Privacy
Last updated: October 2026
The short version
We store what a household needs to run its hub — calendar entries, grocery items, meal plans and notes — and nothing else. No advertising, no analytics, no selling data. You can export everything or delete it.
What we store
- Account: a passkey (public key only) and a display name. We never see a password or a biometric; the passkey stays on your device.
- Household data: whatever you enter — calendar entries, grocery items, meals, notes.
- Devices: a label, a hashed token and the last time each device connected.
- Sign-in attempts: a hashed IP address and the outcome, with no content, so we can stop brute-force attempts.
What we do not do
- No third-party analytics, ad networks, pixels or session recording.
- No sale or sharing of household data.
- No reading of your notes for advertising or model training.
Where it runs
Klinth runs on Cloudflare Workers, with data in Cloudflare D1. Cloudflare processes requests on our behalf as a hosting provider. Weather data comes from Anemlo (Wayfield), which receives the coordinates needed for the forecast.
Your controls
- Export: download everything as JSON from your hub.
- Delete: deleting a hub removes its rows, devices and credentials — not a soft flag.
- Devices: remove a device at any time; it loses access immediately.
Retention
Household data lives until you delete it. Devices unused for 60 days expire. Failed sign-in records are pruned after seven days.