1. Scope

This Privacy Policy ("Policy") describes how Identity Mark, LLC, doing business as Kinvana ("we," "us," or "our"), collects, uses, stores, shares, and protects personal information when you access or use the Kinvana platform, website, mobile applications, and related services (collectively, the "Service").

By creating an account or using the Service you acknowledge that you have read, understood, and agree to the practices described in this Policy. If you do not agree, please do not use the Service.

2. Data We Collect

We collect the following categories of personal information:

• Account Information: Name, email address, phone number, login credentials, and profile details you provide during registration.
• Family & Child Information: Children's names, dates of birth, custody schedules, parenting plan details, and related family data you enter or upload. We collect only the minimum child information necessary to operate scheduling and record-keeping features.
• Uploaded Documents: Custody orders, parenting plans, court filings, and other documents you upload for AI plan extraction and calendar generation.
• Messages & Communications: All messages sent through our immutable messaging system, including metadata (timestamps, read receipts, SHA-256 hash-chain integrity data). Messages are stored as tamper-evident records and cannot be edited or deleted once sent.
• Billing & Payment Information: Payment card details, billing address, and transaction history. Payment processing is handled by Stripe and we do not store full card numbers on our servers.
• Technical & Device Data: IP address, browser type and version, operating system, device identifiers, time zone, referring URLs, pages visited, and usage analytics.

3. Sensitive Data Notice

Given the nature of co-parenting coordination, the Service may process information that is considered sensitive under various privacy laws, including data related to minors, family relationships, and legal proceedings. We treat all family and child data with heightened security controls and limit internal access to personnel who require it for service operations. We do not sell sensitive data or use it for advertising purposes.

4. How We Use Your Data

We use the information we collect to:

• Provide, maintain, and improve the Service, including shared calendars, messaging, swap marketplace, expense tracking, and record-keeping features.
• Extract custody schedules and parenting plan clauses using AI-powered document processing.
• Generate certified PDF exports and verification codes designed for court admissibility.
• Perform AI tone analysis on messages to encourage constructive communication.
• Calculate flexibility scores, time-balance analytics, and equity alerts.
• Process payments, manage subscriptions, and send billing communications.
• Send transactional notifications (schedule changes, swap requests, messages) via email or push notification.
• Respond to support inquiries and enforce our Terms of Service.
• Comply with legal obligations, including court orders and lawful subpoenas.
• Detect and prevent fraud, abuse, and security incidents.

5. AI Processing Disclosure

Kinvana uses artificial intelligence and machine learning to provide certain features, including but not limited to: document extraction, calendar auto-population, tone analysis, and flexibility scoring.

Important: All AI-generated outputs are assistive in nature and are provided for informational purposes only. AI features do not constitute legal advice, and use of the Service does not create an attorney-client relationship. You should consult a qualified family law attorney for legal guidance regarding your specific situation.

Uploaded documents are processed by our AI systems solely to extract scheduling data and relevant clauses. We do not use your documents or personal data to train general-purpose AI models. AI processing is performed using encrypted pipelines with access limited to the specific account that uploaded the document.

6. Recording & Transcript Disclosure

All messages sent through the Kinvana messaging system are permanently recorded and stored as part of the platform's tamper-evident record-keeping system. By using the messaging feature, you acknowledge and consent to this recording.

Consent Obligations: If you export records or certified PDFs for use in legal proceedings, you are solely responsible for complying with all applicable federal, state, and local laws regarding the use and admissibility of such records, including any notice or consent requirements. Kinvana does not guarantee that exported records will be admitted by any particular court or tribunal.

7. Sharing & Disclosure

We may share your personal information in the following circumstances:

• Service Processors: With trusted third-party vendors who assist us in operating the Service (e.g., cloud hosting, payment processing, email delivery, analytics). These processors are contractually obligated to protect your data and use it only as directed by us.
• Authorized Participants: With the other parent or authorized co-parent on your account, as necessary for the shared calendar, messaging, and record-keeping features to function. You control which information is shared through your account settings.
• Professional Portal Users: If you grant access to an attorney, mediator, or other professional through the Professional Portal (Complete tier), that professional will have read-only access to records you authorize.
• Legal Requests: When required by law, court order, subpoena, or governmental regulation, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred to the successor entity.

