Legal

    Privacy Policy

    Last updated: October 2026

    This Privacy Policy explains how Rex Connexa Ltd, trading as KinCarer, collects, uses, stores and shares personal information when you use KinCarer.

    01.Who we are

    KinCarer is a trading name owned and operated by Rex Connexa Ltd, a company registered in England and Wales.

    For UK data protection law, Rex Connexa Ltd is the data controller for account holders, app users, website visitors and, where applicable, care recipients.

    Contact us at hello@kincarer.com.

    02.What KinCarer does

    KinCarer is a family care coordination app that helps families and trusted carers organise care around a person receiving care.

    Users can create and manage a shared care space, also called a care circle, that may include family members, relatives, friends, trusted paid carers and other people involved in supporting care.

    KinCarer is not a medical service, healthcare provider, emergency service, safeguarding service or professional care provider.

    03.Important notice about care-recipient information

    KinCarer may be used to store information about another person, such as a parent, relative or person receiving care.

    If you add information about another person, you are responsible for ensuring that you have the right, authority, consent or lawful basis to do so.

    You should only add information that is appropriate, accurate and necessary for care coordination.

    If the person receiving care has capacity to make decisions about their information, you should ensure they understand and agree to their information being added to KinCarer where required.

    04.Information we collect

    We may collect and process the following types of information.

    Account information

    • Name, email address, phone number, login method and authentication identifiers.
    • Account settings, subscription status, care circle role, profile information and support communications.

    Care circle information

    • Care circle name, invited users, roles and permissions, relationship to the care recipient and activity within the care circle.

    Care-recipient information

    • Name, date of birth if provided, care location, routines, preferences, notes, reminders, visits, medication-related notes, documents, photos, emergency contacts, accessibility needs and health-related notes.

    Content you upload

    • Notes, documents, images, photos, schedules, routines, reminders, messages, handover notes, files and other user-generated content.

    Location and check-in information

    • Care location, geofence status, manual and automatic check-ins, nearby notifications, arrival/departure-related events, location permissions and timestamps.

    Clara AI assistant information

    • Questions or prompts, recent Clara chat context, generated responses, timestamps, technical logs, safety signals and feedback.
    • When you use Clara and give consent, care-circle context sent to OpenAI may include care circle name, cared-for person's name, schedule items, tasks, events, notes, routines, handover notes, check-in and care-location status, care team names, roles, permissions and approved Clara Memory items.

    Subscription and payment information

    • App store receipt information, subscription and renewal status, entitlement data, transaction identifiers and limited billing metadata.

    Device, app and website usage information

    • Device type, operating system, app version, device identifiers, IP address, crash logs, diagnostic logs, feature usage, session information, notification delivery status, security logs and analytics data.

    Support and communications

    • Name, email address, message content, attachments, support history and technical details needed to investigate issues.

    05.How we collect information

    We collect information directly from you, from other care circle members, automatically from your device, from Apple, Google, RevenueCat and authentication providers, from service providers that help us operate KinCarer, and from Clara interactions when you use the AI assistant.

    06.How we use information

    We use personal information to provide KinCarer, manage subscriptions, improve and secure the service, communicate with you, and meet legal and regulatory obligations.

    Provide KinCarer

    • Create and manage accounts and care circles.
    • Invite users and display care information.
    • Manage routines, reminders, handovers, documents, photos and notifications.
    • Operate Clara and location/check-in features.

    Manage subscriptions

    • Check access to Free, Family or Family+ features.
    • Manage trials, restore purchases, prevent abuse and respond to billing support requests.

    Improve and secure KinCarer

    • Monitor performance, fix bugs, understand usage, prevent fraud, detect unauthorised access and improve the app.

    07.Our lawful bases for processing UK personal data

    Where UK data protection law applies, we rely on one or more lawful bases depending on the context.

    Contract

    We process information where necessary to provide KinCarer under our Terms of Service, including account creation, care-circle functionality, subscriptions, support and app features.

    Legitimate interests

    We use legitimate interests for security, fraud prevention, improvement, reliability, support, analytics, enforcement and business operations where your rights do not override our interests.

    Consent

    We rely on consent where required for precise location access, marketing communications, certain cookies or analytics technologies, push notifications and other optional permissions.

