Scope
This policy covers the Kigomo iPhone app and public website. Kigomo's parent company is Inang.com, an NYC company that develops innovative AI apps. References to “Kigomo,” “we,” “us,” or “our” in this policy include Inang.com as the company responsible for Kigomo. Kigomo is for adult parents and caregivers and is not offered in Apple’s Kids Category. It includes Play together, simple offline games a parent plays with a young child on the parent’s own device; that screen collects, stores, and sends no information.
Account and shared family information
We collect an account email address and user identifier to authenticate you. A private family workspace can contain cards, schedules, assignments, activity status, family profiles, children’s names and dates of birth, care notes, caregiver names, the city or area you enter for a caregiver, phone numbers, addresses you enter, emergency information, progress, and chat history. The caregiver city is used by AI Chat and may be used to suggest nearby activities. Supabase stores this information so active members of the same family workspace can access it across devices.
Kigomo does not sell personal information, show third-party advertising, or use family information to track you across other companies’ apps or websites.
Photos and device access
Kigomo uses Apple’s system photo picker, and the camera if you choose to make a card from a photo. You choose the specific photos copied into the app; Kigomo does not request broad photo-library access. Child and caregiver profile photos are stored on the phone, or in the web browser, where they were added and are never uploaded to Kigomo's storage. They are sent to OpenAI only when you use Get 4 ideas, after you allow AI features, to draw pictures, as described under AI and link assistance below. Card photos in the current snapshot planner remain on the phone. In a cloud-enabled family planner, a family-card image you explicitly add is stored privately so authorized family members can see it; it is not added to the public catalogue. Kigomo shrinks and re-encodes that image on your phone or in your browser before it is uploaded, which removes the camera details and any GPS coordinates the original carried; if that step fails, the image is not uploaded. If you make a card from a photo, that photo is sent to Kigomo's AI service; the section on AI and link assistance below explains what happens to it. Kigomo does not run face detection, face grouping, or auto-tagging on any photo. The iOS contact picker does not grant general contact access. When you pick an emergency or care-team contact, Kigomo saves that contact's name and phone number to your family workspace, where its members can see them.
Notifications
If you explicitly enable exact-time reminders, Kigomo asks iOS for notification permission and schedules alerts locally on your device for eligible calendar plans. By default, lock-screen alerts use generic wording and do not include card, child, caregiver, health, location, or note content. If you turn on Show what it’s for, an alert on that iPhone also shows the plan’s name as your family typed it, which anyone who can see your lock screen can read; it never shows notes, places, or who the plan is for. A reminder’s Done button marks that plan done only after you unlock your phone.
If you turn on Tell me when the plan changes, Kigomo registers that iPhone with Apple’s push notification service and stores its push token, your time zone, and when it was last alerted, so it can tell you when someone else in your family adds, moves, reassigns, or cancels a plan. The alert says only that your family plan was updated; it never names the plan, a child, or what changed. Kigomo sends at most one such alert every 20 minutes, and none between 9 pm and 7 am in your time zone. Apple delivers these alerts. Turning the setting off or deleting your account removes that iPhone’s registration. Signing out tries to remove it; if that can’t reach Kigomo, the next sign-in on that iPhone takes the registration over with alerts off. You can disable reminders and alerts in Kigomo or manage notification permission in iPhone Settings.
Apple Calendar
If you explicitly enable Apple Calendar sync, Kigomo asks for full Calendar access so it can create, update, and remove events without duplicates. Kigomo writes scheduled card titles, dates, times, and durations to a dedicated Kigomo calendar on that device. It does not import unrelated personal events into Kigomo. Each caregiver enables this separately, and Apple handles the calendar copy under your Apple account and settings. Turning sync off removes Kigomo-exported events while Calendar access remains available.
If you create a calendar link in Settings, any calendar app that subscribes to it receives your family’s scheduled plans with their titles and times, and the place your family added to a card of its own (never a place from Kigomo’s idea library). Anyone who has the link can read it, so share it only with people you trust; you can turn the link off in Settings, and it stops working if you leave the family.
