Your records stay on your phone.

Kinsu Health ("Kinsu", "we", "us") makes the Kinsu Health app for Android. This policy says what the app keeps on your phone, the little that leaves it, and the rights you have. It describes what the app actually does today, not what we plan.

Last updated: 17 October 2026 · Applies to Kinsu Health for Android (com.kinsu.health) and kinsu.health

1. Who we are

Kinsu Health, India, makes the Kinsu Health app and runs kinsu.health. We are responsible for the personal data that reaches us, described in section 4. Under India's Digital Personal Data Protection Act, 2023 ("DPDP Act") that makes us the Data Fiduciary, and you the Data Principal.

2. The short version

Your health records stay on your phone, encrypted. We cannot read them, and we never receive them.
Two things leave your phone: your mobile number, so it can be verified, and an encrypted copy of your recovery key, which is useless without the 12-word code only you hold.
The app runs no analytics, shows no ads, and sells nothing to anyone. The website counts visits without cookies (section 13).
You can delete your account, and everything in it, from the app or from kinsu.health/delete-account.

3. What stays on your phone

Everything you put into Kinsu is stored on your phone and is not sent to us:

Your profile: name, gender, date of birth, blood group, height, weight, health goals, and a photo if you add one.
Health records: medicines, the doses you take, reminders, blood pressure, blood sugar and other readings, symptoms, mood, sleep, diet, exercise and illness episodes.
Documents: prescriptions, lab reports, scans and discharge summaries you attach, including their images and PDFs.
Family members and their records: people you add, and records you keep for them, labelled with whose they are. They stay on your phone like your own. Kinsu does not send them to that person or to anyone else.
Emergency details: your Medical ID and emergency contacts.
Your consent: what you agreed to, and when.

All of it is kept in an encrypted database (AES-256). Attached documents and your photo are encrypted as separate files. The key is protected by your phone's secure hardware and unlocks only with your fingerprint, face or screen lock. Android's cloud backup of the app is switched off, so these records are not copied to Google Drive either. Because no copy exists anywhere, if you lose the phone your records go with it. Export (section 5) gives you a copy to keep elsewhere.

4. What leaves your phone

Your mobile number

Sent to Google Firebase Authentication, which texts you a one-time code and confirms the number is yours. With each sign-in, Firebase also receives technical data it needs to do that safely: your IP address, identifiers for the app installation and device, and a Google Play Integrity check that the request comes from the genuine Kinsu app. This is used only to sign you in and to prevent abuse.

An encrypted copy of your recovery key

Stored in Google Cloud Firestore under your account ID. It is ciphertext. It opens only with the 12-word recovery code shown to you during setup, and that code is never sent anywhere or kept by us. Its purpose is to let you back into your records on your phone if the phone's security settings change.

Nothing else

No health record, document, photo or profile detail is sent to us or to anyone on our behalf.

Who processes it, and where

Google LLC provides Firebase and processes this data on our behalf, under its Cloud Data Processing Addendum. Firebase Authentication processes mobile numbers in the United States. The encrypted recovery-key copy is stored in Google's Mumbai region (asia-south1).

5. What you choose to send yourself

Some features let you take your own data out of Kinsu. Nothing goes anywhere unless you ask:

Export: Settings → Export my data saves the categories you pick as files (CSV and JSON) in your phone's Downloads folder.
Save a document: saves an attachment to your Downloads folder.
Doctor summary: copies a summary of your records, for you to paste wherever you choose.
Calls and email: SOS opens your phone's dialler, and Help opens your email app.

Exported and saved files are not encrypted, so that you and other apps can open them. Once a file leaves Kinsu, keeping it safe is up to you.

6. What Kinsu does not do

No analytics, crash reporting or usage tracking.
No advertising, and no advertising identifier.
No selling, renting or trading of personal data.
No AI processing of your data.
No cloud sync or backup of your records.
No sharing of your records with family members, caregivers or doctors. Caregivers you add are emergency contacts on the SOS screen. Nobody else can see your records.
No connection to ABDM, ABHA or any national health record system.

7. Why we use it

To provide the app: keeping your records, and reminding you about medicines and care routines with notifications from your own phone. Medicine names are hidden from notifications unless you choose to show them.
To verify your mobile number, so that only you can reach your account.
To let you recover access with your recovery code.
To comply with Indian law, when a valid order from a court or competent authority requires it.

