Legal

Privacy Policy

Effective date: March 14, 2026  ·  Last updated: September 26, 2026

KinGuardian is a caregiving coordination platform operated by Kaspyan Group LLC, a Delaware limited liability company (“we,” “our,” or “us”), at kinguardian.app. We are committed to protecting the privacy of caregivers, patients, and their families. This Privacy Policy explains what information we collect, how we use it, with whom we share it, and the choices available to you.

By accessing or using KinGuardian, you agree to the practices described in this policy. If you do not agree, please discontinue use of the service.

1. What We Collect

Account & Profile Information

When you register, we collect your name and email address. Your password is managed by our authentication provider, AWS Cognito — we never see or store it ourselves. Once text alerts start (section 4), caregivers may also add a mobile number for them; we confirm it with a one-time code.

Care Recipient Information

You may enter information about the person in your care, including their name, date of birth, medical record number, diagnoses, medications, lab results, appointment details, and uploaded medical documents (including PDFs and images).

Documents & Files

We store files you upload (discharge summaries, lab reports, imaging reports, and similar documents) in encrypted cloud storage. Optical character recognition (OCR) and AI analysis may be applied to extract and surface clinically relevant information.

Communications

If you use the inbound email feature, we process messages and attachments sent to your care recipient’s assigned KinGuardian address. We log the sender, timestamp, and content of those messages to enable document routing and triage. Our text number does not accept messages (see section 4).

Usage & Technical Data

We automatically collect IP address, browser type, device identifiers, pages visited, and interaction events to operate, secure, and improve the service. We do not sell this data.

2. How We Use Your Information

  • To create and manage your account and care team.
  • To display, organize, and analyze the health records and documents you store.
  • To generate AI-assisted critical-finding alerts, auto-task suggestions, and document summaries. This processing is how the Service works rather than an option: it is not switchable, and you agree to it as a condition of use when you accept the Terms. It runs inside our own AWS account under our signed AWS Business Associate Agreement, and we do not use your information to train AI models. The one AI setting you do control is the public drug-database lookup — the only AI processing that leaves that account — in Settings → Data & Privacy. Other parts of the Service use outside providers when you use those features: email and text notifications, a Medicare connection, and a connected calendar. They are listed in section 3. If you would prefer no AI processing at all, you can delete your account at any time. See Terms of Use, section 5.
  • To send the alerts and notifications you turn on — for example emergency and urgent alerts from your care team and notices that something needs your review — by app notification, email, or text message. Emergency alerts, urgent alerts and review notices, and every text message, never include anyone’s name or medical details; you sign in to see them. Other app notifications you turn on can show more on your screen: your morning summary names the person you care for and counts their active medications, appointments, tasks and findings to review, and a notice that someone mentioned you in a message shows their name and the start of the message.
  • To route inbound email to the correct care recipient record.
  • To detect and prevent fraud, abuse, and security incidents.
  • To comply with applicable legal obligations.
  • To improve and develop new features of KinGuardian.

We do not use your health data to train external AI models or sell it to third-party data brokers.

3. Data Sharing

We do not sell your personal information. We share data only in the following circumstances:

Care Circle Members

Information about a care recipient is visible to other members of that recipient’s care circle according to their assigned role (co-caregiver, viewer, physician, or family guest).

Service Providers

We use third-party vendors to operate the service, including AWS (hosting, database, storage, authentication, AI analysis, OCR, voice transcription, semantic search embeddings, email, and text messages through AWS End User Messaging) and Mailgun (inbound and outbound email). These vendors process data on our behalf under data processing agreements and are prohibited from using your data for their own purposes.

Services You Choose to Connect

Some features exchange data with an outside service only when you turn them on: the CMS Blue Button 2.0 API, when you connect Medicare, to import your Medicare identity and coverage information; the calendar provider you connect (for example Google Calendar, Microsoft Outlook or Apple iCloud), whose calendar feed we read; and the public medicine databases used for drug-safety lookups (the FDA’s openFDA and the National Library of Medicine’s RxNav), which receive medicine names only and which you can turn off in Settings → Data & Privacy.