    Legal obligation

    We process information where necessary to comply with legal obligations.

    Vital interests

    In limited circumstances, we may process information to protect someone’s vital interests in an urgent safety situation.

    Special category data

    KinCarer may process health-related or care-related information that may be special category data under UK law. Where we do so, we rely on an appropriate Article 6 basis and a relevant Article 9 condition, such as explicit consent, vital interests, legal claims or health/social care purposes where applicable.

    08.When we share information

    We do not sell your care content.

    With care circle members

    Information added to a care circle may be visible to other members depending on their role, permissions and settings.

    With OpenAI for Clara

    If you choose to use Clara and give consent, we send your Clara message and relevant care-circle context to OpenAI so OpenAI can generate Clara responses. You can withdraw Clara consent in Settings.

    With service providers

    We use providers for hosting, storage, authentication, analytics, crash reporting, notifications, email, subscription management, support, security, logging, maps and website analytics.

    With Apple, Google and RevenueCat

    These providers may process subscription, receipt and entitlement information when you subscribe through the app stores.

    For legal, safety and security reasons

    We may share information to comply with law, respond to lawful requests, protect legal rights, investigate misuse, prevent fraud, protect security or respond to urgent safety concerns.

    Business transfers

    Information may be transferred if Rex Connexa Ltd or KinCarer is involved in a merger, acquisition, restructuring, sale of assets or transfer of business.

    09.Third-party services we may use

    KinCarer uses OpenAI to power Clara, our optional AI assistant. When you use Clara and give consent, your Clara message and relevant care-circle context are sent to OpenAI so OpenAI can generate a response.

    KinCarer may also use third-party services including app stores, RevenueCat, Supabase or other hosting and database providers, Firebase or similar tools, email delivery, authentication, analytics, crash reporting, maps, location services and customer support tools.

    The exact providers we use may change as KinCarer develops, and we will update this policy or provide further notice where required.

    10.International transfers

    Rex Connexa Ltd is based in the United Kingdom.

    Your information may be processed in the United Kingdom, the United States, the European Economic Area or other countries where our providers operate.

    Where UK data protection law applies and information is transferred outside the UK, we use appropriate safeguards where required, such as adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses and contractual protections with providers.

    11.How long we keep information

    We keep personal information only for as long as reasonably necessary for the purposes described in this policy.

    Account information

    Kept while your account is active and for a reasonable period after closure where needed for legal, security, support, backup or operational reasons.

    Care-circle content

    Generally kept while the relevant care circle or account remains active, unless deleted earlier by users with appropriate permissions.

    Subscription information

    Kept as needed to manage access, resolve billing issues, comply with law and handle disputes.

    Logs and diagnostics

    Usually kept for a limited period unless longer retention is needed for security, fraud prevention, debugging, legal or operational reasons.

    12.How we protect information

    We use reasonable technical and organisational measures designed to protect personal information, including access controls, authentication controls, encryption in transit, encryption at rest where supported, secure cloud infrastructure, logging and monitoring, least-privilege access, internal access restrictions, backup controls, security reviews, vendor due diligence and incident response processes.

    No app or online service can be guaranteed to be completely secure. You are responsible for keeping your login details secure and for ensuring that people you invite to a care circle are appropriate.

    13.Your choices and controls

    You may be able to update account details, change care-circle information, delete certain content, manage invited users, control notification settings, control location permissions, manage device permissions, unsubscribe from marketing emails, delete your account where available, and contact us to exercise your legal rights.

    14.Your UK data protection rights

    If UK data protection law applies, you may have the right to access, correct, delete, restrict, object, request portability, withdraw consent, object to direct marketing and complain to the UK Information Commissioner’s Office.

    You can contact us at hello@kincarer.com to exercise your rights.

    We may need to verify your identity before responding. Some rights are subject to legal limits and exceptions.

    15.US privacy rights

    Depending on where you live in the United States, you may have privacy rights under state law, including rights to know, access, correct, delete, receive a copy of personal information and opt out of certain processing.

    KinCarer does not sell care content and does not use care content for advertising.

    To exercise privacy rights, contact hello@kincarer.com.

    16.California privacy notice

    This section applies to California residents where the CCPA/CPRA applies.

