Legal
Kinmeadow sub-processors
Last updated 13 September 2026. Version 1.4.
What this page is
Northern Tech Hub Ltd is the controller of the personal data in Kinmeadow. To run the service we use a small number of suppliers who process personal data on our instructions. Those suppliers are our sub-processors, and they are all named below.
Each of them works under a written data processing agreement that requires them to act only on our instructions, to keep the data secure, to help us answer your requests, and to delete or return the data when we stop using them. None of them is allowed to use your family's content for their own purposes, to sell it, to advertise to you, or to train AI models on it.
This page is the authoritative list. Our Privacy Policy, our Terms of Service and any summary we give you elsewhere point here. If something appears in a marketing page, a blog post or a support email that does not match this page, this page is right.
If you would rather have the list by email, or you want a copy of the safeguards in place for a particular supplier, write to notices@kinmeadow.com and we will send it.
Our sub-processors
| Supplier | Legal entity | What they do for us | Personal data they receive | Processing region |
|---|---|---|---|---|
| Microsoft Azure | Microsoft Ireland Operations Ltd | Hosts the whole service: the API, the database, your photos and documents, our encrypted key store and our server logs. | Everything you put into Kinmeadow, plus account details, server logs and IP addresses | North Europe (Ireland), with backups in West Europe (Netherlands) |
| Anthropic | Anthropic PBC | Generates Meadow (the Kinmeadow assistant)'s answers, extracts renewal dates from documents you send, and reads recipe photos and linked pages | Your question, plus the household context needed to answer it: calendar, lists, meals, chores, vehicles, renewals and birthdays. Recipe photos and the text of pages you link. Documents you send for a renewal date to be pulled out. Never your home address | United States |
| HERE Technologies | HERE Global B.V. | Suggests addresses as you type, and works out journey time for departure reminders | The partial address text as you type it. A single pair of coordinates when you set a departure reminder | EU (Netherlands) |
| UK Vehicle Data | UK Vehicle Data Ltd | Turns a vehicle registration number into the vehicle's details, so you do not have to type them in | Vehicle registration number | United Kingdom |
| Sentry | Functional Software Inc. | Tells us when the app has crashed, and why | Stack traces and technical data about the crash, with the affected user reduced to an identifier. No family content | EU (Frankfurt), on ingest.de.sentry.io |
| Expo | 650 Industries Inc. | Delivers push notifications, and delivers app updates to your device | Push notification token, notification title and one line of the body. For app updates: device IP address, platform and app version | United States |
| RevenueCat | RevenueCat Inc. | Tells us whether your Pro subscription is active | An app user identifier, store transaction identifiers, subscription status. No card details | United States |
| Apple | Apple Distribution International Ltd (Ireland) | Delivers push notifications to Apple devices, and takes payment for Pro on the App Store | Push notification token and the notification payload. For purchases: your Apple account relationship and transaction, which Apple holds as controller | Irish contracting entity, processing on global and US infrastructure |
| Google Ireland Ltd | Delivers push notifications to Android devices through Firebase Cloud Messaging, and takes payment for Pro on Google Play | Push notification token and the notification payload. For purchases: your Google account relationship and transaction, which Google holds as controller | Irish contracting entity, processing on global and US infrastructure |
Where data goes, and how transfers are protected
- United Kingdom: UK Vehicle Data.
- European Economic Area: Microsoft Azure, Azure Communication Services, our Microsoft 365 tenant, HERE and Sentry.
- Outside the UK and EEA, in the United States: Anthropic, Expo and RevenueCat, plus the push notification infrastructure of Apple and Google.
Where personal data leaves the UK we rely on the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. Where it leaves the EEA we rely on the EU Standard Contractual Clauses, or on an adequacy decision where one covers the transfer. We carry out a transfer risk assessment before relying on any of them. Ask notices@kinmeadow.com for the safeguards covering a particular supplier.
Independent controllers, which are not sub-processors
Three companies receive or hold personal data in connection with Kinmeadow without acting for us. They are independent controllers: they decide for themselves what they do with your data, under their own terms and their own privacy policies, and we have no contractual control over that. They are not our sub-processors, and we do not list them in the table above.
