Privacy Policy
The short version
- Kaki stores the information you choose to enter so your household can coordinate calendars, people, meals, groceries, expenses, enrichment activities and trips.
- Owners control family membership and managed access. A helper, grandparent or other Support Network participant sees only the modules granted to that login.
- If you connect Google Calendar, Kaki accesses only the calendar you select for the features described below. Sharing is optional, and you control separately what family members and Support Network accounts can see.
- If you scan a photo, such as your kitchen whiteboard, it is read by Google Cloud Vision and then discarded. Kaki keeps only the items you confirm.
- We do not sell personal data, use it for advertising, or use Google user data to train AI or machine-learning models.
- Deleted items stay in Recently deleted for 30 days so they can be restored, and are then permanently removed. Archived trips are kept until restored or deleted.
Contents
- Who we are
- What we collect
- Google Calendar data
- Scanned photos
- How we use information
- Sharing and managed access
- Service providers
- Children's information
- Storage and security
- Data retention
- Your rights and choices
- Information on your device
- Changes to this policy
- Contact us
1. Who we are
Kaki (“Kaki”, “we”, “us”) provides the Kaki Family coordination app at family.kaki.build. It is operated by Frankie Chia, an individual based in Singapore.
This policy explains what personal data Kaki collects, why it is used, how it is shared and retained, and the choices available to you. It is written with Singapore's Personal Data Protection Act 2012 (“PDPA”) in mind. Kaki is currently in beta, and this policy will be updated as the service changes.
2. What we collect
Information you provide
| Category | Examples |
|---|---|
| Account and sign-in information | Email address, display name and authentication information. Family-code logins also use a family code and login name. Passwords are handled by our authentication provider and are not stored in readable form. |
| Household & People | Names, relationships such as parent, child, helper, grandparent or caregiver; Core Family or Support Network group; and optional birthdate or age, photo, icon, colour and notes. |
| Calendar and alerts | Event titles, dates, times, locations, notes, audience or participants, family timezone, coverage rules and each account's alert preferences. |
| Enrichment and expenses | Classes, schedules, providers, instructors, locations, costs, renewal dates and notes; and expense names, amounts, currencies, categories, dates, payment information, payer, notes and receipt links. |
| Meals, dishes and groceries | Meal plans, dish names, ingredients, cooking instructions, tags, preparation information and favourites; grocery items, quantities, sections, urgency, regular-item frequency, notes, completion information and who added or bought an item. |
| Trips | Trip names, destinations, dates, travellers, packing sections and items, importance and completion status, notes, archive status and information used to search, reuse or share a packing list. |
| Household and access settings | Family name, family code, timezone, currency, Needs Attention rules, calendar preferences, members and invitations, managed login role, module access, status, plan and monthly allowances, and access-administration audit records. |
| Scanned photos | Photos you choose to scan, such as a whiteboard grocery list, are sent to Google Cloud Vision to read the text and are then discarded. Kaki does not store the photo or the text it reads; only the items you confirm are saved. Kaki records that a scan was used, so monthly allowances can be applied. |
| Deletion records | When an item is deleted, the date and the account that deleted it, so it can be shown in Recently deleted and restored. |
| Feedback | Messages you send through feedback or support channels. |
Information collected automatically
- Usage events, such as the page or feature used, action type, account, family, app version and browser or installed-app context. These records are designed not to include the content you entered, such as event titles, grocery names, recipe text or notes.
- Error reports, including the error message, page and app version, so technical problems can be diagnosed.
- Access audit records for managed accounts, such as creation, role or module changes, password resets, revocation and restoration. Passwords are not recorded.
Kaki does not use advertising trackers or build advertising profiles.
3. Google Calendar data
Connecting Google Calendar is optional. Kaki works without it.
What Kaki accesses
- the list of calendars available to the connected Google account, so you can choose one;
- events from the calendar you select, so they can be shown alongside Kaki events;
- permission to create, update or delete events on that calendar when you request those actions; and
- the connected Google account email address, so Kaki can show which account is linked.
Storage and protection
- Google access and refresh tokens are stored server-side and are not sent to the browser or shown to family members.
