Kinward Privacy Policy

Last updated: June 20, 2026

Kinward (“Kinward,” “we,” “us,” or “our”) helps families protect older adults (“loved ones”) from scams by screening calls, messages, and financial and health activity, and by alerting the family. This Privacy Policy explains what information we collect, how we use and share it, and the choices you have.

By creating an account or using Kinward, you agree to this Policy. If you are setting up Kinward for a loved one, you confirm you have the authority and their consent to do so.

1. Information we collect

Account & profile

Identity and contact details you or your sign-in provider give us (name, email, profile photo, language).
Family and role information (who is an owner or member of a family, and the permissions each member has).

Loved one (“protected person”) information

Name, relationship, and notes you add about the loved one.
Device pairing status for the loved one’s phone.
Eligibility details you choose to enter (for benefits pre-screening), such as ZIP code, household size, income range, and similar.

Communications we screen

On a paired loved one’s phone, the content and metadata of incoming calls and text/picture messages that Kinward screens for scam indicators, including phone numbers, message text, and call audio that is processed to generate a screening result.
Screening results, risk scores, and alerts generated from that activity.
Contacts on the loved one’s device, used to recognize trusted callers and reduce false alarms.

Financial information

If a loved one connects a bank account, we use Plaid to access transaction and account information so we can screen for scam-related payments. We do not receive or store bank login credentials; those are handled by Plaid. Access tokens are stored encrypted.

Health information

If a loved one connects their health records, we use a third-party health-data provider to access records the loved one authorizes — such as medications, conditions, allergies, immunizations, visits, lab results, and (where available) appointments — so we can show caregivers a summary and notify them of relevant changes.
The loved one authenticates directly with their own health system or insurer; we do not receive those portal credentials. Health data we receive is stored encrypted and access is limited to family members the loved one’s family has authorized.

Device & technical

Device model, OS version, app version, and push notification tokens.
Log and diagnostic data needed to operate, secure, and improve the service.
On the mobile apps, a device advertising identifier (the Google Advertising ID on Android; on iOS we use Apple’s SKAdNetwork and do not use the IDFA or show a tracking prompt) plus in-app usage events, used for analytics and to measure how caregivers discover Kinward. Kinward shows no ads and does not use these identifiers to track you across other companies’ apps and sites. You can reset or delete the advertising ID in your device settings.

2. How we use information

To screen calls, messages, and financial and health activity for scam and safety risks, and to alert the family.
To provide caregiving features such as blocked-number management, benefits pre-screening, and health summaries and updates.
To operate, secure, troubleshoot, and improve the service.
To communicate with you about the service.
To comply with law and enforce our terms.

3. Automated and AI processing

To detect scams, Kinward uses automated analysis, including artificial-intelligence models, to evaluate the content of calls and messages and patterns in financial activity. Some content (for example, a message or call transcript) may be sent to AI service providers solely to produce a screening result. Screening is automated and best-effort; it may not catch every scam and may occasionally flag legitimate activity.

4. How we share information

We do not sell your personal information. We share it only:

Within your family: account owners and members see information for the loved ones and the permissions they’ve been granted.
With service providers who process data on our behalf under contract, such as: authentication (Auth0/Okta), bank connectivity (Plaid), health-records connectivity (our health-data provider), telephony/messaging (Twilio), AI screening and speech transcription (Microsoft Azure), mobile analytics and install attribution (Adjust, Google/Firebase), push notifications (Google/Firebase, Apple), email delivery (Resend), and hosting.
For legal reasons, to comply with law, respond to lawful requests, or protect rights, safety, and security.
In a business transfer, such as a merger or acquisition, subject to this Policy.

5. Your authorization and consent

Connecting a bank or health account is initiated by the loved one on their own device and requires them to authenticate with and authorize the relevant institution. Financial and health data is accessed under that authorization (patient- and account-holder-directed access) and used only to provide Kinward’s features to the family.

6. Data retention

We keep information for as long as needed to provide the service and for legitimate business or legal purposes. You can disconnect a bank or health connection, unpair a device, remove a loved one, or delete an account; when you do, we delete or de-identify the associated data within a reasonable period, except where retention is required by law.

7. Security

We use technical and organizational safeguards designed to protect information, including encryption in transit and encryption at rest for sensitive tokens and data, access controls, and activity logging. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. Your choices and rights

Access, correct, or delete your information, and disconnect bank/health connections or unpair a device, within the app.
Depending on where you live, you may have rights to access, correct, delete, or port your data, and to object to or restrict certain processing. To exercise these, contact us below.
You can control device permissions (microphone, contacts, SMS, notifications) in your device settings; some features require them to function.

9. Children

Kinward is intended for adults. It is not directed to children under 13, and we do not knowingly collect their personal information.

10. Changes to this Policy

We may update this Policy from time to time. We will post the updated version here and revise the “Last updated” date; material changes may be communicated in the app or by email.

11. Contact us

Questions or requests: privacy@kinoteai.com.

12. Text messaging (SMS)

Our Text Message Program page describes the opt-in step by step, with the exact consent wording and examples of what we send.

With your consent, Kinote (Kinward) sends account and service notifications, scam and safety alerts, and verification codes by text message (SMS) to the mobile number that you, the account holder, provide in the Kinward app.

Consent: You opt in in the Kinward app, under Account, by entering your own mobile number and agreeing to receive messages; we then text a verification code to confirm the number is yours. We do not send text messages to a number provided by anyone other than its owner, and we do not send invitations by text message. Consenting to receive text messages is not a condition of any purchase.
Message frequency: Message frequency varies based on your account activity and the alerts you enable.
Rates: Message and data rates may apply.
Opt out and help: Reply STOP to any message to unsubscribe, or HELP for help. You can also remove your number under Account in the app, which deletes it and the consent recorded with it.
No sharing: Mobile information and messaging consent are not shared with third parties or affiliates for marketing or promotional purposes. All of the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties. Mobile information is used only to deliver the Kinward messages described above, and is disclosed only to the messaging provider that transmits them on our behalf.