The short version
Your family's information belongs to your family. We do not sell it, we do not advertise against it, and no one outside the people you invite can see it. You can ask us for a copy of it, and you can ask for your account to be deleted from inside the app.
The rest of this page is the detail behind that paragraph. If anything here is unclear, write to hello@kindraapp.com and ask. A vague privacy policy is not worth much, and questions about it are welcome rather than tolerated.
Who we are
| Publisher | Kindra App LLC, an Iowa limited liability company |
|---|---|
| Product | Contrada |
| Address | 705 NE 10th Street, Ankeny, Iowa 50021, United States |
| Privacy contact | hello@kindraapp.com |
What Contrada stores
Everything below is information a family enters on purpose. Contrada does not read your contacts, your photo library, your other apps, or your messages.
Your account
Your email address and a password. Passwords are stored as a cryptographic hash, which means we cannot read yours and cannot tell you what it is.
Your care circle
The names and email addresses of the people you invite, and what each person is allowed to see and do.
Information about the person being cared for
Whatever the family chooses to record. In practice that usually includes a name and date of birth, medications with doses and schedules, a history of doses given and by whom, appointments, and notes.
Documents
Version 1.0 does not ask you to upload documents. A document vault is planned for a later version, and this page will describe how it works before it is switched on.
A record of access
Contrada keeps a log of who changed what within your care circle, such as who logged a dose. The log exists so a family can answer who changed what, and when. It is visible to the family, and it is deliberately difficult to alter, including by us.
Who can see it
Only the people invited to a care circle, and only what they have been given access to. Access is set by the person who created the circle and can be changed or revoked at any time.
We do not sell your information. We do not share it with advertisers, data brokers, insurers, or employers. There is no advertising in Contrada and no plan to add any.
A small number of service providers process, or will process, information so that the app can work at all:
- Supabase stores the database on servers in the United States.
- Apple will process any subscription purchase when paid plans launch. We never receive your card details.
- RevenueCat will tell the app whether a subscription is active when paid plans launch. It will receive a purchase identifier, not health information.
- Namecheap Private Email will deliver email such as invitations and password resets once the app is released.
Each of these acts on our instructions and is not permitted to use your information for its own purposes.
We will disclose information if the law requires it, such as a valid court order. If that ever happens and we are permitted to tell you, we will.
What Contrada is not
Contrada is a personal tool for a family. It is not a medical device, it does not give medical advice, and it does not connect to a hospital or clinic record system.
Kindra App LLC is not a HIPAA covered entity and is not a business associate of one. HIPAA governs healthcare providers, health plans, and their contractors. It does not govern a family keeping records about their own household, which is what Contrada supports. We say this plainly because some apps imply HIPAA coverage they do not have, and that implication is misleading.
What that means in practice is that our commitments to you come from this policy and from the way the product is built, not from a healthcare regulation. We would rather be accurate about that than reassuring.
Children and adults who need support
Many people cared for through Contrada are children, and many are adults with intellectual or developmental disabilities. Information about them is entered by a parent, guardian, or another authorized adult, not by them.
Account holders must be 18 or older. Contrada is not directed to children and we do not knowingly create accounts for them.
If you are a parent or guardian and want everything about your child removed, write to hello@kindraapp.com and we will delete it.
How it is protected
Information travels between your device and our servers over an encrypted connection, and it is encrypted at rest on the servers where it is stored. Access rules are enforced by the database itself rather than only by the app, so a person who is not in your care circle cannot reach your family's records even through a flaw in the app.
We should be straightforward about the limits. Contrada does not currently use end to end encryption, which means that in principle our infrastructure could access stored records. We do not do so except where it is necessary to operate the service or to respond to a support request you have made. If that changes, this page will say so before it changes.
No system is perfect. If we ever discover a breach affecting your information, we will tell the affected families directly and promptly, and we will say what happened rather than issuing a statement that says nothing.
Your choices
Get a copy
Export from inside the app is being built. Until it launches, you can request a copy of your family's information in a readable format by writing to hello@kindraapp.com.
Correct it
Most information can be edited in the app. For anything that cannot, write to us.
Delete it
In the app, open More, tap Delete account, then Continue, then Request deletion. That records your request, and the screen shows the date we will complete it by. We carry it out by hand within 30 days and email you when it is done. Until then you can keep using Contrada, and you can withdraw the request by writing to hello@kindraapp.com before it is complete.
When it is done, your sign-in, your name and your email address are removed, and you cannot sign in to that account again. You will no longer be a member of any care circle that has other people in it. This cannot be undone once it is complete, and the app tells you so before you ask.
If you are the Care Manager of a care circle that has other people in it, that role has to be handed to someone else first. We do that by hand for now: write to hello@kindraapp.com and we will help you.
What stays. A care circle you are the only member of keeps its records: its medications, every dose logged, and the history of changes. Those records belong to the family they were made for, and a person who leaves does not take them away. Doses you logged stay on the record, shown with no name. Entries in a circle's history are not rewritten, and anything typed into one, such as a reason or a document title, stays as written. Entries in the access log are retained, because a log that can be erased by the person who was logged is not a log. They record that an action happened and which account did it, and once your name is removed they show no name. They are not used for any other purpose.
If you want a care circle's records removed too, write to hello@kindraapp.com and tell us which care circle.
Leave a care circle
A Care Manager can remove a person from a care circle at any time. Removing a person ends their access immediately, and what they contributed stays with the family. A person who wants to leave, or to delete their account, asks us or their Care Manager, and we or the Care Manager carry it out.
Depending on where you live, you may have additional rights over your information, including under state privacy laws in the United States. We apply the choices above to everyone regardless of where they live, because building two standards seemed like the wrong instinct.
How long it is kept
Your family's records are kept while the account is open, because a care history is only useful over time. When your deletion is carried out, your sign-in, name and email address are removed from the live system. The records that stay are described under Delete it.
Deleted information from the database can persist for a short period in routine encrypted backups, which exist so that records can be recovered after a technical failure. Those backups are overwritten on a rolling schedule and are fully aged out within 30 days. They are never used to restore an account that was deliberately deleted.
Documents are not part of version 1.0. When a document vault arrives, this page will say how documents are stored and backed up before it is switched on.
This website
kindraapp.com sets no cookies, runs no analytics, and embeds no trackers. Nothing about your visit is recorded by us. The page loads its typefaces from Google Fonts, so Google can see your IP address when the page loads. If you send an email, it is read and answered by a person and used for nothing else.
Changes to this policy
If this policy changes in a way that affects what we do with your information, we will tell people who use Contrada before the change takes effect rather than quietly updating the date at the top.
Questions, concerns, and disagreements about anything on this page go to hello@kindraapp.com.