Privacy Policy

Last updated: 28 October 2026. This policy covers the Kinpal app (iPhone and Android) and the website kinpal.app.

In short

Kinpal needs no account. There are no ads, no analytics or tracking services and no cookies, neither in the app nor on the website.
Settings, diary, walks, recordings and conversation content stay on your device.
Only when you raise an alarm are your displayed name and your location sent to our alarm server. They are deleted automatically 48 hours after the alarm starts.
Trusted contacts store a name, a push token and their app language. This is deleted automatically 12 months after their last app start.

1. Controller

Ulrich Diedrichsen (moinsen)
Kippingstraße 27
20144 Hamburg
Germany
Email: business@moinsen.dev
Phone: +49 151 61420930

No data protection officer has been appointed. For any privacy question, write to the email address above.

2. What stays on your device only

The app stores the following data only locally on your device. We never receive it:

your settings (for example signal phrase, caller, trusted contacts, look),
the diary, including recorded walks with location data. While you record a walk, the app also uses your location in the background so the walk stays complete with the screen locked,
emergency recordings made with the camera and microphone. They only leave your device if you share them yourself,
chat and fake-call content.

Your operating system asks for your permission for location, camera, microphone, speech recognition and notifications. You can withdraw these permissions at any time in the system settings. Deleting the app deletes this local data with it.

3. Speech recognition for the signal phrase

During a fake call the app recognises whether you say your signal phrase and, if you like, keeps a diary. Where your device supports it, speech recognition runs on the device. Otherwise your operating system's speech service processes the audio: Apple on iPhone, Google on Android. Apple's or Google's privacy terms also apply to that processing. We receive no audio and no transcript.

Legal basis: Art. 6(1)(b) GDPR (providing the feature you use).

4. Alarm and live location

When you raise an alarm (by signal phrase, in emergency mode or as a test alarm), the app sends to our alarm server:

the name to be shown to your contacts,
the ids of the trusted contacts to be notified,
your location, continuously while the alarm is active.

The sole purpose is that your trusted contacts are notified and can find you. The alarm server runs at Cloudflare, Inc. (Cloudflare Workers with Durable Objects). All alarm data is deleted automatically 48 hours after the alarm starts.

Legal basis: Art. 6(1)(b) GDPR (the feature you triggered). For location data in an emergency, additionally Art. 6(1)(d) GDPR (protection of vital interests).

5. Text messages to contacts without the app

Contacts without the app receive a text message (SMS) with a link to your live location. This message is sent by your own phone through your SMS app and your mobile carrier, not by us. We learn neither the phone number nor the content of the message.

6. Live map for your contacts

Whoever opens the link sees your way on a map in the browser. For this, the page loads the Leaflet map library from unpkg.com and map tiles from tile.openstreetmap.org (OpenStreetMap Foundation, United Kingdom). For technical reasons these providers receive the IP address of the person viewing the map and the usual browser information.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in being able to show the map in an emergency).

7. Trusted contacts (“Be there for others” mode)

Anyone who signs up in the app as a trusted contact stores on our server (Cloudflare Workers KV):

the name they want to appear under,
the push token of their device,
the app language, so the alarm notification arrives in their language.

This data is used only to deliver alarms. It is deleted automatically 12 months after that trusted contact's last app start, or earlier on request by email to business@moinsen.dev.

Legal basis: Art. 6(1)(b) GDPR.

8. Push notifications

We deliver alarms to trusted contacts through the push service of Expo (650 Industries, Inc., USA). Expo passes the notification on to the Apple Push Notification service (Apple) or Google Firebase Cloud Messaging (Google). This processes the push token and the content of the notification (name and notice of the alarm).

Legal basis: Art. 6(1)(b) GDPR.

9. Abuse protection

To prevent anyone from flooding the alarm server with requests, the server counts requests per IP address for 60 seconds. Beyond that, we do not store IP addresses. As hosting provider, Cloudflare processes technically necessary access data (for example IP address and time) to deliver and secure the service.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure and available service).

10. Purchases

The full version is a one-time in-app purchase. Purchase and payment are handled by Apple (App Store) or Google (Google Play). We receive no payment data. Apple's or Google's privacy terms apply to the purchase.

11. This website

The website kinpal.app is hosted on Cloudflare Pages (Cloudflare, Inc.). It sets no cookies, loads no external fonts and uses no analytics or tracking services. When you visit, Cloudflare processes technically necessary access data (IP address, time, requested page, browser information) to deliver the site and protect it against attacks.

Legal basis: Art. 6(1)(f) GDPR.

12. Recipients and transfers to third countries

Cloudflare, Inc., USA: alarm server, storage of trusted contacts, website hosting (data processor)
650 Industries, Inc. (Expo), USA: delivery of push notifications
Apple or Google: push delivery, speech recognition (when not on the device), app store purchases
OpenStreetMap Foundation, United Kingdom, and unpkg.com: map tiles and map library for the live map

Where data is transferred to the USA, the transfer is based on the European Commission's adequacy decision for the EU-US Data Privacy Framework, if the provider is certified under it, and otherwise on the EU Standard Contractual Clauses. For the United Kingdom, an adequacy decision of the European Commission applies.

13. Retention at a glance

Data	Where	Deleted
Settings, diary, walks, recordings, conversation content	your device only	by you, or when you delete the app
Alarm: name, contact ids, location	alarm server	automatically 48 hours after the alarm starts
Trusted contact: name, push token, app language	server	12 months after the last app start, or on request
IP address (abuse protection)	alarm server	after 60 seconds

14. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). Where we process data on the basis of Art. 6(1)(f) GDPR, you can object on grounds relating to your particular situation (Art. 21). Write to business@moinsen.dev.

You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the authority responsible for us: Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit (Hamburg Commissioner for Data Protection and Freedom of Information), datenschutz-hamburg.de.

Because we keep no accounts and most data lives only on your device, we cannot provide information about that data. It is in your own hands.

15. Obligation to provide data, automated decisions

You are not obliged to give us any data. Without alarm data, however, no alarm can be delivered. There is no automated decision-making or profiling.

16. Changes

If the app or the law changes, we will update this policy. The version published here applies.