    In the last 12 months, we may have collected identifiers, customer records information, commercial information, internet or network activity, geolocation data, sensory information, health-related or sensitive information and limited inferences used to improve the service.

    We may disclose personal information to care circle members, providers, Apple, Google, RevenueCat, legal authorities and business transfer recipients. We do not sell care content and we do not use care content for cross-context behavioural advertising.

    California residents may have rights to know, access, delete, correct, limit sensitive data use, opt out of sale or sharing where applicable, and not be discriminated against for exercising rights.

    17.Children

    KinCarer is not intended for children. You must be at least 18 years old to create an account or use KinCarer.

    We do not knowingly collect personal information from children under 13 in the United States or children under the applicable age of digital consent in the United Kingdom.

    If you believe a child has provided personal information to KinCarer, contact us at hello@kincarer.com.

    18.Marketing

    We may send service-related messages that are necessary for your account or use of KinCarer, and marketing communications where permitted by law.

    You can unsubscribe from marketing emails using the unsubscribe link in the email or by contacting us.

    We will not use your care content for advertising.

    19.Cookies and similar technologies

    Our website may use cookies or similar technologies to operate the website, remember preferences, understand traffic, improve performance, detect security issues and measure marketing effectiveness.

    Where required, we will ask for your consent before using non-essential cookies. You can control cookies through your browser settings.

    We use Google Analytics to count visits to our website. Until you accept cookies, it sets no cookies and sends Google only basic signals without cookies, such as that a page was viewed. If you choose "Only essential", it sends nothing from then on.

    With your consent, we use Meta's pixel on our website to measure how well our ads work. It does not run on the KinCarer app, and it is never used with care content.

    The mobile app may use similar technologies, SDKs or device identifiers for app functionality, analytics, crash reporting, security and subscription management.

    20.Push notifications

    KinCarer may send push notifications for reminders, care updates, invitations, check-ins, subscription information or other app-related messages.

    You can control push notifications through your device settings. If you turn off notifications, some features may not work as intended.

    21.Location permissions

    KinCarer may request access to location permissions to support care-location setup, nearby notifications, geofencing, manual check-ins or automatic check-ins.

    You can control location permissions through your device settings. If you disable location permissions, location-based features may not work.

    Location information may be inaccurate, delayed or unavailable depending on your device, signal, permissions, operating system and settings.

    22.AI and automated processing

    KinCarer uses Clara, an optional AI assistant powered by OpenAI, to help users search, summarise or understand care information.

    Before Clara sends care-circle information to OpenAI, the app asks for consent. If consent is missing or withdrawn, Clara will not send care-circle information to OpenAI.

    Information sent to OpenAI may include your message, recent Clara chat context, care circle name, cared-for person's name, schedule items, tasks, events, notes, routines, handover notes, check-in and care-location status, care team names, roles, permissions and approved Clara Memory items.

    AI outputs may be inaccurate, incomplete or unsuitable for your circumstances.

    We do not use Clara to make legal, medical, employment, credit, housing, insurance or similarly significant decisions about you.

    We may process prompts, outputs and related logs to provide the feature, maintain safety, improve performance, prevent misuse and troubleshoot issues. By default, OpenAI does not use API data to train its models.

    23.Account deletion

    You may request deletion of your account through in-app tools where available or by contacting us at hello@kincarer.com.

    Deleting your account may remove your access to KinCarer and may delete or anonymise certain account information, but some information may remain where another user added it, it remains in a shared care circle, it has been copied or exported, retention is required for legal/security/backup reasons or deletion is delayed by backup systems.

    24.Data accuracy

    KinCarer relies heavily on information entered by users. We do not independently verify the accuracy of care notes, medication-related notes, routines, reminders, documents, photos, check-ins or other user-generated content.

    You should keep information accurate and up to date and not rely on KinCarer as your only source of important care, medical, medication, safety or emergency information.

    26.Changes to this Privacy Policy

    We may update this Privacy Policy from time to time. If we make material changes, we will provide reasonable notice, such as by email, in-app notification or website notice.

    Where practical, we will aim to provide at least 14 days’ notice before material changes take effect. The updated policy will be effective from the date stated at the top of the policy.

    27.Contact us

    For questions about this Privacy Policy or to exercise your privacy rights, contact Rex Connexa Ltd, trading as KinCarer, at hello@kincarer.com.