This Privacy Policy explains what personal data KIND ("we", "the Platform") processes when you use a KIND page — as a recipient, a payer or a visitor — and the rights you have over that data.
1. Data we collect
- Account data: email address, display name and authentication credentials when you register.
- Page data: the story, category, location, links and images you publish on your KIND page.
- Payment metadata: amounts, currencies, timestamps, status and the messages attached to payments. Card and bank details are processed and stored by Stripe, never by KIND.
- Usage data: page views, device and browser information, and approximate location derived from IP address, used for analytics and security.
- Support data: correspondence when you contact us.
2. Why we process it
- To operate the Platform: creating pages, routing payments, showing analytics and providing support (performance of a contract).
- To keep the Platform secure: fraud and abuse prevention, audit logs (legitimate interest).
- To meet legal obligations: accounting, tax and anti-money-laundering requirements (legal obligation).
- To improve the Platform: aggregated, de-identified statistics (legitimate interest).
- Marketing emails are sent only with your consent, which you can withdraw at any time.
3. Who we share it with
- Stripe — payment processing and connected-account onboarding, under Stripe's own privacy policy.
- Hosting and database infrastructure providers that process data on our behalf under data-processing agreements.
- Authorities, where we are legally required to disclose.
- We do not sell personal data and do not share it with advertisers.
4. What is public
Your KIND page — display name, category, location, story and the Appreciation messages you choose to show — is public by design. Do not publish anything on your page that you do not want to be publicly visible. Payers are shown to recipients by the name or message they provide; a payer's email address is never published.
5. Retention
We keep account and page data while your account is active. Payment records are retained for the period required by accounting and tax law (typically five to ten years). You may delete your account at any time; we then delete or anonymise personal data except where retention is legally required.
6. International transfers
Some processors are located outside the EEA. Where personal data is transferred internationally, we rely on adequacy decisions or Standard Contractual Clauses approved by the European Commission.
7. Your rights
- Access, correct or export your personal data.
- Delete your data, or restrict or object to its processing.
- Withdraw consent where processing is based on consent.
- Lodge a complaint with your local data-protection authority.
Most rights can be exercised directly from Settings, or by emailing info@kind.us.org. We respond within one month.
8. Cookies and security
We use strictly necessary cookies and local storage for authentication and security, and minimal analytics storage. Data is encrypted in transit (TLS) and at rest, and access is limited to personnel who need it. No system is perfectly secure; if a breach affects your data we will notify you and the authorities as required by law.
9. Children and changes
KIND is not directed at children under 18 and we do not knowingly collect their data. We may update this Policy; the current version with its date is always published at this address, and material changes are notified in the app.