Behind the scenes

How Kin works

Kin runs on a Mac in your home, not in a data center. Here’s what happens behind the scenes: where your family’s information lives, how Kin thinks, who can see what, what travels over the internet, and what we can and can’t see.

It lives in your home

Conversations, memories, photos and everyone’s accounts are stored on your Mac. We don’t keep a copy.

It thinks in your home

Kin’s AI runs on your Mac’s own chip, not in someone else’s cloud.

It’s sealed when it travels

Away from home, everything is sealed on your phone and opened only on your Mac. Our relay passes it along without being able to open it.

We can’t read it

Your conversations, memories and photos are locked with keys made from your family’s passwords. We never have those passwords or keys.

Your Mac

Your Mac is your family’s server

Kin Server is an app that turns a Mac in your home into your family’s own private server. It holds everyone’s accounts, conversations, memories and photos, and it’s where Kin does all of its thinking.

The Kin app on each phone is a window into that Mac. It keeps a copy of what it has already shown you, so it stays quick even when your Mac is slow to answer. That copy is protected by your phone’s lock, and by Face ID if you turn it on in Kin.

Because everything lives on your Mac, your family can reach Kin only while it’s on and awake. That’s also when Kin does its overnight work. See Does my Mac need to stay on?

Kin’s AI

Kin thinks on your Mac

When you ask Kin something, the answer is worked out on your Mac. Kin’s models run on your Mac’s own chip. There’s no AI service in the cloud reading your questions or learning from them. When Kin needs to look something up, only the search goes out, as explained below.

Macs with Apple silicon share one pool of fast memory between the processor and the graphics, which is what lets a computer at home run a capable AI model. Kin picks the model that fits your Mac’s memory:

Kin Fast

16 GB or more

Kin Core

24 GB or more

Kin Extended

48 GB or more

Kin Extended+

64 GB or more

A Mac with more memory can run a bigger model, which gives more thoughtful answers. You can see and switch models on your Mac in Settings → Model.

Because it all happens at home, Kin keeps working over your Wi‑Fi even when your internet is down. See Does Kin work if my internet is down?

Memory

Kin remembers what matters

Kin remembers things like birthdays, allergies, plans and preferences, so nobody has to repeat themselves. Its memory is kept in three separate places:

Yours

What you tell Kin one on one.

Your family’s

What comes up in family group chats and shared projects.

Your family’s foundation

Your values, your goals, and what makes your family yours.

These are separate files on your Mac, each locked with its own key, not one big database with a label on each entry. What you tell Kin one on one is saved only to your own memory. Things said in shared spaces, like family group chats and shared projects, can be saved to your family’s memory, which everyone in your family can see, kids included. A direct message between two people is remembered privately for each of them.

Overnight, on your Mac, Kin tidies up its memory. It keeps the facts that last, lets outdated ones go, and refreshes the short summaries it keeps in mind, a bit like how sleep helps us remember.

Who sees what

Who can see what at home

Your conversations, memories, messages and photos are encrypted on your Mac with keys made from your family’s passwords. We never see anyone’s password, so we can’t read any of it, and we can’t reset a password for you. Your recovery key can. See I forgot my password.

Adults

Your private chats and memories are locked with your own password, not the admin’s.

Teens

Parents see how much a teen messages, not what they say, except in conversations with another family that include an adult.

Children

Parents can read a younger child’s conversations and messages.

Others in your household can see your profile, including your personal instructions for Kin, and how much and when you use Kin, but not what you say.

One trade-off is on purpose. So nobody loses everything to a forgotten password, another adult in your household can reset yours, and your data comes back under the new password. That also means they could sign in as you. If it happens, you’re signed out everywhere and get a notification if you have them on, and for 7 days, signing in with your old password lets you stop the change. Stopping it can’t undo anything they already saw. If you’d rather nobody else could ever open your private data, turn off Allow reset by other adults in Lock & Security. Then only your password or recovery key can.

A few things aren’t encrypted, because Kin needs them before anyone signs in or to find memories quickly: your family’s names and profiles, the small photos on the sign-in screen, and the index Kin uses to find related memories. Turning on FileVault, which encrypts your Mac’s whole disk, protects those too. See How Kin keeps your family’s data safe.

Away from home

At home and away

Your phone reaches your Mac in one of two ways, and Kin picks the right one on its own.

