Privacy Policy

• Account: your name and email address.
• Family record: your household details, your children's names, ages, interests, and how you describe them, plus any people and pets you add.
• Your preferences: the choices you make about themes, tone, reading level and what KindRoot should reach for when it makes something.
• Anything you keep: photos and drawings you choose to save alongside an Experience.
• General location, only if you allow it, and only at city or region level — never precise coordinates.
• If you order a printed book: the delivery name, street address, city, state, postal code, country and phone number for that order, and the email address the order confirmation goes to.

You can create your KindRoot account with an email address and password, or by signing in with Google or Facebook. When you sign in with Google, Google shares only your basic profile with us: your name, your email address, and your profile picture. When you sign in with Facebook, Facebook shares the same kind of basic profile. We do not request access to your contacts, calendar, files, or anything else in those accounts.

We use that information for one purpose: to create and sign you into your KindRoot account and to send you the account emails described below. We do not sell it, we do not use it for advertising, we do not share it with anyone other than the service providers who run KindRoot on our behalf, and we do not use it to train AI models. If you delete your KindRoot account, this information is deleted with it, and you can also revoke KindRoot's access at any time from your Google or Facebook account settings.

KindRoot's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

• What was made, when it was opened, and whether it was finished. This is what Collection and Growth are built from.
• What KindRoot learns about how your family works, which you can read, correct, or delete under Family.
• Basic device and browser information, product analytics and error reports, so we can tell when something is broken.

Payments are processed by Stripe. Card numbers, expiry dates and security codes are entered on Stripe's own pages and never reach KindRoot's servers.

What KindRoot stores is Stripe's safe summary, so the Billing screen can tell you which method will be charged: the card brand, the last four digits and the expiry month and year, or the name of a wallet such as Link. That is not enough to identify or charge a card. We also keep the Stripe customer and subscription identifiers for your account, your plan and billing dates, and a record of plan changes.

When you order a physical book, KindRoot prepares print files from that book and sends the printing job to our print and fulfillment partner, Lulu.

• What Lulu receives: the print files for your book, and the delivery name, address, phone number and shipping method needed to make and post it.
• What Lulu does not receive: your KindRoot login, your family record, your children's profiles, your photos and drawings, or your payment details.
• What Lulu reports back: the production status of the job, and the carrier and tracking number once your parcel is moving.
• Delivery details are held on the order itself, so a later change to your profile cannot rewrite where a book was actually sent.

KindRoot emails you rarely, and only about something you started or something you have left switched on. There is no newsletter. The kinds of email KindRoot may send:

• Account and membership notices: a welcome when you join, confirmation when a membership starts or changes, a note when a payment could not be taken, and confirmation when a membership ends.
• Printed-book notices: an order confirmation once your payment has been verified, and a shipping notice once the printer reports your parcel genuinely on its way, with the carrier and tracking number.
• A Near You email, which is on for every family unless you switch it off. It is not a scheduled email: KindRoot checks automatically for verified opportunities near you and writes only when it finds something genuinely time-sensitive and relevant to your children that you would otherwise miss. Weeks may pass with nothing to send, and never more than one such email per family per week.
• A "your creation is ready" email, only if you have turned that on yourself. It is off until you switch it on.

Everything else — production progress, internal checks, ordinary manufacturing steps — stays inside KindRoot rather than arriving in your inbox. Every email we send tells you how to turn that kind of email off, and the switches live under Family.

Only to make things for them. We do not sell personal information, we do not use children's information for advertising, and we do not build a profile of a child that you cannot see. All account creation and data entry is done by an adult; KindRoot does not knowingly collect personal information directly from a child.

KindRoot never infers a child's gender from a name, a photo, or their interests. How KindRoot writes about your child comes only from what you chose.

There are no public profiles, no messaging, no galleries, and no way for a stranger to reach your family through KindRoot.

Family media is encrypted before it is uploaded, and the key that reads it belongs to your account. Viewing requires both your account and a short-lived, signed grant, so nothing is readable by holding a link.

When you remove media, or your whole record, KindRoot destroys the key. The stored bytes are then permanently unreadable — there is no recovery path, for you or for us. We say this plainly because it is the mechanism, not a promise.

KindRoot uses service providers to operate: our platform host, which also provides the AI generation, voice, and file storage KindRoot runs on; Stripe, which processes payments; Lulu, which prints and posts physical books; a speech-to-text provider that produces the word-level timing for read-along narration; and analytics and error monitoring. They process data on our behalf, not for their own purposes.

We may also disclose information when the law requires it, or to protect a child, a family, or KindRoot from harm.

The app uses the cookies it needs to keep you signed in and nothing more. Our website, discoverkindroot.com, uses PostHog analytics so we can see which pages people read; it does not see anything from inside your family's account. You can block analytics cookies in your browser without losing anything.

• See everything KindRoot knows about your family, and correct or delete any of it.
• Export your whole record as one plain file.
• Delete all your content, keeping your account.
• Delete your family record and close your account.
• Turn off location use, outing suggestions, in-app notices, the Near You email, the creation-ready email, and quiet learning — each independently of the others.

All of this lives under Privacy and Family in the app.

We keep your record while your account is active. When you ask for deletion, KindRoot removes your data straight away: your Experiences, artifacts, media keys, learned insights and — for an account deletion — your children, people, pets, household profile and allowance history.

Closing your account also removes your login. On rare occasions the login record cannot be removed in the same pass; when that happens your family data is already gone, the account can no longer be used to reach anything, and we finish removing the login itself. If you want confirmation that it has been removed, write to us and we will confirm.

A record that a deletion happened is kept in our audit trail — who asked and when, never what a child looked at or did.

KindRoot continues to change, and this policy will be kept in step with it. If we make a material change, we will tell you by email or inside the app.

grow@discoverkindroot.com