Privacy

Last updated 3 August 2026

Kinnected holds things families don't put anywhere else: who is related to whom, when people were born, when people died, photographs, and private conversations. This page says plainly what is stored, who can see it, and how to take it back.

What is stored

• Your account — the email address you sign in with, and the name you choose to display.
• Your profile — anything you fill in yourself: photo, birthday, location, a short bio.
• The family tree — names, relationships, birth and death years, and any email address entered in order to invite someone.
• What you post — feed posts, comments, reactions, event details and RSVPs, memorial tributes, and answers to the question of the week.
• Messages — direct messages and family group chat, stored as written. They are not end-to-end encrypted; see below.
• The vault — photos, videos and documents you upload, along with the file name and who uploaded them.
• Errors — when a page breaks, the error message, the page it happened on, your browser's user-agent string, and your name are recorded so the problem can be found and fixed.

Who can see it

Kinnected is one shared family tree. Anything you post to the feed, the vault, events, or the group chat is visible to the family members connected to that tree. Direct messages are visible to you and the person you sent them to. Your notification settings and your account settings are yours alone.

This is enforced in the database itself with row-level security, not just hidden in the interface — a family member cannot read another family's tree even by asking the database directly.

Nothing is public. There is no browsing of other families, no directory, and no search that reaches outside your own tree.

Who else is involved

Kinnected is a small project, not a company, and it uses two services to run:

• Supabase stores the database, the uploaded files, and handles sign-in.
• Cloudflare Pages serves the website itself.

Both can technically access data they host, as any hosting provider can. Nothing is sold, shared with advertisers, or used to build a profile of you. There are no advertising or analytics trackers on this site.

A word about messages

Messages are stored in the database in readable form. That means they are protected by access rules, not by encryption that would put them beyond reach. Treat Kinnected as a private family space, not as a secure channel for anything you would not want recovered from a database backup.

People who never signed up

A family tree inevitably contains people who did not enter their own details — relatives who aren't online, children, and people who have died. If you add someone, you are the one deciding what is recorded about them. Please add only what you would be comfortable defending to that person, and remove anything they ask you to remove.

What you can do

• Export everything. The family tree page has an Export button that downloads your tree, posts, events, messages, and vault index as a file you keep.
• Delete your account. Settings → Account → Delete account removes your profile, your posts, your messages, and your connections. Cards you added to the shared tree may remain, because other relatives' trees are built on them — delete those first if you want them gone.
• Turn off notifications per category in Settings → Notifications.

Deletion is immediate in the live database. Hosting providers keep backups for a period of their own, so deleted data may persist in those backups for a short time afterwards.

Children

Children appear in family trees as a matter of course, added by a parent. Kinnected is not designed for children to sign up and use on their own, and accounts should be created by an adult.

Changes

If what is stored or who can see it changes, this page changes with it, and the date at the top moves. Meaningful changes will be announced in the app rather than quietly edited in.

Questions

Kinnected is run by the family member who set it up. Ask them — they are the one with access, and they are the right person to answer.