In one sentence: KinTerm does not ask for any personal information, does not upload anything, has no server, no ads, and no tracking. All family member data and red envelope records stay only on your phone.
Anything you enter inside the app is stored only in your phone's local database, including:
Family member names, their relationship to you, birth year, deceased status, optional photo
Red envelope records: recipient, amount, occasion, year
App settings: regional terminology preference, language, Pro unlock status
This data lives only in your phone's database. We cannot see it, and it is never sent to any server (we do not have one).
We do not ask for your email, name, phone number, or birthday
We do not require you to register an account (there is no account system)
We do not analyze what you tap or which features you use
We do not track you across other apps (we do not request the ATT permission)
We do not show any ads
We do not include any analytics SDK (no Firebase, no Google Analytics, no third-party tracker)
Kinship calculation, family tree, red envelope tracking, and festival greeting templates all run fully offline. None of the following are needed:
No camera (you do not take pictures for us)
No photo library (family member photos use the system image picker; the app itself never reads your photo library)
No location (kinship terms do not depend on where you are)
No contacts (family members are entered manually)
No microphone (voice pronunciation is synthesized, not recorded)
No network (everything works offline — usable on a plane or on the train home)
These permissions are not even declared in the app, so iOS never shows a permission prompt for them.
Pro users may optionally back up family tree and red envelope records to their own cloud storage account (the cloud drive built into their phone). This backup:
Goes only to your own cloud account
The app has no backend server, so we cannot see your backup content
Backup is opt-in (off by default)
When turned off, previously uploaded data remains in your cloud drive — you can delete it manually any time
Pro unlock uses the standard in-app purchase flow provided by the App Store. The transaction is handled entirely by the App Store. Your credit card number and account information go only to the App Store. The app itself never sees your payment information and stores no payment record.
The app only receives a "this user has Pro" flag from the App Store, stored locally on the device.
Three layers of deletion are available:
Delete a single entry: Remove individual family members or red envelope records inside the app
Delete all local data: Use the "Data Safety" section in Settings to wipe everything at once
Remove the app entirely: Uninstalling removes all local data along with the app
You do not need to notify us for any of these — we have no copy of your data to begin with.
The app contains no content unsuitable for children, rated 4+. Because it includes a one-time in-app purchase, parents are advised to use the device's Screen Time or parental controls (Purchase Restrictions) if a child has access to the device.
If we update this policy in the future (e.g. when new features are added), this page will be updated. Significant changes will also be notified inside the app.