At home

Your phone talks to your Mac directly over your Wi‑Fi. Nothing leaves your house.

Away from home

Sealed on your phone and opened only on your Mac. Our relay passes it along but can’t open it.

With another family

Mac to Mac, sealed and signed. There’s no company database in the middle.

The relay is a service we run so you don’t have to change anything on your home router. Think of it as a mail carrier who can read the address on an envelope but can’t open it: it sees which home a connection is for and passes it along. The seal is made and opened only on your Mac and your family’s phones, and we don’t have the key.

Your phone also checks that it’s really your Mac on the other end. When you set it up with the QR code, it learned your Mac’s unique fingerprint, and it won’t talk to anything that doesn’t match, even something pretending to be your Mac.

What the relay can see: that your Mac is connected, which version of Kin it runs, and how much sealed traffic passes through. Like any internet service, it also sees the internet address a connection comes from. Beyond routine server logs, which are deleted after two days, we keep no record of when your home was connected or from where. We keep totals, not histories.

Rather not use the relay? On your Mac, turn off Settings → Privacy → Away-from-home access. Your phones then reach Kin only on your home Wi‑Fi. If you’re connected with other families, your Mac still sends them messages through the relay.

Other families

Connecting with other families

You can connect your family with another Kin family, to message each other and share group conversations. There’s no company database in the middle. Your Mac and theirs exchange messages through the same relay, sealed the same way, and each keeps its own copy of the conversations you share.

Each Mac proves who it is with a digital signature and only accepts messages from families it’s connected to, so messages can’t be faked or redirected. The relay can see that your two Macs are exchanging something, when, and how much, but never what.

When you connect, the other family sees your family’s name and photo, plus the names and photos of the people in your household who use Kin and whether each is an adult or a child, so they know who they can message. They see a conversation only if they’re part of it.

When Kin takes part in a conversation with another family, it doesn’t use your family’s memories. It works from that conversation and from what it has learned in conversations between your two families, which is kept apart from your family’s own memory.

Parents stay in charge. Only an admin can connect your family with another. A switch on each child’s profile decides whether they can be added to group conversations with families you aren’t connected to. You can disconnect from a family at any time from their page in Community.

The internet

When Kin uses the internet

Most of what Kin does never leaves your home. These are the times it reaches out, and why.

  • Looking things up. When a question needs something current, like news or opening hours, Kin searches the web from your Mac and reads the results. The search engines see what was searched for, sometimes in your own words, coming from your home’s internet connection, with no name or account attached. For the weather, Kin asks a weather service about the place in question. We’re not part of any of it, and we never see what you searched for. Parents can turn web access off for a child or teen.
  • Getting ready to search. When Kin starts, its web search can make a couple of routine setup requests to public reference services. They carry nothing from you.
  • Link previews. When you open the Links tab in a conversation, your phone asks each linked website for its title and picture, the way a browser does.
  • Notifications. If you turn on notifications on a phone, Kin seals each one on your Mac before it leaves. Our forwarding service, and then Apple, deliver it without being able to open it. They see which phone it’s for, when, and a short line your phone can show if it can’t open the notification.
  • Updates. Every few minutes, Kin Server checks a public list of versions. It’s the same list for everyone and carries nothing about you, though, like any website, the server that hosts it sees the internet address the check comes from. Every update is signed by us and notarized by Apple, and Kin Server checks our signature before installing it, so it only accepts genuine updates.
  • Your license. When you enter your license key, your Mac activates it with our licensing service. After that, Kin checks the license on your Mac without calling us. It only contacts the service again if you reinstall Kin or move it to a new Mac.
  • Kin’s models. Kin downloads its models when you set it up, when you choose another one, or if it starts and finds one missing. It’s a plain file download.
What we see

What we can and can’t see

This is the same list you see when you set up Kin, straight from our Privacy Policy.

What we’ll keep track of

  • That your Kin Server connects to our relay
  • Which version of Kin Server it is running

What we can’t track

  • Who you are or where you are (we never keep names or addresses)
  • Anything you, your family, or a connected family say to each other or to Kin
  • Anything you do at home (your home network never touches us)
  • Your memories, photos, or any personal data (encrypted before it reaches the relay; we don’t have the key)

What we see

  • Daily, weekly, and monthly counts of how many households use Kin
  • How many Kin Servers are on the latest version

Being counted is your choice. Turn off Usage counting in Settings → Privacy on your Mac, and Kin works exactly the same. You just won’t be included in our counts.

