Kinlumo - Family Locator — Privacy Policy

Kinlumo - Family Locator helps family members share their location by choice. It is published by MAYC CONSULTORIA INTEGRAL S.L. The app is free. We do not sell personal data, show advertising, or use advertising identifiers, analytics SDKs or cross-app tracking.

Your profile and circle

You choose a name. Kinlumo creates a device identity and keeps its private signing key in your device’s Keychain. Our server stores the corresponding public key, device identifier, name and creation time so it can recognize your requests. Creating a profile does not require your phone number, email address or contacts. A profile belongs to one device; another device needs its own profile and invitation.

The server stores your circle name, membership, owner, invitations and pending join requests. An invitation is single-use and expires after one day. The circle owner approves each new member. Members can see the names and sharing states of the people in their circle. The owner can see and approve pending requests. Adding a member pauses everyone’s location sharing until each person chooses to share with the updated circle.

Location stays under your control

Joining a circle never starts location sharing. You first choose a timed session and grant location permission. During that session, Kinlumo sends your latest coordinates, accuracy and measurement time to our server for your current circle to see. Sharing can continue in the background with the system’s location indicator. You can choose approximate location in your device settings.

We keep only the latest location, not a movement history. Circle members cannot see a location whose last update is five minutes old. Session expiry stops access immediately; the server’s regular cleanup removes expired session data. Stopping while connected removes your location from the server. Leaving a circle, removal from it or deleting your profile also removes your location.

If you stop without a connection, acquisition stops on your device immediately. Kinlumo shows that server removal is pending and retries when connected. The last uploaded location becomes hidden within five minutes of its last update, even if removal is still pending. System and network limits can interrupt updates. Kinlumo is not an emergency service.

Check-ins and security records

You can send a short status such as “Arrived” without sending coordinates. Your circle sees your name, chosen status and time. Check-ins expire after one day and are removed by regular cleanup.

We retain short-lived request identifiers to prevent replay for ten minutes, request-limit counters for up to one day, and stopped-session identifiers for one day to prevent delayed requests from restarting sharing. Automated cleanup normally runs every minute and also runs during API activity. Temporary service interruptions can delay physical cleanup; expiry and access checks still apply when requests can be served.

Services used to run Kinlumo

Our hosting infrastructure and Cloudflare process network requests to deliver the app’s backend, introduction and public pages. They receive connection information, including IP addresses, as needed to provide and protect those services. Apple MapKit provides the map and handles map requests under Apple’s privacy practices. Data may be processed outside your country.

Location and circle data travel over encrypted HTTPS connections. This is not end-to-end encrypted sharing: our backend processes the latest location to provide it to authorized circle members. Only share with people you trust; another member can retain or screenshot information they see.

The app stores introduction progress, preferences and pending stop requests on the device. On the first launch it may check whether WhatsApp can be opened to decide whether to offer a rating prompt. It does not read WhatsApp messages, contacts or account information, and does not send the result to our server.

Export and deletion

In You, choose “Export my data” to save your profile, current sharing data and recent check-ins. The file belongs to you; take care when sending or storing it elsewhere.

Choose “Delete my profile” to remove your name, membership, location and check-ins from our active service. Keep the app open until deletion is confirmed. The app then removes its local identity. We retain only the retired public key and its identifier to prevent a deleted profile from being recreated by replaying an old request and to confirm deletion again if its reply was lost. Uninstalling the app alone does not send a deletion request.

Help and your choices

You can stop sharing, leave a circle, revoke location permission, export your data and delete your profile. Family members should use the app with informed agreement; it must not be used for covert tracking. Where a child needs a parent’s or guardian’s permission, that adult should explain the sharing controls and help them use the app appropriately.

For privacy, access or deletion requests, use the support form. The form collects the name, email address, subject and message you provide so the support team can respond. Your message is stored and routed to support. Do not include a private signing key or unnecessary location details. Applicable privacy rights may include access, correction, deletion, restriction and a complaint to your local data protection authority.