LEGAL
Privacy Policy
This baseline policy explains how Kinelio handles account, profile, memorial, family and security data.
1. Who controls the data
The Kinelio service operator acts as controller for data processed to operate Kinelio. Formal operator and statutory contact details must be provided in the service's official business disclosure before paid commercial launch. Privacy requests may be submitted through the support/contact channel published by Kinelio.
2. Data we process
- Account data such as name, email, authentication and security records.
- Living-profile data and privacy choices supplied by the account holder.
- Memorial identity, life story, dates, photographs and family-contributed content.
- Family-space memberships, invitations and permissions.
- Technical logs needed for security, abuse prevention, reliability and diagnostics.
- Analytics data only when optional analytics consent has been granted.
3. Why we process it
Processing supports account and contract administration, user-requested publication, family collaboration, QR/Public ID continuity, platform security, legal obligations and service improvement. Where optional analytics requires consent, it is not loaded until consent is granted.
4. Public and private content
Some Kinelio content is intentionally public. Other information can be private, family-only or member-only. Users should not publish sensitive information about living people without an appropriate basis and authority.
5. Service providers
Kinelio uses infrastructure and security providers needed to operate the service. Cloudflare Turnstile is used for human-verification on protected browser forms. Google Analytics 4 may be used only after analytics consent and only when a measurement ID is configured. This release does not load Google AdSense or sell advertising space on Kinelio pages.
6. Retention and security
Data is retained for as long as needed for the account, memorial or family purpose, legal obligations, dispute handling, backups and security. Kinelio applies access controls, protected secrets, authenticated owner actions and operational logging. No online service can promise absolute security.
7. Your rights
Depending on applicable law, individuals may have rights to access, correct, delete, restrict or object to processing, receive portable data, withdraw consent and complain to a supervisory authority. Requests are assessed against legal obligations and the rights of other people.
8. International processing and changes
Some service providers may process data across borders using applicable transfer safeguards. Material changes to this policy should be versioned and published with an updated effective date.