Your care. Your privacy.

1. Who we are

Kindred: Family Medication is provided by Hastings Dynamics Ltd, registered in England and Wales, company number 13958053, at 124 City Road, London EC1V 2NX, United Kingdom. Contact hello@support.hastingsdynamics.com for privacy questions.

This notice covers Kindred for iPhone, paired Apple Watch and Mac, its beta versions, these Kindred web pages and support. The current app is a local medication organiser. iCloud sync, remote invitations and remote caregiver alerts are disabled. Versions offering Kindred Plus use Apple’s StoreKit for optional subscriptions. This policy describes the current behaviour; it does not grant permission for future cloud processing.

2. Information the app processes

• Profile names, profile types, local identifiers and your acknowledgement of permission or authority to manage a profile.
• Medicine names, strength, dose quantities and units, instructions, schedules and optional identifying photos. Imported photos are re-encoded to remove original metadata.
• Dose confirmations, skips, snoozes, actual and recorded times, corrections and the local actor who recorded them.
• Stock quantities, receipts, corrections, refill plans, and symptom times, severity and notes you enter.
• Reminder and per-person care-update choices, local notification identifiers and timestamps, appearance, feedback and authentication preferences.
• With separate permission, your own selected Apple Health medication and dose information, temporarily displayed on iPhone.

Sample-family records are fictional and stored separately. The app does not collect location, advertising identifiers, contacts or payment-card details. There is no developer-operated medical database, advertising SDK, third-party analytics SDK or external AI service in the current app.

3. How records are used and protected

The app uses your records to show schedules, record doses, estimate supplies and generate the reports you select. These operations run on your device. Symptom records do not establish that a medicine caused a symptom. Kindred does not make treatment decisions or automated decisions with legal or similarly significant effects.

App record files are encrypted using Apple CryptoKit AES-GCM. Keys are held in the device’s Keychain and are not synchronised. Record files are marked excluded from automatic device backups. An optional device-authentication screen helps restrict access; authorised background tasks can still process records after the device’s first unlock. This is not a guarantee against access on a compromised or already unlocked device.

No security system eliminates every risk. Protect your device passcode and Apple Account. We cannot recover a lost device-only key. Keep a separate encrypted backup and its recovery key if you need to restore records.

4. Apple Health is optional

On supported iPhones, Kindred asks permission to read selected medications and dose events for the device owner’s self profile. It does not request permission to write medication records to Health. Another person’s Kindred profile never connects to the carer’s Health store. Mac does not read HealthKit.

Health results stay in temporary memory and are cleared when you change profiles, lock or background the app. They are excluded from Kindred’s saved database, reports, backups, reminders, care updates and Watch schedule. Only the app’s reading preference and its local self-profile identifier are retained in device preferences. Turning off Health reading clears displayed results and stops app queries; restoring records or changing the self profile disconnects app reading. You can manage access in Apple Health or system settings. Revoking access does not delete records you separately entered in Kindred or records held by Apple Health. Apple controls Health’s own storage and sync under its settings and privacy policy.

5. Watch, reminders and local family profiles

Using Apple WatchConnectivity, the paired iPhone sends the device owner’s app-entered daily schedule and status to the Watch. The Watch stores an encrypted cache and queues dose actions for the phone to acknowledge. Other family profiles and HealthKit results are excluded from that schedule. Apple supplies the transport; we do not claim independently verified end-to-end encryption for every transport or system component.

Notifications are scheduled with Apple’s operating system. Discreet previews are the default; you can choose to show medicine details. Notifications contain the identifiers needed to process your actions. Device permissions, system settings and the current scheduling window affect delivery.

Per-person care-update choices start off and use local dose and stock records. They do not send information to another family account or a remote server. To avoid duplicate alerts, the app keeps encrypted notification identifiers and timestamps separately from portable backups. During notification refresh, markers older than seven days are pruned and markers no longer relevant to enabled updates are removed. Turning an update off or deleting the profile cancels its pending and delivered alerts during reconciliation. Restoring a backup clears care-update choices. Apple Health results never generate these updates.

Separate profiles organise records on the same device. They are not separate authenticated accounts or an access barrier between people using an unlocked app. Only enter another person’s information with their permission or valid authority. The app is intended to be operated by adults; children’s profiles are managed by parents, guardians or authorised representatives. There is no child sign-up or public profile.

