Legal
Privacy Policy
KinSentinel is a service that lets parents see and manage screen time on their children's Windows computers. This policy explains which data we process and why, how long we keep it, who we share it with, and how you can use your rights. It is also the information notice required by the EU General Data Protection Regulation (GDPR) and the Turkish Personal Data Protection Law No. 6698 (KVKK).
1. Data controller
The controller of your data is KinSentinel, correspondence address: info@kinsentinel.com.
For every privacy question or request: privacy@kinsentinel.com
2. Data we receive from parents
- Account details: full name, email address and preferred language. We never store your password, only a one-way hash of it.
- Account status: when the account was opened and the address confirmed, when the trial ends, and the other parents you added to the family.
- Usage information: when you last opened the panel and the country you connected from. We derive the country from the connection's IP address and do not store the IP address itself.
- What you enter: the names and time zones of child profiles, the rules and limits you set, the categories you give apps and sites, and the notes you send your child.
- Emails: confirmation, invitation and password-reset emails are sent to your address. We create one-time links for them and store only a hash of each link.
Contact form (on the site and in the panel, open to visitors too): the topic you chose, your message, your email address, your name if you give it, the page you sent the form from, the language and the country you connect from. When you send it from the panel, the message is linked to your account.
3. Data from the child's computer
The KinSentinel app (agent) you install on your child's computer sends the following to our server, and it is shown only in your panel:
- App use: the file name, product and publisher of the app in the foreground, its window title, how long it was open, and whether the computer was active or idle.
- Websites: the domain name (e.g.
example.com) and page title of the site open in the browser. We do not receive the full web address or the content of the page. - Computer events: when the computer starts, shuts down, sleeps, locks, and when users sign in and out; the agent's running and update status, attempts to stop or remove it, and starts in safe mode.
- Computer details: the computer's name, Windows edition type, agent version, the technical identifier of the Windows user account, the state of browser and protection settings, and the country it connects from (the IP address is not stored).
- Notes: whether the notes you send were shown, and your child's reply.
- Change log: which parent changed which rule and when.
When the computer cannot reach the server, these records wait on the computer for a while and are sent once it is back online.
4. What we do not collect
Screenshots, keystrokes, passwords, the content of messages and emails, the content of files, camera and microphone, location more precise than the country, and full web addresses. Window and page titles can contain the name of a document or a chat; beyond that we have no access to content.
5. Purposes and legal bases
| Purpose | Data | Legal basis |
|---|---|---|
| Opening your account, signing you in, providing the service | Account details, what you enter, data from the child's computer | Performance of a contract (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)) |
| Confirmation, invitation and password-reset emails | Email address, name, language | Performance of a contract (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)) |
| Answering problems, suggestions, complaints and requests sent through the contact form | Contact form data | Legitimate interests; for privacy requests a legal obligation (GDPR Art. 6(1)(f) and (c); KVKK Art. 5(2)(f) and (ç)) |
| Protecting accounts and the service against abuse | Sign-in attempts, the agent's signed requests, event records | Legitimate interests (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)) |
| Understanding and improving how the service is used | Sign-up and usage counts, last sign-in, country of connection | Legitimate interests (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)) |
| Legal obligations | As far as required | Legal obligation (GDPR Art. 6(1)(c); KVKK Art. 5(2)(ç)) |
We do not sell your data, do not use it for advertising, and do not make automated decisions or profile you. The categories of apps and sites (games, education and so on) only organise your reports.
6. How long we keep data
- The child's activity, computer events, notes and the change log: 90 days. Older records are deleted automatically every day.
- Account details, child profiles and rules: until you delete your account. Your account is not deleted when the trial ends; the panel becomes read-only.
- Contact-form messages: 1 year. If you delete your account, the messages you sent from the panel are deleted at once too.
- One-time links and pairing codes: deleted 7 days after they expire or are used.
- Deleting your account: when you delete your account in Settings and you are the only parent in the family, everything belonging to the family (child profiles, computers, all records) is deleted at once. If there is another parent, only your account is deleted.
- Backups: database backups taken before updates are deleted after 14 days. Until then a deleted account remains only in a backup and is not used except to restore the service.
9. Security
Every connection is encrypted (HTTPS). Passwords are stored only as hashes. A child's computer can talk to the server only with requests signed by its own key. Each family's data is kept apart from the others; a parent can see only their own family. The operator of the service can see families' email addresses, names and counts, last sign-in times and countries of connection, for running and supporting the service.
10. Your rights
Under GDPR Articles 15–22 and KVKK Article 11 you have the right to access your data and receive a copy, to have it corrected or erased, to restrict or object to its processing, and to data portability.
- You can change your name, language and password in Settings, and delete your account and data there too.
- For any other request, choose "Privacy request" in the contact form or write to privacy@kinsentinel.com. We answer within 30 days at the latest.
- You have the right to complain: in Türkiye to the Personal Data Protection Board (KVKK), in the European Union to the data protection authority of the country you live in.
11. Children and the parent's responsibility
Accounts may be opened only by parents or legal guardians aged 18 or over. Records from the child's computer are processed on the parent's instructions and within their parental responsibility. Install KinSentinel only to look after a child in your care, on a computer you are entitled to manage. We recommend telling your child, in a way that suits their age, that the computer is monitored and why.
12. Changes to this policy
When we change this policy we update the date at the top. We announce significant changes by email before they take effect.