Last updated 1 November 2026

A little clarity
about your data.

Kitedale is an early family communication project. This notice describes the website account service at www.kitedale.com. The Android app has a separate Android privacy policy.

When you sign in

Google confirms that you control your Google account; sign-in does not prove your age or that you are a child’s guardian. We receive your Google account identifier, verified email address and profile name. We store these along with your registration and last sign-in times, administrator-assigned adult or child type, and whether your website account is enabled. We also store administrator-recorded adult approval, its reason and date, and links between children and their guardians, Matrix account ownership, and child contact approvals. Administrators may create profiles without Google sign-in, using a name and optional email address. Enabled, approved adults may also create child profiles using only a name and are automatically linked as the first guardian. We do not receive your Google password or request access to Gmail, contacts, Drive or calendars. Google access and identity tokens are used during sign-in and are not saved in your account or browser session.

Approval comes first

Every new Google registration starts disabled. Signing in does not give access to family features. An administrator can review accounts, approve adults, manage guardian links, enable or disable access, and delete accounts. Each enabled, approved guardian can independently manage their linked child’s profile. Once a Matrix identity is linked, website account status and child contact permissions control access to our messaging and calling service.

Your family workspace

Guardians can view their linked children’s profiles, contact permissions, chat membership and other guardians. This workspace does not show message contents or attachments. Guardians and their linked children are automatically allowed to communicate while both accounts are enabled and the adult is approved. Connecting two children managed by the same guardian records approval for both in one action; contacts with children outside that guardian’s care require approval for each child. Any current enabled, approved guardian can independently grant or remove another approved adult’s guardian access; these actions are recorded. Creating a child profile or adding a guardian link is limited to five linked children per guardian, including paused accounts and shared guardianships. Administrators can create or approve links above this limit. A request to link an existing, unlinked child requires administrator review. Account codes identify a specific person when shared; sharing a code alone grants no access. We record website sign-ins and account or permission changes, and show a limited, family-scoped history to current guardians. Approval reasons and raw operational logs are not included in that view.

Cookies and service providers

We use a necessary, secure session cookie to complete sign-in and keep you signed in for up to 12 hours. We use no advertising or analytics cookies on this website. Google processes sign-in under its own privacy policy. The site is served through our hosting infrastructure, including Cloudflare where configured; providers may process connection and security information needed to deliver the service.

Retention and deletion

Account details remain until an administrator or, for a child, a current guardian deletes the account. Deletion removes its profile, guardian links, contact approvals and website sessions from the active database. Administrative records keep the actor, action, time, account identifiers, approval reasons and relationship changes. They may include profile names and remain after a profile is deleted. A retired Matrix identity keeps an ownership record so it cannot be reassigned to someone else. Private operational backups may retain older records until those backups are removed. A new Google registration after deletion starts disabled again.

Questions or removal requests

During this limited early stage, contact the administrator who invited you to request access, corrections or account deletion. Please use the site only if you have this contact. A child’s registration is not a parental-consent process; families should arrange participation with the administrator.