Privacy Policy

Kindo ("Kindo", "we", "us") operates the Kindo platform that lets friends and family agree, track, and settle informal loans between themselves. We are the data controller for the personal information processed in connection with your account on this platform.

For any privacy question, contact privacy@kinfund.app.

We only collect what we need to run the service:

• Account information — your name, email address, password (stored hashed by our authentication provider), preferred currency, and country.
• Profile information — bio, avatar URL, ratings you receive from people you have transacted with.
• Loan information — loan requests, offers, accepted loans, payment records, and any messages or notes you attach to them.
• Network information — connection requests, accepted contacts, invites you send by email.
• Technical information — IP address, device and browser metadata, basic usage logs, and cookies necessary for authentication and security.

We do not collect bank details, perform credit checks, or run identity verification on our users. Money transfers between users happen outside our platform unless an online payment processor is explicitly used.

• To create and operate your account and authenticate you securely.
• To show your loan requests, offers, loans, and payments to the other party of each agreement.
• To calculate totals, exposure, return vs. a savings benchmark, and ratings — all in your selected currency.
• To send essential service emails (sign-up confirmation, password resets, key activity).
• To prevent fraud, abuse, and security incidents.
• To comply with applicable laws and respond to lawful requests.

We do not sell your data. We do not show third-party advertising. We do not use your loan data for profiling outside the product.

• You— the other party of each loan, offer, request, or connection sees only the data relevant to that interaction (their counterparty's name, profile, and the specific terms).
• Service providers — Supabase (database and authentication), Vercel (hosting), and an email delivery provider for transactional emails. These are bound by data-processing agreements.
• Payment processors — if you choose online settlement (e.g. Stripe), we share only the data necessary to complete that payment.
• Authorities — when legally required by a valid court order or regulator.

Your data may be processed in regions where our hosting and infrastructure providers operate. Where required, we rely on Standard Contractual Clauses or equivalent safeguards.

Account and loan records are kept while your account is active and for a reasonable period afterwards to honour audit and legal obligations. You can request deletion of your account at any time — see "Your rights" below. Loan records linked to other users may be retained in anonymised form so their counterparties keep an accurate ledger.

We use a small number of cookies that are strictly necessary for authentication, session security, and remembering your preferences. We do not use advertising or tracking cookies.

Depending on where you live, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your account and associated personal data.
• Object to or restrict certain processing.
• Receive a copy of your data in a portable format.
• Lodge a complaint with your local data-protection authority.

Email privacy@kinfund.app to exercise any of these. We respond within 30 days.

Passwords are hashed by our authentication provider, traffic is encrypted in transit, and our database enforces row-level security so that one user cannot read another user's loans. No system is perfectly secure — please use a strong, unique password and contact us immediately if you suspect any compromise.

Kindo is not intended for anyone under 18 (or the age of majority in your country). We do not knowingly collect data from children.

We may update this policy as Kindo evolves. Material changes will be announced in-app or by email before they take effect. The "Last updated" date at the top reflects the current version.