Morning email
Once you have confirmed your email address and added a card or a plan to a cloud-enabled family planner, Kigomo sends you one email each morning, on by default. It lists today’s plans and tomorrow’s, with their titles as your family typed them, their times, and which ones are assigned to you, plus up to three ideas from your Saved list with links to plan them. It also includes your children’s first names as entered in Family (also in the subject line), which child each plan is for, and illustrations from Kigomo’s public card catalogue. For a plan assigned to someone else in your family, it shows that caregiver’s first name as entered in Family. The subject line never includes a plan’s title, and the email never includes your family’s photos, notes, or places. To send it at the right time, Kigomo stores your time zone from your phone or browser. Our email provider, Resend, delivers it and tells us if it bounces or is marked as spam, in which case we stop sending to that address. Kigomo keeps a short record of each morning email — when it was sent, how many plans and ideas it listed, and which ideas, so they are not repeated — for 90 days, but not the email itself. You can stop it with the Unsubscribe link in any morning email, or with Morning email in Settings on the app or the web.
Widgets
If you add the Kigomo Today widget, the app shares a minimal on-device snapshot with its WidgetKit extension through an Apple App Group. The snapshot contains only remaining and completed plan counts and the next exact time; it does not contain card titles, notes, child or caregiver identity, health information, locations, or photos.
Play together
Play together offers eight simple games — wipe to find, road home, memory match, snap, follow the card, copy the pattern, swish the shapes, and sort to the baskets — that a parent or caregiver plays with a young child on their own phone. The games work offline and collect, store, and send no information about anyone, and they never use a child's name or profile. The only thing saved is the settings the adult last chose, such as board size, pace, or which traveller to play with, kept on that phone. While the games are open, Kigomo pauses family sync, product analytics uploads, and its other requests to your family workspace; changes made before you opened the games wait on the phone and sync after you close them.
AI and link assistance
AI Chat, link import, making a card from a photo, and Get 4 ideas use OpenAI, our AI provider. Kigomo sends nothing to OpenAI until you allow AI features in the app: it asks before your first AI request and again if what Kigomo sends changes. You can withdraw that permission any time by turning off Use AI features (OpenAI) in Settings → Sharing & privacy. Kigomo's servers check this permission before every AI request and refuse the request if it hasn't been given, so Kigomo stops sending once a withdrawal reaches its servers, which takes up to about a minute; a change made offline reaches your other devices when that device reconnects. What each feature sends:
- AI Chat: your message, your family’s shared chat history, and family context — children's names and ages, care notes such as allergies, caregiver names and city, and your family's plans for the next two weeks — their titles, days, and times, which child each is for, and which caregiver is assigned — plus, unless your family turns it off, the things Kigomo remembers about your family and short summaries of your most recent earlier chats.
- Link import: the link, any caption you add, and the content of that page.
- Making a card from a photo: the photo and any short note you add.
- Get 4 ideas: the photo and any note, the profile photos you've added on that phone or in that browser, your child's age band, and the number of caregivers in your family.
Permission is per account. When a caregiver in your family uses AI features, the family details above — including other caregivers’ names and city and your family’s shared chat — are sent with their request. OpenAI does not use this data to train its models and may keep it for up to 30 days, as described below.
