Privacy Policy

We collect information that you provide directly to us when registering for and using the Kyndred application, including:

Account Information:

• Email address and password (password stored in encrypted form only)
• First name, last name, birth name (optional)
• Date of birth, age, and gender

Profile Information:

• Profile pictures, biography, and other optional personal details

Family and Content Data:

• Family memberships, guardian status, and family roles
• Posts, photos, comments, reactions, events, and albums you create or contribute to
• Memorial tributes, candle dedications, and memorial biographical content

Event and Guest Data:

• Event participation, RSVP status, and attendance records
• Guest invitation records (individual and family-level) for Events and Memorials
• Event discussion posts and photo contributions

Usage and Activity Data:

• Last active timestamps and online/offline status
• Features accessed, interactions with content, and time spent on the App
• Device information and push notification tokens

Security and Technical Data:

• IP address and browser/device user-agent, recorded when you register and each time you log in. This is stored in a restricted, non-user-facing security log and is used solely for fraud prevention, account security, and legal compliance (for example, responding to lawful requests from authorities).

• The date and time you accepted the Guardian Agreement
• The date and time you confirmed your age (18+)
• Your stated date of birth at the time of acceptance (a snapshot that is preserved even if you later change your date of birth in your profile)
• The reason for your Guardian promotion (e.g., family creator, no guardians available, approved by existing guardian)
• Records of your Guardian approval and denial decisions
• Your Guardian status history across all Families

To protect against age verification fraud, we maintain an audit log of all changes to your date of birth. When you change your date of birth in your profile, we record:

• Your previous date of birth
• Your new date of birth
• The date and time of the change

This audit log is not accessible to you or other users. It is used solely by Kyndred for fraud detection, legal compliance, and dispute resolution. For example, if a user changes their date of birth to bypass age requirements for Guardian roles, this record serves as evidence of intentional misrepresentation.

Our App is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided us with personal information, we will delete such information immediately.

For users between 13 and 17 years of age, certain features are restricted. Specifically, users under 18 cannot create Families or become Guardians. We collect date of birth information to verify age eligibility for these features.

We use the information we collect to:

• Provide, maintain, and improve the Service
• Create and manage your account
• Verify age eligibility for restricted features (Family creation, Guardian roles)
• Detect and prevent fraud, including age misrepresentation
• Process transactions and send related information
• Send technical notices, updates, security alerts, and administrative messages
• Send push notifications about Family activity, Guardian applications, and other events (you can control notification preferences in Settings)
• Monitor and analyze trends, usage, and activities to improve the Service
• Detect, investigate, and prevent fraudulent, unauthorized, or illegal activities
• Resolve disputes and enforce our Terms of Service

We track your online status and last active time to provide presence features to other users. This data is collected regardless of your privacy settings. However:

• Your privacy settings control what other users can SEE about your online status
• We always track actual activity internally for security, fraud prevention, and service improvement purposes
• Activity data (online/offline status) is updated periodically while you use the App and when the App transitions between foreground and background

We may format or normalize certain information you provide to ensure consistency:

• Names are capitalized according to standard conventions
• Birth dates are stored in a standard format
• Special characters in names (hyphens, apostrophes) are preserved; other special characters may be removed

We do not sell, rent, or trade your personal information to third parties for marketing purposes. We share your information only as follows:

• With other Family members: Your name, profile picture, posts, and activity within shared Families are visible to other members of those Families
• With service providers: We use trusted third-party service providers who process data on our behalf under strict contractual obligations. These providers are bound by data processing agreements and may only use your data as instructed by us.
• For legal compliance: In response to a subpoena, court order, or other legal process, or when we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Kyndred, our users, or the public
• In a business transfer: In connection with a merger, acquisition, bankruptcy, or sale of assets, your information may be transferred. You will be notified of any such change.

When you make a purchase through Kyndred, your payment is processed by third-party providers (such as PayPal). We store:

• Transaction reference ID, purchase date, amount, and type
• Expiration date for subscription purchases
• Optional messages included with donations

Purchase history is retained indefinitely for accounting, tax compliance, and customer support, even if you delete your account.