Legal Requirements

We may disclose information when required by law, court order, or governmental authority, or when we believe disclosure is necessary to protect the rights or safety of any person.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will provide notice before your data becomes subject to a different privacy policy.

4. Text Messages (SMS)

Program status: text alerts have not started yet. Until they start, KinGuardian sends no text messages at all (no alerts, sign-up confirmations or codes), and alerts reach you by app notification and email. This section describes the program as it will work once it starts.

When you add or change a mobile number in Settings, we text a one-time code to it to confirm the number. If you turn on text alerts, KinGuardian Alerts may text you:

  • Emergency and urgent alerts from your care team.
  • Notices that something in your care circle needs your review.
  • A one-time sign-up confirmation.
  • Verification codes for your mobile number.

Each text has the KinGuardian name, a short notice and, for alerts, a link to sign in. Texts never include anyone’s name or medical details — sign in to see those. All KinGuardian texts come from one shared, one-way number and are delivered through AWS End User Messaging. For the full SMS Program Terms, please review our Terms and Conditions.

  • Consent is not a condition of purchase or of using KinGuardian. You can opt out at any time.
  • Message frequency varies with your care team’s activity. Message and data rates may apply.
  • Anyone who can see your phone or lock screen may see that a text came from KinGuardian and whether it is urgent.
  • Texts can be delayed or not delivered, and they are not an emergency service. In an emergency, call 911.
  • When you turn on text alerts and confirm your number, we keep a record of the consent wording you agreed to, the date, your mobile number, IP address and browser.
  • No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text-messaging opt-in data and consent are not shared with any third parties.
  • Your phone number is used only to send the texts described above.
  • Our text number sends only the texts described above (alerts, the sign-up confirmation and verification codes) and does not accept messages or photos; its only replies are automatic answers to STOP, START, UNSTOP and HELP. Texts to and from our number pass through AWS End User Messaging and mobile carriers, which may keep copies under their own rules, so please do not text health details to us.
  • To stop, reply STOP. To receive texts again, reply START (or UNSTOP) and turn text alerts on in Settings. For help, reply HELP or email support@kinguardian.app.

5. Data Security

We implement industry-standard safeguards to protect your information:

  • All data is transmitted over TLS/HTTPS.
  • Files and documents are stored in encrypted cloud storage with access controls.
  • Access to every record is enforced at the application layer, scoped so that you can reach data only for the care recipients in care circles you belong to.
  • Authentication uses secure session tokens managed by AWS Cognito.
  • Passwords are never stored in plaintext.

No system is perfectly secure. If you believe your account has been compromised, contact us immediately at support@kinguardian.app.

6. Data Retention

We retain your account and care recipient data for as long as your account is active or as needed to provide the service. If you delete your account, your personal account information — your login, profile, and settings — is permanently deleted within 30 days, except where we are required by law to retain it longer (for example, audit logs are kept for 6 years per HIPAA). Health records you have shared within a care circle remain available to the other members of that circle; to permanently delete a care recipient’s records, contact us at privacy@kinguardian.app.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

  • Access: Request a copy of the personal information we hold about you.
  • Correction: Request that we correct inaccurate or incomplete information.
  • Deletion: Request deletion of your personal information, subject to legal retention requirements.
  • Portability: Request a machine-readable export of your data.
  • Objection: Object to certain types of processing, including direct marketing.
  • Withdrawal of consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at support@kinguardian.app. We will respond within 30 days.

8. Children’s Privacy

KinGuardian is intended for use by adults (18 years of age or older). We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, notify you by email or in-app notice. Your continued use of KinGuardian after changes take effect constitutes acceptance of the revised policy.

10. Contact Us

If you have questions, concerns, or requests related to this Privacy Policy, please contact us:

Kaspyan Group LLC (operator of KinGuardian)

Privacy & data requests: privacy@kinguardian.app

General support: support@kinguardian.app

Website: kinguardian.app

Privacy Policy · KinGuardian