The one record we keep that’s tied to you is your license: the email address you gave us to get your key, whether you asked for product news, when your Mac activated the key, and which version of our terms you agreed to. See the full Privacy Policy.

Every connection

Every connection Kin makes

Here’s each connection Kin makes beyond your home network, what it carries, and how to turn it off.

Our relay

When
While away-from-home access is on.
What it carries
Sealed traffic we can’t open. It also tells the relay that your Mac is connected, which version it runs, and whether it may be counted.
To turn it off
Settings → Privacy → Away-from-home access on your Mac.

Other families’ Macs

When
Only if you’re connected with another family, even while away-from-home access is off.
What it carries
Sealed, signed messages for the conversations you share with them, passed through our relay.
To turn it off
Disconnect from that family in Community.

Our licensing service

When
When you activate your key, and again if you reinstall Kin or move it to a new Mac.
What it carries
Your license key, a scrambled ID for your Mac (not its serial number), and which version of our terms you agreed to.
To turn it off
It’s needed to set up Kin.

Notifications

When
When something arrives for a phone that has notifications on.
What it carries
A sealed notification, which phone it’s for, when, and a short line to show if the phone can’t open it. It goes through our forwarding service to Apple.
To turn it off
Each phone decides for itself.

The update check

When
Every few minutes, while the check is on.
What it carries
A request for the public list of versions. Nothing about you.
To turn it off
Settings → Privacy → Check for updates on your Mac.

Web searches and the weather

When
When Kin looks something up for you, plus a couple of setup requests when Kin starts.
What it carries
What Kin searches for, sometimes in your own words, or, for the weather, the name of a place. No name or account.
To turn it off
For a child or teen, turn off Allow web access on their profile. There’s no switch for the whole household yet.

Link previews, from your phone

When
When you open the Links tab in a conversation.
What it carries
A request to each linked website for its title and picture. The site sees your phone’s internet address, as it would in a browser.
To turn it off
There’s no switch for this yet.

Model downloads

When
When you set up Kin, choose another model, or Kin starts and finds one missing.
What it carries
A plain file download. Nothing about you.
To turn it off
It only happens when Kin needs a model.
Technical details

For the technically curious

Stored data
Conversations, memories, messages and photos are encrypted with AES-256-GCM. Each person’s password unlocks their own data key through Argon2id. Private, shared and family data live in separate database files. Profiles, sign-in thumbnails and the memory search index are not encrypted, so turn on FileVault.
Password resets
While “Allow reset by other adults” is on, a copy of each adult’s data key is kept wrapped under the family key so a reset can restore it. Turning the switch off deletes that copy.
Connections
TLS, using a certificate made on your Mac. The app pins that certificate when you scan the pairing QR code, so nobody can swap it, including us.
The relay
Routes by the TLS server name (SNI) and never terminates TLS, so it only ever handles ciphertext.
Between families
Each Mac pins the other’s certificate, and every request is signed with Ed25519 and numbered. Message bodies are also sealed with keys for each conversation.
Notifications
Encrypted on the Mac with AES-256-GCM, using a key made on each phone, and decrypted on the phone.
License keys
Signed with Ed25519 and checked offline on your Mac.
Updates
Signed with our Apple Developer ID, notarized by Apple, and checked against our EdDSA update key.
No trackers
No analytics, advertising or crash-reporting code in the Kin app or in Kin Server.
What this page leaves out

Open about how, careful with the details

This page explains how Kin protects your family, not every detail of how it’s built. We leave out things like internal addresses and server settings, which would only help someone looking for trouble. We also keep the details of how Kin’s memory and models are tuned to ourselves. That’s our own work.

None of your privacy depends on those details staying secret. It depends on the keys, and only your family has them.

This page describes Kin Server build 36, from September 2026. We update it whenever a release changes what Kin connects to. Found a security problem? Email hello@meetkin.app and we’ll work with you on it.

Questions about how Kin works?

We’re happy to explain anything on this page in more detail.

Email hello@meetkin.app

Part of

Technology designed to serve you, not the algorithm.

Learn more.