- Google events are fetched when the calendar is viewed. Kaki does not retain a separate copy unless you explicitly save the event into Kaki as well.
- For events saved to Kaki and Google, Kaki stores the Google event identifier to keep the copies linked.
- When you delete a linked event in Kaki, its Google copy is deleted. Restoring the event from Recently deleted restores it in Kaki only and does not recreate the Google copy.
Sharing a connected calendar
Sharing is off by default. You may choose what other family members see: Full Details, Subject Only, Busy Only or Hidden. You separately choose what managed Support Network accounts, such as helpers and grandparents, see: Nothing, Busy Only or Subject Only. A Support Network account never receives more detail than the level shared with the family.
Google events marked Private or Confidential, or whose title contains #private or a lock emoji, are masked as “Busy” before they are sent to other household accounts. An event whose title contains #adults is not sent to managed Support Network accounts. Shared Google events are read-only to other household accounts.
Limited Use
Kaki's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
- Google user data is used only to provide and improve user-facing calendar features.
- It is not sold, used for advertising, used to determine creditworthiness, or used to train AI or machine-learning models.
- Humans do not read Google user data except with explicit permission, where needed for security, where required by law, or where data has been aggregated and anonymised for internal operations.
Disconnecting Google
You can disconnect Google Calendar in Kaki and revoke access through your Google account. Disconnecting stops future access. Events separately saved in Kaki remain until deleted under Kaki's retention rules.
4. Scanned photos
Scanning is optional. When you choose Scan whiteboard in Groceries:
- the photo is reduced in size on your device and sent securely to Kaki's server, which passes it to Google Cloud Vision to read the text;
- Kaki shows you what was read, and nothing is added until you confirm it;
- Kaki does not store the photo or the full text that was read, and only the items you confirm are saved to your grocery list;
- Google processes the photo under its Google Cloud terms and does not use it to train Google's models; and
- Kaki records the date, family and account for each scan, without the photo or its content, so monthly scan allowances can be applied.
Please avoid scanning anything private, such as identity documents or other people's personal details.
5. How we use information
- provide household features including calendars, people, managed access, meals, groceries, enrichment, expenses and trips;
- allow authorised household accounts to see and update shared information within their granted access;
- show dates and times in the household timezone and calculate reminders, Needs Attention alerts and trip readiness;
- read text from photos you choose to scan, so you can review and add the items;
- apply plan allowances, such as the number of scans each month;
- keep deleted items in Recently deleted for 30 days so owners and adults can restore them;
- send account communications, including confirmation and password-reset messages;
- operate sharing features when you choose to share a list, invitation, login details or other content through your device;
- measure feature use, diagnose errors, prevent misuse and secure the service; and
- respond to feedback, support and data-protection requests.
Kaki does not sell personal data or use it for advertising.
6. Sharing within the household and managed access
Kaki is designed for shared household coordination. Information is visible according to the account's family membership, managed role and granted modules. Database-level rules separate each family's information from other families.
Owners and adults
The owner controls family membership, invitations and managed accounts. Owners and adults may update day-to-day household settings such as timezone, currency and Needs Attention rules, and may view, restore or permanently delete items in Recently deleted. Only the owner can rename the family, view the family code in household settings, and create, reset, revoke or restore managed access.
Managed Support Network accounts
An owner may create a family-code login for a trusted helper, grandparent or other Support Network participant. The owner chooses Contributor or Viewer access and the modules that account may use. Viewer access is read-only and cannot scan. Expenses, enrichment costs, family administration, Recently deleted and Google Calendar connections are not made available to managed accounts. Managed access can be revoked immediately while historical attribution is preserved.
Only invite people you trust, share temporary passwords only with the intended person, and add information about other people only where you are entitled to do so.
7. Service providers
| Provider | Purpose |
|---|---|
| Supabase | Database, authentication, scheduled clean-up and server-side functions, including functions that communicate with Google services. |
| Cloudflare | Website and app hosting and delivery. |
| Resend | Account emails such as sign-up confirmation and password reset. |
| Google Calendar, only when connected; and Google Cloud Vision, to read text from photos you choose to scan. Photos are processed under Google Cloud terms and are not used to train Google models. | |
| jsDelivr | Delivery of a software library used by the app. |
Information may also be disclosed where required by law, to protect users or the service, or as part of a business transfer where the recipient remains subject to appropriate obligations.
