Privacy Policy

Last updated: 6 November 2026

Kintap lets a family member (“you”) set up shortcut tiles on another person's phone (“their phone”), and on your own. This policy explains what Kintap stores, what we can and can't read, and how to delete it. Kintap is provided by Alex Mylonas (“we”), who is responsible for your data.

In short: tiles are end-to-end encrypted, so we can't read them. We can read your email address and the details our servers need to run the service, including IP addresses.

What we can't read

Everything below is sealed (encrypted with AES-256-GCM) on the phone before it is sent. Our servers store and pass on the sealed copy, without the key, so neither we nor the company hosting our servers can read it.

• The tiles you create: names, phone numbers, addresses and their map coordinates, website links, app choices, colours and their order.
• The name and settings of each set of tiles, including the name you give a person.
• Details of connected phones: the phone type (iPhone or Android) and, on Android, the list of installed apps, so you can choose one for a tile. We do not collect the list of apps on iPhones.

The copy of the tiles saved on a phone for offline use is encrypted too.

What we can read

• Your email address, to sign you in with a one-time code. It is stored as readable text after you sign in successfully, and a keyed hash of it is used to find your account. We store a hashed copy of the code, which expires after 10 minutes. Resend, which delivers the email, receives your address and the code.
• Random IDs for your account, your family, each set of tiles and each connected phone.
• Who is connected to what: which accounts are in which family, and which sets of tiles belong to them.
• Phone activity: how many phones each set of tiles has, when each one was connected and when it was last seen.
• When tiles change, how many times they have been saved, and how big the sealed data is.
• Sign-in activity: how many codes were requested and how many wrong codes were entered for an email address in the past day.
• IP addresses, as explained below.

So we can see who is connected to whom and when, but not what their tiles say.

IP addresses. Your phone's IP address reaches our servers with every request, and our servers need it to reply and to limit abuse. Our limits count requests from each address. Those counters are held only in memory or stored only as a keyed hash, and they are short-lived. Cloudflare also records requests in logs that we can read, which we use to fix problems and investigate abuse. These logs can include the IP address, the time, the address requested, technical details of the phone and app, and an approximate location worked out from the IP address. They don't include your tiles in readable form, and they are deleted after up to 7 days. We don't use IP addresses for advertising or tracking.

We don't use advertising, analytics or tracking, and we don't sell or share data for marketing.

How the keys work

Each set of tiles has its own random key. Your account key, made on your phone, protects those keys so that they can be stored on our servers sealed. We also store a check value, which tells your phone it has the right account key and says nothing about the key itself. Their phone keeps its key in the phone's secure storage.

Apple and Google. Your phone also saves your account key to your own iCloud Keychain (iPhone) or Google Block Store (Android), so a new phone usually gets it without you doing anything. Apple and Google end-to-end encrypt it. On Android it only goes to Google's cloud when that encryption is available, which needs a screen lock, and otherwise it can only move directly to a new phone. This means anyone who gets into your Apple or Google account could get your account key, though they would still need to sign in with your email to fetch your tiles.

Recovery key. You can also save an optional recovery key, under “Account”. It is never sent to us.

If you lose the key. We can't read or restore your tiles, because we don't have the key. The key may not reach a new phone if you switch between iPhone and Android, if iCloud Keychain is off, or if an Android phone wasn't restored from your old one. You can then start fresh, which deletes your own tiles and can't be undone. The tiles of people you set up stay on our servers, still sealed, and keep showing on their phones, but you can no longer open them.

Connecting a phone. The link or QR code holds a secret that unlocks the tiles for that person. It stays in the part of the link that isn't sent to any server. A link works once, lasts 24 hours, and making a new one cancels the last. Anyone who opens it first gets the key to that person's tiles, so only send it to them. Any app you use to send the link can see it.

What encryption doesn't protect against

• The app itself. Encryption depends on the app doing what it says. As with most apps, a future version could be changed to send keys elsewhere, and you couldn't easily check.
• Someone using the phone. A phone that someone else has unlocked, or that has been compromised, can open what it holds.
• A removed phone. We stop serving it and delete its record, but we can't take back the tiles or key it has already received, including on a phone connected by mistake.
• Your Apple or Google account, as explained above.
• The details we can read, listed above.
• Other companies' services. See “Who else handles data” below.

How it is used

Only to run the app: to sign you in, to show the tiles on their phone or yours, to let you manage them, and to keep the service secure and working. The legal basis is performing the service you asked for and, for security and fixing problems, our legitimate interest in keeping the service safe and reliable.

Who else handles data

• Cloudflare, Inc. hosts the service. It stores the sealed data and the details we can read, handles IP addresses and keeps the logs described above.
• Resend delivers sign-in emails (your email address and the code only).
• Apple and Google hold the copy of your account key described above, in your own account. They also look up the address you type for a ride tile, because it goes to your phone's map service.
• The apps your tiles open. Tapping a tile hands its details, such as a phone number or destination, to the app it opens. Those apps have their own privacy policies.

These providers may process data outside your country under their standard data protection terms.

Permissions on the phone

Kintap doesn’t read your contacts or photos. It asks for the Camera only to scan the code that connects a phone. On Android it asks for Location only when you save a ride tile, to look up the address you typed on your phone’s map service; it never records where you are. It never reads your location in the background.

How long we keep it

• Your account, email address and sealed tiles: until you delete them. Removing a connected phone deletes its record, apart from the marker below.
• Markers for removed phones and deleted accounts: when a connected phone is removed, or the person it was set up for is deleted, we keep a one-way hash of that phone's access token, so a phone that was offline can find out and clear itself. When you delete your account, we keep a one-way hash of the access token that asked, so that phone can finish deleting your account key if the reply never reached it. That record is found by a keyed hash of your email address. These hashes hold no tiles or readable details. We don't currently delete them automatically.
• Logs: up to 7 days.
• Limit counters: a limit lasts an hour at most. The stored counters for it are then cleared the next time that part of the system runs.
• Connection links: a link stops working once used or after 24 hours, and its sealed data is cleared the next time expired links are cleaned up.
• If you ask for a code but never sign in: we don't keep your email address. A record found by a keyed hash of it stays, holding the hashed code and the sign-in counts. We don't currently delete it automatically.

Deleting your data

In the app, go to family mode, then “Account”, then “Delete account”. This deletes your account, your own tiles and every person you set up, with their tiles, and disconnects their phones. A phone clears its saved tiles when it next goes online and finds out, so one that is offline keeps them until then. The app also tries to remove your account key from your phone and from your iCloud Keychain or Google Block Store. A recovery key you saved is yours to delete. Logs are deleted as described above. You can also email us to ask for deletion.

Your rights

You can ask to access, correct, export or delete your data, or object to how it is used, by emailing info@kintap.app. Because we can't read your tiles, we can only give you or correct what we can read; you can see and change your tiles in the app. You can also complain to your data protection authority.

Children

Kintap is not directed at children under 13, and family accounts are for adults.

Changes

We'll update this page and the date above if this policy changes.