Your family, with boundaries.

Adults manage the service

There are no child accounts. Adults choose structured interests for their family, consider possible introductions and manage every conversation. Do not include a child’s name, photo, school, contact details or precise location.

What we use and why

We use your adult email address, display name, password hash and account declarations to provide your account. Family profiles contain an alias, age band, broad area, activity preferences and selected interests. We use those choices to suggest possible connections. Other eligible adults can see the profile information offered to them; an introduction and messages require both adults to accept.

We keep introductions, messages, blocks and reports so these features work, and account activity, security logs and connection information such as IP addresses to protect the service. Administrators can review reports, account restrictions and privacy requests. Safety-alert emails contain a generic notice and moderator link, with no report details.

Our basis for necessary account, profile, introduction and messaging processing is providing the service you request (contract). Our legitimate interests in protecting members and preventing abuse support proportionate security, identity eligibility, moderation and operational records. Optional interest-list updates use your separate email opt-in; you can ask us to stop them at [email protected].

Identity and age checks

Stripe processes identity documents and selfie checks on its hosted service. Kindred checks the result and date of birth to establish whether an adult is over 18, then retains the result and verification reference. The family app does not save documents, dates of birth or identity images. An ID check does not establish parenthood, good intentions or safety.

See Stripe’s privacy notice and Stripe Identity information.

Providers, cookies and suggestions

The app runs on Olisco-managed infrastructure. Cloudflare provides public network delivery, Stripe provides identity checks, and email infrastructure delivers account messages. These providers may process information internationally under their own arrangements. Their notices explain their international processing; contact us for information about the arrangements relevant to your account. See Cloudflare’s privacy notice.

Essential session and security cookies keep you signed in and protect forms. The family app does not use advertising cookies. Suggestions compare structured interests and broad preferences; adults make the connection decision. Successful automated identity and age checks establish eligibility. Contact us if you need help with a failed check or believe a result is wrong.

How long information stays

We retain account and family information while your account is open and until a closure request is completed. A deletion request pauses the account. If there are unresolved safety reports, these need review before erasure can finish. After provider redaction is confirmed, personal profile content and your messages are removed or scrubbed. Limited internal identifiers and restricted operational decision records remain to preserve other adults’ connection history and an accountable record of actions.

Same-host backups expire after seven days. A restored backup is held for review so completed erasures and restrictions can be reapplied before the service resumes.

Your choices and rights

You can change your profile, switch off discovery, block an account, download your data and request deletion in Settings. For access, correction, erasure, restriction or portability requests, or to object to processing based on legitimate interests, contact [email protected]. Rights depend on the processing and circumstances; we will explain any limits that apply to your request.

You can also complain to the Information Commissioner’s Office.