8. Children's information
Kaki accounts are intended for adults. Parents and guardians may add information about children, such as names, ages or birthdates, photos, school or class details and activities. Add only what is needed, and use an age instead of a full birthdate where sufficient.
9. Storage, security and transfers
- Information is transmitted using HTTPS.
- Database-level access rules limit accounts to their family and granted modules.
- Google tokens, the scanning service key and other sensitive credentials remain server-side.
- Managed passwords are never stored in readable form, and access actions are audited.
- Access rules are reviewed as part of the release process.
Family data is stored in Singapore in our database provider's Singapore region. Some service providers, including Google Cloud Vision, may process limited information outside Singapore. Where that occurs, Kaki takes steps intended to provide a standard of protection comparable to the PDPA.
No system is perfectly secure. If a data breach requires notification under applicable law, Kaki will notify affected individuals and the relevant authorities as required.
10. How long we keep data
- Active household data is retained while the family account exists and the information continues to support the service requested by the family.
- Trip history, including trip metadata, packing lists, readiness, notes and archive status, is retained until the trip is deleted or the family is deleted. Archiving hides a trip from normal views but does not delete it. Restoring makes it active again.
- Recently deleted: when a trip, event, person, expense, enrichment class or dish is deleted, it is hidden and kept for 30 days so an owner or adult can restore it. After 30 days, or earlier if an owner or adult chooses “Delete forever”, it is permanently removed together with its dependent information, such as a trip's packing list. An item may be kept longer only while it is still linked to other records that need it; it is removed once that link no longer exists.
- Scanned photos are not retained by Kaki. Records that a scan was used are kept for up to 12 months to apply allowances and understand usage.
- Google events fetched from Google are not retained as a separate copy unless explicitly saved in Kaki. OAuth tokens are retained while the integration is connected and are no longer used after disconnection.
- Managed-access audit records, usage events and error reports are kept for up to 12 months, then deleted or anonymised, unless a longer period is reasonably required for security, dispute resolution or legal compliance.
- Feedback is retained while useful for improving Kaki and no longer than 24 months.
- Account and family deletion: deleting an account removes that authentication account. If the account is the sole owner of a family, the family and its associated data, including anything in Recently deleted, are also deleted. Provider backups are overwritten according to the providers' normal cycles.
Kaki does not retain personal data merely “just in case”. Retention is reviewed against the purpose for which the information was collected and applicable legal or business needs.
11. Your rights and choices
Subject to the PDPA and applicable exceptions, you may request access to personal data about you, information about its use or disclosure, and correction of inaccurate or incomplete data. You may withdraw consent with reasonable notice, understanding that Kaki may then be unable to provide parts of the service.
You also control Google connection and sharing, whether to scan photos, household membership where you are the owner, managed-account access, your personal alerts and the information you add. Owners and adults can restore or permanently delete items in Recently deleted within 30 days. Account deletion is available in the app. For a request, email hello@kaki.build. Kaki will verify identity where needed and respond as required by applicable law.
12. Information stored on your device
Kaki uses local storage for the sign-in session, last-used email or family code, display and calendar preferences, trip-list view selection, pending invitation codes and installation prompts. Passwords are not stored by Kaki; your browser or device password manager may offer to save them under its own controls. Photos you scan are reduced in size in your browser and are not saved by Kaki on your device.
Kaki does not use advertising cookies. Google services loaded for authentication may set their own cookies under Google's Privacy Policy. Signing out or clearing website data removes Kaki's local information from that device, subject to browser behaviour.
13. Changes to this policy
When Kaki makes a material change, the date above will be updated and notice will be provided in the app or by email before the change takes effect where appropriate.
14. Contact us
For privacy questions, requests or complaints, contact Kaki's Data Protection Officer:
Frankie Chia
Email: hello@kaki.build
Singapore
If you are dissatisfied with Kaki's response, you may contact the Personal Data Protection Commission of Singapore at pdpc.gov.sg.