Privacy notice
What we collect, why, and what you can do about it.
Last updated: 16 October 2026
This policy explains how WURK ApS processes personal data when you visit kinnd.eu or use the KINND app at app.kinnd.eu. KINND is a private space where parents and family coordinate daily life around their children and share information, messages and media.
This is a translation. If the Danish and English versions differ, the Danish version applies.
1. Data controller
WURK ApS, CVR no. 37547395, Skoleholdervej 91, 2400 Copenhagen NV, Denmark, is the data controller.
Send questions about personal data to privacy@kinnd.eu.
2. The data we process
| Category | Data | Source |
|---|---|---|
| Account | Name, email, phone number, password (encrypted), two-step login details, language and country | You |
| Family and relations | Who you are connected to as parent, co-parent, guardian or family member, and invitations | You and those who invite you |
| Child profiles | The child’s name, date of birth, profile picture and what you choose to add, such as appointments, custody schedule, notes, school or daycare and contacts | Parents and guardians |
| Content | Calendar events, messages, notes, photos, videos and other files | You and those you share with |
| Media metadata | Original files are stored with their embedded metadata (EXIF), such as time, device and any GPS position | The files you upload |
| Subscription and payment | Plan, trial period, payment status, invoices, country and VAT. Card details are handled by our payment provider; we do not store card numbers | You and the payment provider |
| Technical and security | IP address, device and browser details, device ID, login history and log files | Your device |
| Communication | Support requests and the emails and text messages we send you | You and us |
| Sign-in with Google or Microsoft | If you choose it: which provider, your account ID with them and your email address | Google or Microsoft |
| Calendar and task sync | If you connect it: your Google or Microsoft account email, the access Google or Microsoft gives KINND (access tokens), the ID of the KINND calendar and task list, and the IDs of the items KINND has created there | You, and Google or Microsoft |
Sensitive data. KINND does not require sensitive data. If you choose to add, for example, health information about yourself or a child, we process it only to show it to the people you share with.
Data about children and others. Only adults aged 18 or over can create an account. Children do not have their own login. When you add data about a child or another person, you are responsible for having the right to do so, for example as holder of parental responsibility or with that person’s acceptance.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Create and run your account and provide the service, including sharing with the people you have chosen | Performance of our contract with you, GDPR Art. 6(1)(b) |
| Process data about children and other persons that users add | Our and the users’ legitimate interest in coordinating the children’s daily life, Art. 6(1)(f) |
| Process sensitive data you choose to add | Explicit consent, Art. 9(2)(a). For children, consent is given by the holder of parental responsibility |
| Send service messages by email and text, such as login codes and notices about subscription and deletion | The contract, Art. 6(1)(b) |
| Payment, invoicing and bookkeeping | The contract and legal obligation under the Danish Bookkeeping Act, Art. 6(1)(b) and (c) |
| Calendar and task sync with Google or Microsoft, when you connect it (section 5) | The contract, Art. 6(1)(b) |
| Security, two-step login, and preventing fraud and unauthorised access to children’s data | Legitimate interest, Art. 6(1)(f) |
| Investigate reports of illegal content and misuse and pass confirmed cases to authorities | Legitimate interest and legal obligation, Art. 6(1)(c) and (f), Art. 9(2)(f), and section 8 of the Danish Data Protection Act |
| Newsletters and marketing | Your consent, Art. 6(1)(a), and section 10 of the Danish Marketing Practices Act |
| Statistics and non-essential cookies | Your consent under the Danish Cookie Order |
You can withdraw consent at any time. This does not affect the lawfulness of processing carried out before the withdrawal.
We do not use your data for automated decisions or profiling with legal effect, and we do not sell personal data.
4. Media and location data
We store original photos and videos with their metadata so you can download them again in full quality. GPS position in metadata is not shown to other users and is removed from the copy you download. We use it only where necessary to investigate a specific case of misuse or unlawful access.
5. Calendar and task sync (Google and Microsoft)
You can choose to show KINND appointments and tasks in Google Calendar and Google Tasks, or in Microsoft Outlook Calendar and Microsoft To Do. Nothing is sent to Google or Microsoft unless you connect your account yourself in the app.