When you use AI Chat, Kigomo sends your message, recent conversation history, and family context through a Kigomo-controlled Supabase function to OpenAI so replies are personalized to your family. That context includes your child's name and age, their care notes (allergies, favorites, and good-to-know notes), the current caregiver's name and city, today's planned cards with their titles and times, and up to 40 of your family's plans for the next two weeks with their titles, days, times, the names of the children each is for, and the names of the caregivers in your family so the assistant can say who is assigned. It does not include a plan's notes or place. It also includes, when your message matches them, up to three cards and two decks from your family library — including their full descriptions. These are matched against the words of your message, so a message with nothing for the library to answer sends none of them. When you ask AI Chat to plan days, it also includes the titles of up to 20 of your family's saved ideas, the titles and dates of up to 15 upcoming local kids events near your city, and the titles of up to 15 cards from Kigomo's catalogue, so it can suggest ideas you already have before writing new ones; it does not include their descriptions. Allergy information is sent only so suggestions can avoid unsafe foods or activities. AI Chat can suggest moving, assigning, completing, or removing one of those plans; nothing changes until you tap Confirm, and only then does Kigomo make the change in your family workspace. You control what is shared by choosing what you enter in each profile field. Kigomo sets store: false, so OpenAI Responses application-state storage is disabled. Under OpenAI's standard API data controls, request and response content may still be held in abuse-monitoring logs for up to 30 days, or longer if OpenAI is legally required to keep them. Kigomo stores the resulting shared conversation and any parent-confirmed card in the family workspace.
AI Chat starts a new conversation each day, and earlier days stay readable in Chat. Once a day, Kigomo sends up to two of your family's earlier conversations from the past seven days to OpenAI, under the same settings, to write a short summary of each and to pick out a few lasting family notes, such as a child learning to swim, taken only from what caregivers wrote. Conversations from before October 15, 2026, or from before Kigomo remembers was last turned back on, are never summarised. Kigomo keeps those summaries and notes in your family workspace and includes the notes, and the summaries of your two most recent earlier chats from the past week, in later chat requests. Because this changed what AI Chat sends, Kigomo asks for your permission once more before your next AI request. Every caregiver in your family can see the notes in Kigomo remembers, in the Family tab, and can add, edit, or delete them, or turn the feature off. Kigomo is built not to keep notes or summaries about health, diagnoses, symptoms, medications, therapies, allergies, development or behaviour concerns, a caregiver's mental health, family conflict, custody or legal matters, finances, religion or ethnicity, addresses, schools, phone numbers or email addresses, photos or likeness, real-time location, or other people's children; that filter is our best effort over free text, not a guarantee, and you can delete any note it misses. Turning Kigomo remembers off erases every note and every summary for your family; your chat messages are not affected.
Link import sends the link and any caption you add through the controlled server boundary, which reads that page and sends them with the page's content to OpenAI to draft a card.
Making a card from a photo sends the photo itself. Kigomo shrinks and re-encodes the picture on your phone, or in your browser on the web, before anything leaves it, which also removes the EXIF details and any GPS coordinates the original carried; if that step fails, no photo is sent. The prepared image, plus any short note you add, then travels over HTTPS through the same Kigomo-controlled function to OpenAI, our AI provider, under the same store: false setting. Under OpenAI's standard API data controls, OpenAI may still hold a copy of that photo for up to 30 days for safety checks, or longer if OpenAI is legally required to keep it, before deleting it. Kigomo's own servers do not keep the image: it is not written to the database or to file storage. Kigomo asks the model to write about the object rather than about any people in the photo; that instruction is our best effort, not a guarantee. Nothing reaches your family until you save it: you see the draft card first, and it becomes a card in your family workspace only when you tap Save. Saving keeps the photo on that phone as the card's picture (on the web, only in your family's private storage) and, in a cloud-enabled family planner, also uploads it to your family's private storage so authorized family members can see it — the same handling, and the same removal route, as any other family-card photo you add, described under Photos and device access above and Retention and deletion below. If you discard the draft, Kigomo keeps no copy of the photo on your phone or in your browser.