We rely on your consent, which the app asks for at setup: once for the app itself, and separately for medicine reminders. You can review what you agreed to, and when, in Settings → Privacy & consent.

8. How long we keep it

On your phone: until you delete a record, delete your account, or uninstall the app.
Your mobile number and the encrypted key copy: until you delete your account. They are deleted from Firebase straight away when you do. Google may keep them in its backups for a limited time under its own deletion policy.

9. Deleting your account

In the app: Settings → Delete account. Kinsu checks your number with a fresh code. It then deletes your Firebase account, the encrypted key copy, and everything on your phone: records, documents, reminders and the keys that protect them.
Without the app: follow the steps at kinsu.health/delete-account.

Uninstalling Kinsu deletes everything on your phone, but not your account. To delete that too, use one of the two ways above.

10. Your rights

Access

Everything on your phone is visible in the app, and Settings → Export my data gives you a copy of the categories you choose. To find out what is held about you at Firebase, write to the Grievance Officer.

Correction

Edit any record or your profile in the app. Your mobile number can't be changed in the app yet: write to us and we'll help.

Erasure

Delete single records in the app, or delete your account as described in section 9.

Withdrawing consent

Turn medicine reminders off under Privacy & consent → Change what you share. To withdraw your consent entirely, delete your account. Withdrawal does not affect anything done before it.

Nomination

You may nominate someone to exercise these rights for you if you die or cannot do so yourself. Write to the Grievance Officer.

Grievances

Write to the Grievance Officer (section 14). If we do not resolve your complaint, you may take it to the Data Protection Board of India once it is operating.

11. Children

Kinsu accounts are for adults. Setting up the app needs a date of birth, and it will not set up for anyone under 18. That age is declared, not verified, and we do not claim otherwise. You can keep records for a family member, including a child. They stay on your phone like your own records, and we never receive them. If you believe we hold a child's data, write to us and we will delete it.

12. Security

Records are encrypted on the phone with AES-256, using a key held in the phone's secure hardware and unlocked by your fingerprint, face or screen lock.
The app locks itself two minutes after you leave it, and hides its contents from screenshots and the recent-apps view.
Kinsu will not set up on a phone without a screen lock, because it would have nothing to protect your key with.
What is sent to Firebase is encrypted in transit (TLS).
Your records exist only on your phone. If you lose the phone, reset it or uninstall Kinsu, they are gone: there is no copy anywhere, and the recovery code cannot bring them back on another phone. The recovery code gets you back into your records on the same phone if its security settings change, such as a new fingerprint or screen lock. There is no master key.

No system is perfectly secure, and we don't claim otherwise. If a breach affects your data, we will tell you and the authorities as the law requires.

13. The website

kinsu.health counts visits without cookies, and uses no advertising trackers. These services handle the site or its email for us, and see what any website's suppliers see:

GitHub Pages hosts the site, so GitHub receives your IP address and browser details when you visit.
Umami Cloud counts visits. It records the page, the site you came from, your browser, operating system, device type and country, and a few actions on the site, such as joining the waitlist or starting the breathing timer. It never records what you type. It sets no cookies, and Umami says it stores no personally identifiable information. Its servers are in the United States and the European Union. If your browser sends a Do Not Track signal, nothing is counted.
Google Fonts serves the typefaces, and Tailwind's CDN (cdn.tailwindcss.com) the styling script, for this policy, the terms and the account-deletion page. Both receive your IP address and browser details when one of those pages loads. The rest of the site serves its own fonts and styles.
FormSubmit delivers waitlist sign-ups to us by email. If you tick who you are keeping health records for (yourself, a parent, a child or someone else), which is optional, that choice arrives with your address. We use your address and that choice only to tell you about Kinsu, and delete them when you ask.
ImprovMX forwards email sent to kinsu.health addresses to our Gmail inbox.

The app uses none of these.

14. Grievance Officer and contact

Grievance Officer: reached at kinsu.health@gmail.com
Response: we acknowledge within 7 days and resolve within one month.

15. Changes to this policy

If we change this policy materially, the app will tell you before the change takes effect. The latest version is always at kinsu.health/privacy, with its date at the top.

16. Governing law

This policy is governed by the laws of India. Disputes fall under the exclusive jurisdiction of the courts at Bengaluru, Karnataka, India.

This policy is written to be read. If anything here is unclear, or doesn't match what the app does, write to us and we'll fix it.