1. Introduction

KinLoop is operated by Chisel Theory LLC ("Chisel Theory," "we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use the KinLoop mobile applications (iOS and Android) and the KinLoop web portal at mykinloop.com (together, the "Service").

KinLoop is a caregiving coordination tool. Because it is used to coordinate care for a family member or other care recipient, the Service handles sensitive information, including health information, location, and information about people other than the person using the app. Please read this policy carefully.

By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account and Profile Information

Your name, email address, and (if you provide it) phone number
Your profile photo and display name
Authentication identifiers when you sign in with Google or Apple

2.2 Health and Care Information

Health-related information is the most sensitive category KinLoop handles. Depending on which features you use, this may include:

Care recipient details you enter (name, conditions, care notes)
Medications, dosages, schedules, and adherence records
Vitals and symptoms you log (such as blood pressure, weight, or glucose)
Care tasks, appointments, and care journal entries
Health provider and insurance details you choose to add
Vitals read from Apple Health (HealthKit), only after you grant permission. KinLoop reads this data to display it inside the app and does not write data back to Apple Health. Data obtained through HealthKit is never used for advertising or sold, and is not shared with third parties for those purposes.

2.3 Location Information

If you enable the safety and location features, KinLoop collects precise location for the care recipient's device, including in the background while the app is closed. This is used to power location sharing with care circle members, safe-zone (geofence) alerts when a person enters or leaves a defined area. Background location tracking runs only when you turn it on, and you can turn it off at any time in your device settings or the app.

2.4 Audio, Photos, and Documents

Voice memos you record for updates and chat (microphone access)
Doctor-visit recordings you make to capture an appointment (microphone access)
Photos of medication labels you scan to add a medication, and other photos and files you upload to updates, chat, tasks, or documents (photo library and camera access)
Care documents, insurance records, and other files you store in the documents vault, including any pin and expiration dates you set

Some of this processing happens entirely on your device. When you record a doctor visit, the recording is transcribed on your device, the audio is never uploaded to or stored on our servers, and only the transcript text you review and choose to save is kept with the visit in your care circle. When you scan a medication label, the photo is read on your device to pull out the medication details, and the image is not uploaded unless you separately choose to attach it.

2.5 Messages and Updates

In-app chat messages, activity-feed updates, and comments you send within a care circle are stored so they can be delivered to other members of that circle.

2.6 Calendar Access

If you use calendar sync (a Full Circle feature), KinLoop requests access to your device calendar (full access on iOS) so it can add and manage care appointments as calendar events. We do not read your existing personal calendar events for any other purpose.

2.7 Information About Other People

KinLoop lets you enter information about people who may not use the app themselves. This includes the email addresses of people you invite to a care circle and the names, phone numbers, and email addresses of emergency contacts. Please add this information only with the appropriate person's knowledge and consent.

2.8 Subscription and Payment Information

Subscriptions are purchased in the KinLoop mobile apps, and the transaction is processed by the Apple App Store or Google Play. We receive a record of your subscription status, plan, and renewal, but we do not receive or store your full payment card number.

2.9 Device and Diagnostic Information

To operate the Service we process basic device information, such as device type and operating system, and a push notification token so we can deliver reminders and alerts. On the web portal, Google reCAPTCHA (through Firebase App Check) may run to verify that requests come from a real browser and to protect the site from automated abuse; reCAPTCHA is provided by Google under its own privacy policy. Apart from this, KinLoop does not include third-party analytics, advertising, or crash-reporting software development kits, and does not track you across other apps or websites.

2.10 Caregiver Wellbeing

KinLoop includes wellbeing tools for the caregiver, such as daily mood and energy check-ins, self-care logging, and a private care journal. This information is private to your own account. It is not shared with other members of your care circle and is not included in digests or reports.

2.11 Automated Insights, Digests, and Alerts

KinLoop generates care insights, a weekly family digest, and occasional proactive nudges (for example, when a check-in has not happened in a couple of days or medication doses appear to have been missed). These are produced by automated rules applied to the information already in your care circle. They are computed on our servers and on your device, and your health information is not sent to any outside artificial-intelligence provider for this purpose. The push notifications we send for digests and alerts contain only brief summaries, not raw health readings.