Get 4 ideas, the other choice when you start from a photo, sends the same prepared photo, plus any short note you add, to OpenAI to write up to four activity ideas, and then to OpenAI's image model to draw a picture for each idea that shows your real item or room. Kigomo also sends the profile photos of the active child and up to two caregivers, for each who has a profile photo on that phone (on the web, in that browser; never a former caregiver), to the image model — each shrunk to about 512 pixels, re-encoded, and sent without names — so the people in the pictures look like your family, drawn in Kigomo's illustration style. Profile photos are not sent to the model that writes the ideas. To fit the ideas to your child's age, Kigomo also sends OpenAI your child's age band, such as 2–3 years (never their date of birth), along with how many caregivers are in your family. The age band is used to write the ideas and draw their pictures, and it becomes the age range shown on each idea card, including on a card you share by link. Kigomo's own servers don't keep the photo or the profile photos: they are not written to the database, to file storage, or to logs. Under OpenAI's standard API data controls, OpenAI may hold copies of these images in abuse-monitoring logs for up to 30 days, or longer if OpenAI is legally required to keep them. OpenAI screens the images it receives for abuse, including child-safety scanning; this covers the item photo sent to the model that writes the ideas as well as the images sent to the image model. Kigomo runs no face detection or face recognition on these photos and keeps no face data. A picture you save is kept on that phone as the card's picture and, in a cloud-enabled family planner, stored privately in your family's storage so invited family members, including co-parents, can see it; it is never shown on a shared card link. Removing a profile photo keeps that person out of future pictures. Profile photos do not sync between phones or browsers, so a profile photo can only be removed on the phone or in the browser where it was added. Pictures already saved stay until you remove them or delete the card. The pictures are illustrations and may not be accurate.
Sharing you initiate
Family workspace members can see shared workspace information. If you use an iOS share action, you choose the destination and recipient; that recipient or service handles the shared information under its own terms. Sharing a card sends its text details and, for a cloud share, the number of attached photos — never the photo files themselves. A shared card link shows only Kigomo's published catalogue art, when the card came from the catalogue; it never shows a picture drawn by Get 4 ideas or any other family picture.
In-app product analytics and diagnostics
The signed-in app records product events so we can see which features work. Each event holds its type (for example, a card scheduled or shared), the card's id, category, type, and status where it concerns a card, the screen it happened on, and your user and family identifiers. Events never include card text, notes, names, locations, or photos. Kigomo keeps them for 400 days and then deletes them automatically. When you delete your account, your events are no longer linked to you; when a family is deleted, its events are deleted with it. They are not used for advertising or to track you across other companies' apps or websites, and they are not sold. Because they are part of running the service, there is no setting to turn them off.
The iPhone app also sends the crash and performance reports iOS collects for it (Apple MetricKit), and the web planner reports its own errors. These contain technical details only, such as an error name and where it happened, never card content, names, or photos, and they are recorded without your user identifier. When sync has to set aside changes our server refused, the iPhone app also sends a short technical note with how many changes, what kind of error and the app version, at most once a day; it never includes card content or who made the change.
Public website
Public card and deck pages contain editorial ideas, not private family records. Hosting infrastructure may process IP address, browser type, requested page, and request time to deliver and protect the site.
Only if you choose Accept analytics, public pages use Google Analytics to help us understand which ideas and guides are useful. Google receives public page paths, referring-site origins, and browser, device, and language information. It processes your IP address to derive an approximate location and uses cookies to recognize returning visits. We remove URL queries and fragments from the page addresses we send. We do not use Google Analytics to identify you.
With the same optional choice, Kigomo also measures whether a public-card visit leads to a reviewed save, schedule, or completion. We keep a coarse source label, a public catalogue reference, and the review time linked to your family workspace and the account that started the review for a 90-day reporting window, with scheduled daily deletion of expired records. We do not connect Google identifiers to family records or include child information or card content in this attribution record.
Google Analytics does not run inside the signed-in app. The product app, admin pages, authentication pages, and family invite and share links exclude its script. Kigomo does not use advertising trackers or sell analytics data. Choose No thanks to keep optional analytics off, or use Cookie preferences at the bottom of a public page to change your choice. Declining later stops new optional measurement; it does not erase data already collected. You can also use your browser's tracking protection, clear analytics cookies in your browser, or install Google's Analytics opt-out add-on.
