Privacy policy

We hold names, dates of death, family relationships and asset details. That is sensitive information about people who cannot consent and families who are grieving, and this policy reflects that.

Last updated July 29, 2026

The short version

The eligibility check saves nothing. It runs in your browser.
We only store estate details once you start creating a document.
We never put personal information in a web address, so it cannot leak through a link, a referrer or an analytics record.
We never see your card number. Stripe handles payments.
We do not sell or share your data with advertisers. Ever.
Ask us to delete everything and we will, within 30 days, no questions.

Who we are

Kinclaim is operated by Handler Labs LLC. For privacy questions, write to support@getkinclaim.com.

What we collect

The eligibility check: nothing

The check at /check runs entirely in your browser. The state you pick, the date of death, the estate value and your answers about complications are never transmitted to us and never stored. If you close the tab, they are gone.

The only thing that ever appears in the web address is the two-letter state code, so that state pages can link into the checker. Dates, values and names never appear in a URL. This is deliberate: anything in a URL can end up in browser history, in a referrer header sent to another site, in a bookmark shared with someone, or in server logs.

When you create a document

If you choose to generate documents, we store what is needed to produce them:

About the person who died: full name, date of death, last address, and where relevant the last four digits of identifiers the affidavit requires.
About the heirs: names, relationships to the decedent, and addresses, because the statutory forms require them.
About the estate: the accounts, vehicles, wages and property you list, with values, and any debts where your state requires them to be scheduled.
About you: your email address, so we can send your documents and your receipt. After payment we email you a private link to your documents; that email is the only place the link exists.
If you ask for a waiting-period reminder: the email address you give us and the date, stored for that single reminder. We send one email on the day, delete the address immediately after sending, and never add it to any list. If you never become eligible, the record is deleted anyway.

Payments

Payments are processed by Stripe. Your card number, expiry and security code go directly from your browser to Stripe and never touch our servers. We receive only a payment confirmation, the last four digits, the card brand, and the billing country.

Analytics

We measure aggregate traffic, which pages are visited, roughly where visitors come from, and whether flows complete, using Vercel Web Analytics, a privacy-preserving service run by our hosting provider. It sets no cookies at all, does not build cross-site profiles, and never receives any estate data. We do not use Google Analytics, advertising pixels, or ad trackers of any kind. There is no cookie banner because there is nothing to consent to.

What we never do

We do not sell personal information. There is no exception.
We do not share your data with advertisers, data brokers, funeral services, insurers, or lead-generation companies.
We do not use your estate information to train machine-learning models.
We do not email you marketing you did not ask for. Transactional email only: your documents, your receipt, and replies to your support requests.

How long we keep it

Abandoned drafts: deleted after 30 days of inactivity.
Completed orders: kept for 365 days so you can re-download and correct documents, then deleted.
Financial records: Stripe retains transaction records for the period tax and anti-fraud law requires. We keep only the order reference.

You can ask us to delete everything sooner, at any time, and we will do it within 30 days.

How it is protected

All traffic is encrypted in transit with TLS, and HTTP Strict Transport Security is enforced.
Data is stored in Supabase with encryption at rest and row-level security, so one customer’s matter cannot be read from another’s session.
Access to production data is limited to what is necessary to operate and support the service.

No system is perfectly secure, and we will not claim otherwise. If we ever discover a breach affecting your information, we will tell you directly and promptly.

Your rights

Wherever you live, you can ask us to show you what we hold, correct it, delete it, or send you a copy. Email support@getkinclaim.com and we will act within 30 days.

If you are a California resident, the CCPA/CPRA gives you rights to know, delete, correct, and to opt out of sale or sharing. We do not sell or share personal information as those terms are defined, so there is nothing to opt out of, but your other rights apply and we will not discriminate against you for exercising them.

Information about people who have died

Most privacy law does not protect the deceased, but the information you give us about them is intertwined with information about living heirs, and we treat the whole record with the same care. A surviving spouse or heir named in a matter can ask us to delete it on the same terms as the person who created it.

Children

This service is not directed at children and we do not knowingly collect information from anyone under 18. Minor heirs are sometimes named in an affidavit because the statute requires it; that is information about them provided by an adult, and it is retained and deleted on the same schedule as the rest of the matter.

Changes

If we change this policy materially, we will update the date at the top and, for changes that affect how we handle information already collected, email anyone with an active matter.