Privacy Policy

1. Information We Collect

1.1 Information You Provide

When you create an account and use KindredAccess, you provide:

Category	Information Collected
Account Information	Email address, username, password
Profile Information	Display name, age, location, bio, photos
Preferences	Connection types, accessibility needs, communication style, energy levels
Sensitive Information	Accessibility needs, health-related preferences, identity information (collected only with your explicit consent)
Communications	Messages, chat history, reports

1.2 Automatically Collected Information

We automatically collect:

• Device Information: IP address, browser type, device type, operating system
• Usage Data: Pages visited, features used, time spent, interactions
• Location Data: Approximate location based on IP address (if you enable precise location, we collect that too)
• Cookies: Session cookies, preference cookies, analytics cookies

2. Sensitive Personal Data & Consent

2.1 Legal Basis for Processing

We process sensitive personal data only with your explicit consent, which you provide when:

• Creating your profile and selecting accessibility needs or health-related preferences
• Answering compatibility questions about personal characteristics
• Voluntarily sharing information in your bio or messages

2.2 Purpose Limitation

We use sensitive data only for:

• Matching you with compatible users who share or accommodate your needs
• Displaying relevant information on your profile (as you choose)
• Improving accessibility features of the platform

2.3 Withdrawing Consent

You can withdraw consent for sensitive data processing at any time by:

• Editing your profile to remove accessibility needs or preferences
• Contacting us at privacy@kindredaccess.com to request removal
• Deleting your account entirely

Withdrawal does not affect the lawfulness of processing before withdrawal.

3. How We Use Your Information

3.1 Core Services

We use your information to:

• Create and maintain your account
• Match you with compatible users
• Display your profile to potential connections
• Enable messaging and communication
• Provide personalized recommendations

2.2 Safety and Security

• Verify accounts and prevent fraud
• Investigate and prevent violations of our Terms
• Respond to reports and safety concerns
• Protect against spam and abuse
• Maintain platform security

2.3 Communication

• Send you service updates and notifications
• Respond to your support requests
• Send important account information
• Notify you of matches and messages (if enabled)

2.4 Improvement and Analytics

• Analyze platform usage to improve features
• Understand user behavior and preferences
• Test new features and functionality
• Conduct research (aggregated, anonymized data only)

3. How We Share Your Information

3.1 With Other Users

Your profile information is visible to other users based on your privacy settings:

• Public Information: Display name, age, location (city/state), photos, bio, looking for, accessibility needs
• Compatibility Data: Match percentage and compatibility breakdown
• Activity Status: Current availability status (if you enable it)

4.2 Service Providers (Data Processors)

We share information with trusted third-party service providers who help us operate the platform. All processors are contractually bound by Data Processing Agreements (DPAs) that ensure they handle your data securely and only as instructed:

Service Type	Provider(s)	Data Shared
Cloud Hosting	DigitalOcean	All platform data (encrypted at rest)
Email Delivery	SMTP provider (configured per deployment)	Email addresses, notification content
Database	PostgreSQL (self-hosted on DigitalOcean)	All user data
File Storage	DigitalOcean Spaces / local storage	Profile photos and uploaded images

Note on AI/LLM Services: As of this policy date, KindredAccess does not use AI or large language model services to process user data. If we introduce such features in the future, we will update this policy and obtain appropriate consent.

4.3 Legal Requirements

We may disclose your information if required by law or to:

• Comply with legal process (subpoenas, court orders)
• Protect our rights and property
• Prevent fraud or abuse
• Protect user safety in emergencies

4.4 Business Transfers

If KindredAccess is acquired or merged, your information may be transferred to the new owner.

5. Data Retention

We retain your information according to specific schedules. For detailed retention periods by data type, please see our Data Retention Policy.

5.1 Summary of Retention Periods

Data Type	Retention Period
Account & Profile Data	Until account deletion
Messages & Chat History	Until account deletion or unmatch
Profile Views	90 days
Reports (safety records)	1 year after resolution
Server Logs	30 days
Deleted Account Data	Permanently deleted within 30 days

5.2 Deletion Requests

You can request deletion of your data at any time:

• Self-Service: Delete your account through Account Settings
• Data Export: Download your data before deletion via Export Data
• Email Request: Contact privacy@kindredaccess.com for assistance

6. Your Privacy Rights

6.1 Access and Control

You have the right to:

• Access: Request a copy of your personal data — Export your data
• Correction: Update inaccurate information — Edit profile
• Deletion: Request account and data deletion — Delete account
• Portability: Receive your data in a portable format (JSON)
• Opt-Out: Unsubscribe from marketing emails
• Withdraw Consent: Remove sensitive data processing consent at any time

6.2 Privacy Settings

Control your privacy through your settings:

• Who can see your profile
• Who can message you
• What information is visible
• Notification preferences
• Location sharing options

6.3 Exercising Your Rights

To exercise any of these rights, you can:

• Use the self-service options linked above
• Email us at privacy@kindredaccess.com with "Data Request" in the subject line
• We will respond to all requests within 30 days

7. Data Security

We protect your information through:

• Encryption: HTTPS encryption for all connections
• Password Security: Encrypted password storage
• Access Controls: Limited employee access to personal data
• Security Monitoring: Regular security audits and monitoring
• Secure Hosting: Industry-standard secure hosting infrastructure

8. Cookies and Tracking

8.1 Types of Cookies

• Essential Cookies: Required for the platform to function (login sessions, CSRF protection)
• Preference Cookies: Remember your settings (accessibility preferences, dark mode)

Note: We currently do not use analytics or tracking cookies. If we add analytics in the future, we will update this policy and provide opt-out controls.

8.2 Managing Cookies

You can control cookies through your browser settings. Note that disabling essential cookies may prevent you from logging in or using core features.

9. Children's Privacy

KindredAccess is strictly for users 18 years of age and older. We do not knowingly collect information from anyone under 18.

• Users must confirm they are 18+ during account registration
• If we discover that a user is under 18, we will immediately terminate their account and delete all associated data
• If you believe a user is underage, please report them using our reporting tools

10. International Users & Data Transfers

KindredAccess is operated from the United States. If you access the platform from outside the United States:

• Your information will be transferred to and processed in the United States
• The United States may have different data protection laws than your country

10.1 For EU/EEA Users

We rely on the following legal mechanisms for international data transfers:

• Your Explicit Consent: You consent to international transfer when you create an account and agree to this Privacy Policy
• Contractual Necessity: Transfer is necessary to provide the services you requested
• Standard Contractual Clauses: Where applicable, we use EU-approved SCCs with our data processors

10.2 Your Additional Rights (EU/EEA)

If you are in the EU/EEA, you have the right to lodge a complaint with your local data protection authority if you believe we have violated your privacy rights.

11. California Privacy Rights (CCPA/CPRA)

California residents have additional rights under CCPA/CPRA:

• Right to Know: What personal information is collected, used, and shared
• Right to Delete: Request deletion of your personal information
• Right to Correct: Request correction of inaccurate personal information
• Right to Opt-Out of Sale: We do not sell your personal information
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights
• Right to Limit Use of Sensitive Information: Control how sensitive personal information is used

To exercise these rights, email privacy@kindredaccess.com with "California Privacy Request" in the subject line.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the platform. Your continued use after changes constitutes acceptance.

13. Contact Us

14. Additional Resources

• Terms of Service
• Data Retention Policy
• Community Guidelines
• Accessibility Information