6. Exports, backups and deletion

You choose whether to create a PDF, CSV or encrypted backup and where to save or send it. PDF and CSV reports are not encrypted by Kindred. Backups contain all local profiles and are encrypted with a separate recovery key. Keep that key apart from the file. System file pickers may offer third-party or cloud destinations; copies you choose to save there follow that provider’s policies and are outside Kindred’s local storage protection.

Records remain locally until you remove them or replace the store. Use Family to delete a profile and its medicines, doses, stock and symptoms. The app reconciles notifications and sends an updated Watch context. A disconnected Watch may retain an earlier copy until it reconnects. Open the paired app and verify that deletion has reached the Watch before passing a device to someone else.

Previously exported reports, backups and copies held by recipients are not recalled. Delete those separately. Restoring an older backup replaces current local records and may reintroduce deleted information. Apple Health records are not deleted by Kindred. There is no Kindred server account to close. We do not promise forensic erasure of every operating-system copy.

7. Apple services, this website and support

Apple operates the App Store, TestFlight, system permissions and diagnostics. TestFlight and diagnostics you choose to share may make installation, device, crash or feedback information available to us. We use it to investigate faults. App diagnostic logging is designed to exclude medicine contents. Apple’s processing is described in its privacy policy.

Kindred may ask Apple’s StoreKit for product or entitlement information. Purchases are disabled in this version. We receive no payment-card details and operate no billing server.

These web pages are hosted by Vercel. Your IP address, requested URL, browser details and request time may be processed to deliver and secure the website. The Kindred pages do not include advertising trackers, marketing forms or nonessential cookie tools. See Vercel’s privacy policy.

If you email support, we and our email provider process your address, message and any attachments to answer you. Please send the app version, OS version and a description of the problem, using fictional examples. Do not send medical reports, other people’s information, passwords or recovery keys. Access to correspondence is limited to people who need it for support, security or legal purposes.

8. Lawful use, retention and international processing

Where data-protection law applies to processing for which Hastings Dynamics is responsible, we use contract necessity to provide requested services; consent for optional processing where required; legitimate interests to answer support requests, secure our services and investigate faults; and legal obligations where information must be retained. Health information needs an additional condition under applicable law. Our support service does not request health records; optional access on your device requires your explicit choice and permission. An operating-system permission does not by itself establish authority to process someone else’s health information.

Support messages are retained while needed to resolve the request and normally for no longer than 24 months after closure, unless a dispute or legal obligation requires longer. Unnecessary sensitive attachments are removed when identified. Apple and hosting-provider records follow their own retention arrangements.

Service providers may process information outside the UK. Transfers for which we are responsible must use an applicable adequacy arrangement or other lawful safeguards. Contact us for information about safeguards relevant to a support request. There is no transfer of your local medication database to a Hastings Dynamics server.

9. Your rights and choices

Depending on applicable law and the circumstances, you may request access, correction, erasure, restriction or portability, object to processing based on legitimate interests, and withdraw consent. Withdrawal does not affect earlier lawful processing. Most medication-record controls are in the app because we do not hold your device’s database. Contact us about information we do hold, such as support correspondence, or for help using local controls.

We normally respond to UK data-rights requests within one month and may request proportionate identity verification. Do not send health history or a recovery key as proof of identity. You can complain to the UK Information Commissioner’s Office or your local data-protection authority.

Subscriptions and local planning

Apple processes optional Plus purchases, billing and Family Sharing under its own policies. Kindred checks Apple-signed transaction and subscription status on your device to unlock paid tools. We do not receive your card details or send medicine names, dose records, symptoms or profiles to Apple as part of a purchase. There is no developer subscription server or third-party purchase analytics SDK. Subscription sharing does not share medical records.

Refill plans and appointment summaries are calculated locally from app records. Report period and symptom-inclusion preferences are stored on this device. Apple Health readings remain excluded. Exported PDFs follow the same user-directed export and deletion rules described above. Existing health records are not deleted when a subscription ends.

10. Changes and help

We will update this date when the notice changes and explain material changes where appropriate. Future cloud sharing or other optional uses requiring consent will not be enabled solely by changing this page.

For practical instructions, see Kindred support. For a privacy request, email hello@support.hastingsdynamics.com or write to our registered address above.