The map on our public places and events pages comes from Google Maps. It loads by itself when the map area of the page comes into view, without a separate choice, so Google receives your IP address, browser and device information, and the address of the page you are viewing, and handles them under its own privacy policy. Kigomo sends Google Maps no account, family, or child information. The map pins come from addresses Kigomo looked up with Google; Kigomo keeps those map points for 30 days at most and then looks them up again.
Retention and deletion
Shared information remains until a member removes it or the owner deletes the workspace. When a note is removed, its text is erased. Removing a child erases their allergies, favorites and notes. Notes in Kigomo remembers stay until you edit or delete them, turn Kigomo remembers off, or the family is deleted; deleting a note erases it. Chat summaries can't be edited one by one: they are removed when you turn Kigomo remembers off or the family is deleted. When a caregiver deletes their account, the summaries of conversations they took part in, and the notes Kigomo took from those conversations, are erased too. Deleting the app removes only that phone’s cache. On the web, profile photos stay in that browser until you remove them, leave or delete the family, delete your account, or sign in to a different account there. Leaving a workspace revokes access and removes that workspace's offline cache, local photo files, chat cache, and interaction history from the phone after the server confirms the leave. Apple Calendar events are system calendar data; turn sync off before removing Kigomo, or remove the dedicated Kigomo calendar in Apple Calendar if app access has already been revoked. Users can delete their account inside Kigomo. If you own a family workspace, that workspace and its shared data are deleted with your account. If another caregiver still uses that family, Kigomo asks you to confirm first, then deletes the family for everyone together with your account. If you joined someone else's family, your account, the photos you added, your card notes, and your chat messages are deleted, and your share links stop working. Your votes, high-fives and your name on plans are removed. The plans themselves stay with the family. Photo ideas the other caregiver saved stay with them. Deleted photos stop being viewable immediately, and their stored files are erased automatically: media removed from a family is permanently erased within about 7 days, and archived cards and their photos are permanently deleted after 30 days. OpenAI's standard abuse-monitoring retention is described above. If you report a shared card, Kigomo stores the reason you chose, any note you add, a copy of the card's title and description, and your account ID if you are signed in — never your IP address. Reports are seen only by the Kigomo team, never by the person who shared the card, and are deleted 12 months after they were made. If you report AI-written content (a chat reply, an idea or a drafted card), Kigomo stores the reason, any note you add, a copy of that text, whether it had a generated picture, and your account ID, used only to stop repeated reports — never the picture and never your IP address; these reports are seen only by the Kigomo team and are deleted with your account or 12 months after they were made, whichever comes first. See Data choices.
Security
Sessions are stored in the iOS Keychain. Supabase row-level security limits workspace access to active members, and HTTPS protects data in transit. Local caches are protected by Apple’s app sandbox. No system is risk-free.
Processors and contact
Supabase provides authentication, database, and server functions. OpenAI processes AI requests when you choose those features. Resend delivers the morning email. Apple delivers push notifications to iPhones that turned on plan-change alerts. Google Analytics measures use of the public website only, and Google Maps draws the map on its public places and events pages. Each processor receives only the data needed for its service and is contractually required to protect it with safeguards at least as protective as this policy. Questions or privacy requests can be sent to team@kigomo.com. Please do not email sensitive child information.
Where your information is stored
Kigomo is based in the United States. Supabase stores your account and family workspace in the United States, and the other processors named above — OpenAI, Resend, Apple, Google Analytics, Google Maps, and our website hosting — handle information mainly in the United States. If you use Kigomo from Australia or anywhere else outside the United States, your information is sent to and stored in the United States.
Access, correction, and complaints
You can see and edit most of your family's information right in Kigomo, and remove it as described under Retention and deletion above and in Data choices. To ask for a copy of the personal information we hold about you, or to have something corrected, email team@kigomo.com. If you have a concern about how Kigomo handles your information, please tell us first so we can put it right. If you are in Australia and we haven't resolved your complaint, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.