We list them here anyway, for one reason. From where you sit, data still moves, and you should be able to see the whole picture on one page rather than work out which relationships are contractually ours.
| Party | Legal entity | The relationship | What is involved |
|---|---|---|---|
| Google, as a calendar source | Google Ireland Ltd | You connect your Google Calendar through OAuth. You grant the permission, Google verifies the request, and you can withdraw it in your Google account settings at any time | Read-only access to your calendar events, using the narrowest scopes that work. The access token is stored encrypted in our key store |
| Apple, as a calendar source | Apple Distribution International Ltd (Ireland) | You connect iCloud Calendar using CalDAV and an app-specific password that you generate in your Apple account | Read-only access to your calendar events. The credential is stored encrypted in our key store |
| Microsoft, as a calendar and mailbox source | Microsoft Ireland Operations Ltd, and your own Microsoft tenant | You connect through Microsoft Graph. Where you use a work or school account, your own organisation's tenant governs the data, not us | Read-only access to calendar events, and to a mailbox where you connect one, so we can find things like renewal dates. The access token is stored encrypted in our key store |
Three things follow from this, and they matter more than the labelling:
- Connecting is always optional. Nothing in Kinmeadow requires a connected calendar or mailbox, and you can disconnect at any time, in Kinmeadow or in your Google, Apple or Microsoft account settings. When you disconnect, we delete the stored token immediately and our access ends.
- What we read, we read for you. Connected calendar and mailbox data is used to show your events alongside the family calendar and to spot renewal dates and appointments. It is not used for anything else. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements, as set out in our Privacy Policy.
- Apple and Google appear twice on this page, in different roles. When they deliver a push notification to your device or take payment for Pro, we have engaged them and the sub-processor table applies. When you connect a calendar you already hold with them, they are acting for you under their own terms, and this section applies. The two are separate relationships and should not be read as one.
Apple and Google as app stores. Both act as controllers in their own right for your purchase of Pro: they take the payment, hold your payment details, issue your receipt and set their own refund policy. No card data ever reaches our systems. Their terms apply to that transaction alongside our Subscription Terms.
How we tell you when this list changes
We add a supplier only when there is a reason to, and we take one off as soon as we stop using it.
Before a new sub-processor starts processing your personal data, we will:
- update this page and change the date at the top
- give at least [30] days' notice by email to anyone subscribed to notifications, and
- for a change that materially affects how your data is handled, tell you in the app as well
If you object to a new sub-processor on reasonable data protection grounds, write to notices@kinmeadow.com during the notice period and tell us why. We will look at whether there is a workable alternative. If there is not, and you do not want to continue, you can export your family's content and close your account, and we will refund any part of a Pro subscription you have paid for but not used.
Removing a supplier, or a change that only affects our own internal systems and not your personal data, does not need advance notice. We will still show it here.
To subscribe to notifications, email notices@kinmeadow.com with the subject line "Sub-processor notifications". Tell us the email address you want them sent to. There is no charge, you do not need a Kinmeadow account, and you can unsubscribe from the same address at any time. These notices are service messages about how your data is handled, not marketing, and we will not use the address for anything else.
Changes to this page
| Date | Change |
|---|---|
| 1 September 2026 | Version 1.2, first published |
| 12 September 2026 | Version 1.3: the product renamed Kinmeadow |
| 13 September 2026 | Version 1.4: contact addresses moved to kinmeadow.com |
We keep this table so you can see what has changed and when.
Contact
- Anything about this list, or about your data: notices@kinmeadow.com
- Technical and billing help: support@kinmeadow.com
- Privacy, complaints and governance: notices@kinmeadow.com
Northern Tech Hub Ltd, company number 16428857, registered in England and Wales. Registered office: Ground Floor, Radley House, Richardshaw Road, Leeds, LS28 6LE.
Related documents: our Privacy Policy, Children's Privacy Notice and Terms of Service.