3. How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve the Service
Enable care coordination between family members and caregivers
Send medication reminders, task reminders, and appointment notifications
Provide safety features, including location sharing and safe-zone alerts
Generate care reports, weekly digests, and automated care insights from the data inside your care circle
Deliver in-app messages and updates to the right care circle members
Process and manage your subscription
Respond to support requests and service-related communications
Detect and prevent fraud, abuse, and security threats

We do not use your information for advertising, and we do not sell your information.

4. Information Sharing

We do not sell your personal information. We share information only in the following circumstances:

With Care Circle Members: Information you add to a care circle, including health details, location, messages, and uploads, is shared with the other members of that circle. This is the core purpose of the Service.
Service Providers: We use trusted infrastructure providers to run the Service. These include Google Firebase and Google Cloud for authentication, database, file storage, and push notifications. On the web, we also use Google reCAPTCHA through Firebase App Check to protect the site from automated abuse. These providers process data on our behalf under their own commitments and do not use it for their own purposes. Care insights and digests are generated by our own automated rules, not by any third-party artificial-intelligence service.
App Stores: Apple and Google process subscriptions made through the App Store and Google Play.
Legal Requirements: We may disclose information if required by law or in response to valid legal requests.
Safety: We may share information when we believe in good faith that it is necessary to protect the safety of a care recipient, a user, or others.

5. Data Security

We implement technical and organizational measures to protect your information, including:

Encryption of data in transit (TLS)
Encryption of data at rest on our infrastructure providers
Secure sign-in, including Google and Apple sign-in
Role-based access so members see only the circles they belong to
Server-side access rules that keep circle data private to its members

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. Some sensitive data is purged automatically on a fixed schedule:

Location history: deleted after 30 days.
Safe-zone alerts and safety check-ins: deleted after 90 days.

You may request deletion of your account and associated personal data at any time through the app settings. When you delete your account, we remove your personal information and anonymize your past messages in shared circles so remaining members keep their conversation history without your identity attached. Care data that belongs to a shared circle (such as medications and vitals) remains with the circle for the other members. We may retain limited information where required for legal, security, or regulatory reasons.

7. Your Rights and Choices

You have the right to:

Access: Request a copy of your personal data
Correction: Update or correct inaccurate information
Deletion: Delete your account and data from the app settings
Export: Export your data in a portable format from the app
Permissions: Turn location, microphone, photos, calendar, and Apple Health access on or off in your device settings at any time

Depending on where you live, you may have additional rights under laws such as the California Consumer Privacy Act (CCPA), state consumer health data laws such as the Washington My Health My Data Act, or the EU and UK General Data Protection Regulation (GDPR). We do not sell your personal information, we do not share it for cross-context behavioral advertising, and we do not sell or share consumer health data. To exercise any right, contact us using the details below.

8. Health Data and Legal Note

KinLoop is a consumer caregiving tool, not a covered entity or business associate under HIPAA, and the health information you enter is not HIPAA-protected health information in that consumer context. We still treat it as sensitive and protect it as described in this policy. KinLoop is not a medical device and does not provide medical advice; see our Terms of Use for the medical disclaimer.

8.1 Consumer Health Data (Washington, Nevada, Connecticut, and similar)

Some newer state laws, including the Washington My Health My Data Act, Nevada SB 370, and the Connecticut Data Privacy Act, regulate "consumer health data," meaning information that identifies a person's past, present, or future physical or mental health. The consumer health data KinLoop processes is the care information you and your circle enter, such as medications, vitals, symptoms, conditions, allergies, appointments, and related notes. We use it only to provide the caregiving features you turn on and to share it with the members of your care circle at your direction.

We do not sell consumer health data, we do not share it for cross-context behavioral advertising, and we do not use it to target advertising. You may ask us to access, correct, or delete your consumer health data, or withdraw consent for its collection, by deleting your account in the app or contacting us at the address below. We honor deletion requests unless we are required to keep information for a legal or security reason. Because these laws are new and still developing, we review and update our practices as guidance evolves.

9. Children’s Privacy

The Service is not intended for children under 13 years of age, and we do not knowingly collect personal information from children under 13. A care recipient's information is entered by an adult caregiver, not by a child using the app. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it.

10. Third-Party Services

The Service integrates with third-party services, including Google Sign-In, Apple Sign-In, Apple Health, your device calendar, and payment providers (Apple and Google). These services have their own privacy policies, which we encourage you to review. We are not responsible for the privacy practices of third-party services.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the new Privacy Policy on this page and update the "Last updated" date. Please review this policy periodically.

12. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at:

Chisel Theory LLC

Email: [email protected]