privacy policy

kalin ("kalin", "we", "us") is a caregiving app for families supporting a loved one through serious illness. you can reach us any time at hello@kalin.care. we are the controller of the personal data described below.

• account details — your email address and display name, used to sign you in and show who wrote what inside a care circle.
• care circle content — tasks, appointments, medications, vitals, intake and output logs, expenses, check-ins, memory book entries, and any photos you upload.
• health-related information about the person being cared for, entered voluntarily by you or other members of your circle.
• companion conversations — messages you send to the kalin ai companion, used to generate a reply and to enforce fair-use limits.
• basic technical data — device type, browser, and error logs needed to keep the app running and diagnose crashes.

we do not collect location data, we do not use advertising trackers, and we never sell personal information.

• to run the features you asked for: syncing your care circle across devices and members.
• to authenticate you and keep your account secure.
• to send account emails such as sign-up confirmation and password resets.
• to answer support requests you send us.
• to fix bugs and improve reliability.

care circle content is visible only to the members of that circle. the circle owner controls who is invited and each member's role — owner, caregiver, family, or viewer. viewers can read but not change records. removing a member immediately revokes their access.

kalin staff do not browse circle content. we access it only if you explicitly ask us to while resolving a support issue.

• our managed cloud backend provider — hosts the database, authentication, and encrypted file storage.
• our ai provider — processes companion messages to generate a response; conversations are not used to train third-party models.
• our email provider — delivers account and support emails.

each processor is bound by contract to handle data only on our instructions. some may process data outside your country; where that happens we rely on standard contractual clauses.

data is encrypted in transit (tls) and at rest. every table is protected by row-level security so a request can only ever return rows belonging to a circle you are a member of. uploaded photos live in a private bucket and are served through short-lived signed links that expire. passwords are hashed and never visible to us.

we keep your data for as long as your account exists. deleting a care circle permanently removes its tasks, logs, vitals, expenses, and memory entries. deleting your account removes your profile and any circles you own. backups are rotated out within 30 days.

• access — export your circle data as csv from the app at any time.
• correction — edit or delete any record you created.
• deletion — delete a circle in settings, or email us to erase your whole account.
• objection and portability — write to us and we will respond within 30 days.

under the philippine data privacy act of 2012 and the gdpr, you may also lodge a complaint with your local data protection authority.

kalin is intended for adults. we do not knowingly create accounts for anyone under 16. a child may of course be the person receiving care, with their details entered by a responsible adult.

kalin is an organisational tool, not a medical device. nothing in the app — including companion responses and alerts — is a diagnosis or a substitute for professional medical advice.

if we change this policy materially we will update the date above and notify you in the app. questions, requests, or complaints go to hello@kalin.care.