local data protection authority.

Children

Kinfold is not directed at children under 13, and we do not knowingly collect their personal data. If you believe a child under 13 has created an account, contact us at privacy@kinfold.org and we will delete it.

Changes to this policy

If we change this policy, we will update the date above and, for significant changes, let you know in the app.

What we collect

Account details: your email address, an optional display name, and your password, which we store only as a one-way hash.

Content you create: shopping lists and items (including quantities, notes and prices you enter), groups and their members, todos and budgets.

Sharing data: share links you create and the people who join your lists or groups.

Technical data: sign-in session tokens, and the IP address, device user agent and time of requests, which our servers log to keep the service secure and to diagnose errors.

We do not use advertising, we do not use third-party analytics or tracking, and we do not sell or rent your personal data.

How we use it

To create and run your account and sign you in.

To store your lists, todos and budgets and sync them across your devices.

To share content with the people you choose.

To protect the service against abuse and to fix problems.

Under the GDPR, we process your data to perform our contract with you (providing the service) and, for security logs, based on our legitimate interest in keeping Kinfold safe and reliable.

Who can see your data

Content you put in a shared list or group is visible to its members. Otherwise we only share data with service providers that run Kinfold for us, under data processing agreements:

Cloudflare – hosting, networking and request logs.

Neon – our database, hosted on Amazon Web Services in Frankfurt, Germany (EU).

Google – distribution of the app through Google Play.

Some providers may process data outside the EU. Where they do, they use safeguards recognised under the GDPR, such as the EU Standard Contractual Clauses.

How long we keep it