We do not sell your personal information to third parties.

8. Shared-Record Model & Deletion Limits

Kinvana operates on a shared-record model. Messages, calendar events, swap records, and expense logs are shared between co-parents and form part of a continuous, tamper-evident record chain designed for potential court use.

Because of this evidentiary design, certain data cannot be unilaterally deleted by one party. Specifically:

• Sent messages cannot be edited, recalled, or deleted.
• Completed swap records and expense entries are permanent once confirmed.
• Calendar history is retained for the full retention period.

If you close your account, your profile information will be removed, but shared records may be retained as necessary for the other party's continued access and for evidentiary integrity, subject to applicable law.

9. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Specific retention periods include:

• Account data: Retained while your account is active and for 90 days after account closure.
• Messages and shared records: Retained for a minimum of 7 years after the last activity on the family account, or longer if required by law.
• Uploaded documents: Retained while your account is active. You may delete uploaded documents at any time; however, extracted schedule data that has been shared with the other parent will remain.
• Billing records: Retained as required by applicable tax and financial regulations.
• Technical logs: Retained for up to 12 months for security and debugging purposes.

10. Security Safeguards

We implement industry-standard administrative, technical, and physical safeguards to protect personal information, including encryption in transit (TLS), encryption at rest where supported by our infrastructure providers, SHA-256 hash-chain integrity checks for tamper-evident messaging, cryptographic signing and verification codes for certified PDF exports, role-based access controls, audit logging, and periodic security testing. No system is 100% secure.

You are responsible for maintaining the confidentiality of your account credentials and for any activity under your account.

11. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete personal information.
• Deletion: Request deletion of your personal information, subject to the shared-record limitations described in Section 8 and applicable legal retention requirements.
• Portability: Request a machine-readable copy of your data.
• Appeal: If we deny your request, you may appeal the decision by contacting us at [email protected].

Legal Exceptions: We may decline requests where compliance would (a) compromise the evidentiary integrity of shared records, (b) violate the rights of another user, (c) conflict with a court order, or (d) violate applicable law. We will explain the basis for any denial.

To exercise your rights, contact us at [email protected]. We will respond within the timeframe required by applicable law.

12. US State & International Rights

California Residents (CCPA/CPRA): You have the right to know what personal information we collect, request deletion (subject to exceptions), opt out of the sale of personal information (we do not sell your data), and not be discriminated against for exercising your rights. To submit a request, contact us at [email protected].

Other US State Laws: Residents of Colorado, Connecticut, Virginia, Utah, and other states with comprehensive privacy laws may have additional rights. Contact us to exercise any applicable rights.

International Users: If you access the Service from outside the United States, your data will be transferred to and processed in the United States. By using the Service, you consent to this transfer. We will take reasonable steps to ensure your data is treated in accordance with this Policy.

13. Children & Minor Data

Kinvana is designed for use by parents and legal guardians who are 18 years of age or older. We do not knowingly allow minors to create accounts.

We collect limited information about children (names, dates of birth, schedules) solely as entered by their parents or guardians for the purpose of custody scheduling and co-parenting coordination. This data is treated with the highest level of protection and is never used for marketing, profiling, or shared with advertisers.

If you believe a minor has created an account or that we have collected information about a child without proper parental consent, please contact us immediately at [email protected].

14. Cookies & Tracking

We use cookies and similar technologies (local storage, session storage) to:

• Essential cookies: Maintain your session, authenticate your identity, and remember your preferences. These are strictly necessary for the Service to function.
• Analytics cookies: Understand how users interact with the Service so we can improve functionality and user experience. We use privacy-focused analytics for this purpose.

We do not use advertising or cross-site tracking cookies. You can manage cookie preferences through your browser settings, but disabling essential cookies may prevent you from using certain features of the Service.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by email and/or by posting a prominent notice on the Service at least thirty (30) days before the changes take effect. Your continued use of the Service after the effective date constitutes acceptance of the updated Policy.

16. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Identity Mark, LLC d/b/a Kinvana
• Attn: Privacy Team
• PO Box 1099, Ponte Vedra Beach, FL 32004
• Email: [email protected]