We retain different types of data for different periods:

Retained until account deletion:

• Profile information, preferences, and settings

Retained after account deletion (anonymized):

• Family contributions (posts, photos, comments) - attributed to first name only
• Family membership records (for content attribution and history)
• A private copy of your profile details (last name, biography, profile picture, birth name, searchability setting), together with a one-way hash of your email address, kept so that your account can be restored if you return. This copy is not visible to other users and is erased as soon as you restore your account. If you would prefer it erased instead of kept, contact support

Retained permanently:

• Guardian acceptance records (date, time, DOB snapshot)
• Age verification timestamps
• Date of birth change audit logs
• Content moderation history
• Purchase and transaction records

Family deletion retention:

• When a Family is deleted, all Family content is retained for 90 days before permanent deletion
• Former members are notified and may contact support to request reinstatement within 90 days

Memorial deletion retention:

• When a Memorial is deleted, it enters a 1-year archive period before permanent deletion
• During the archive period, the Memorial creator may contact support to request reinstatement

Event and guest invitation data:

• Event attendance records, RSVP history, and discussion posts are retained for the lifetime of the Event
• Guest invitation records (accepted, declined, revoked) are retained for audit and access control purposes

Security log (IP address / user-agent):

• IP address and user-agent records are kept in a restricted security log for up to 24 months from the last time each address was seen, then automatically deleted
• This log is not accessible to you or other users and is used only for security and legal compliance

When you request account deletion:

• 30-day grace period: You can cancel deletion by logging back in
• After 30 days: Personal data is anonymized. Your last name, biography, profile picture, and birth name are removed, and your profile is no longer searchable
• First name is retained for content attribution within Families
• Anonymization is not erasure: a private copy of the removed profile details, together with a one-way hash of your email address, is retained so that your account can be restored if you return to Kyndred. There is no time limit on this, and both are erased as soon as you restore
• Signing in again with the same email address restores your profile details. It does not restore Family memberships — you must be invited back or apply to rejoin
• Family memberships are deactivated and any Guardian roles are removed, but membership records are preserved for content attribution
• Any invitations you sent or received that are still pending are cancelled
• Guardian verification data and audit logs are never deleted (legal compliance)

We implement appropriate technical and organizational security measures to protect your personal information, including:

• Encryption of data in transit and at rest
• Row-Level Security (RLS) policies to ensure users can only access authorized data
• Audit tables with restricted access (no user-facing access to audit logs)
• Regular security assessments

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to retention requirements described in Section 10)
• Restriction: Request restriction of processing under certain circumstances
• Data Portability: Request a copy of your data in a structured, commonly used format
• Notification Preferences: Control which push notifications you receive through App settings
• Online Status Privacy: Control whether other users can see your online status

To exercise these rights, contact us at support@kyndred.net.

We use trusted third-party service providers in the following categories to operate and improve the Service. These providers process your data on our behalf under strict data processing agreements:

• Cloud infrastructure and database hosting providers
• Authentication and identity verification services
• Push notification delivery services
• Error monitoring and application performance services
• Caching and content delivery services
• Payment processing services (where such features are offered)
• Analytics services

These service providers are contractually prohibited from using your data for any purpose other than providing services to Kyndred. For a current list of specific service providers, you may contact us at support@kyndred.net.

Kyndred is operated from British Columbia, Canada. If you access the Service from outside Canada, your information may be transferred to, stored, and processed in Canada and other countries where our service providers operate.

By using the Service, you consent to the transfer of your information to Canada and other jurisdictions that may have different data protection laws than your country of residence. We take steps to ensure that your data receives an adequate level of protection wherever it is processed.

Canada (PIPEDA / BC PIPA):

You have the right to access, correct, and challenge the accuracy of your personal information. You may withdraw consent for certain processing activities, subject to legal or contractual restrictions. To file a complaint, you may contact the Office of the Privacy Commissioner of Canada or the BC Office of the Information and Privacy Commissioner.

European Economic Area (GDPR):

If you are in the EEA, you have additional rights including: the right to erasure ("right to be forgotten"), the right to restrict processing, the right to data portability, and the right to object to processing. Our legal basis for processing your data is consent (which you provide at registration) and legitimate interest (for security and fraud prevention). To exercise your rights, contact us at support@kyndred.net.

California (CCPA/CPRA):

If you are a California resident, you have the right to know what personal information we collect, the right to delete your personal information, the right to opt out of the sale of personal information (we do not sell your data), and the right to non-discrimination for exercising your rights.

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy in the App and updating the "Last Updated" date. For significant changes, we will provide prominent notice through the App or via email. Continued use of the Service after changes constitutes acceptance of the updated policy.

This Privacy Policy is governed by the laws of the Province of British Columbia and the federal laws of Canada applicable therein. Nothing in this policy limits any rights you may have under the mandatory privacy or data protection laws of your jurisdiction.

If you have any questions or concerns about this Privacy Policy, your data, or your rights, please contact us at support@kyndred.net.