Only KINND’s own calendar and task list. When you connect, KINND creates one calendar and one task list called “KINND” in your Google or Microsoft account. KINND only creates and manages that calendar and that task list. KINND never reads your other calendars, events or task lists.
What is sent. KINND sends the appointments and tasks you can see in KINND to the KINND calendar and task list. Depending on the detail level you choose in the app, each item can contain:
- the title
- the start and end time
- the location
- the child’s first name
- a link to the item in KINND
No other information from KINND is sent. When the items are in your Google or Microsoft account, Google’s or Microsoft’s own privacy terms also apply to them, and anyone you share that calendar or task list with can see them.
What we keep. To keep the sync working, we store the data listed under “Calendar and task sync” in section 2.
How to disconnect. You can disconnect at any time in the app settings. You can also remove KINND’s access in your Google Account or your Microsoft account (for a work or school account: My Apps). When you disconnect, KINND stops sending items and deletes the stored access tokens and IDs. The KINND calendar and task list stay in your Google or Microsoft account until you delete them there.
Google user data. KINND’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use data from Google only to provide the sync you have turned on. We do not sell it, use it for advertising or use it to train AI models. People at KINND do not read it, unless you ask us to for support, it is needed for security, or the law requires it.
6. Recipients
We share data only when necessary:
- Other users: the parents, guardians and family members you are connected to see the content shared with them.
- Processors: suppliers that process data on our behalf under a data processing agreement.
- Authorities: the police and other authorities when the law requires it, or when we have confirmed an unlawful matter. In those cases we may disclose user data, device IDs, IP addresses and relevant content.
- Google and Microsoft: only if you connect calendar and task sync, and only the items described in section 5. They receive the items under their own terms, as independent controllers.
- Advisers and business transfers: auditor, lawyer and any buyer of the service, under confidentiality.
| Processor | Task | Location |
|---|---|---|
| Brevo (Sendinblue SAS) | Sending email and text messages | EU (France) |
| Quickpay ApS | Payment gateway | EU (Denmark) |
| Hetzner GmbH | Operations, database and file storage | EU (Germany) |
7. Transfers outside the EU/EEA
We store the data in the EU/EEA. If a supplier exceptionally processes data outside the EU/EEA, this happens only on the basis of an adequacy decision from the European Commission or the Commission’s standard contractual clauses. Contact us for a copy of the basis.
If you connect calendar and task sync, Google or Microsoft may process the items outside the EU/EEA under their own terms. This happens only because you have chosen to connect.
8. How long we keep data
| Data | Retention |
|---|---|
| Account, child profiles and content | As long as the account is active |
| A child’s space after an expired subscription where usage exceeds the Free plan | Hidden, then deleted 90 days after the subscription expires. Your account is not deleted. You are notified 90, 60 and 7 days before, with the exact date |
| Account you delete yourself | Deleted without undue delay and no later than 30 days after. Backups are overwritten within 90 days |
| Bookkeeping records, such as invoices | 5 years from the end of the financial year |
| Calendar and task sync: access tokens and IDs | Until you disconnect or delete your account |
| Security logs | 12 months |
| Cases of misuse or unlawful matters | As long as the case is pending and claims can be made |
| Support requests | 1 year after the case is closed |
If you are the only parent on a child profile and delete your account, we also delete the child’s data. You confirm the deletion through an emailed link that expires after 24 hours.
9. Security
We protect the data with, among other things, encrypted connections, two-step login, access control and logging. If a security breach creates a high risk for you, we tell you without undue delay.
10. Cookies
kinnd.eu and the app use necessary cookies and local storage for login, security and your settings. Cookies for statistics or marketing are set only if you have consented in the cookie banner, where you can also change your choice.
11. Your rights
You have the right to:
- access the data we process about you
- have inaccurate data corrected
- have data erased
- have processing restricted
- object to processing based on legitimate interest
- receive your data in a commonly used, machine-readable format (data portability)
- withdraw consent
Write to privacy@kinnd.eu to use your rights. We reply within one month. Holders of parental responsibility can exercise the rights on the child’s behalf.
12. Complaints
You can complain to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, Denmark, datatilsynet.dk, or to the supervisory authority in the EU country where you live. We would like to hear from you first so we can try to resolve the matter.
13. Changes
We update this policy when the service or the rules change. For material changes, we notify you in the app or by email before they take effect.