Privacy Policy

1. Data Controller

KINR is the data controller for personal data processed through the website kinr.app, the waitlist, and the KINR mobile application.

Contact: contact@kinr.app

2. Data We Collect

Depending on your usage, we may collect:

• Identity and profile data: email, display name, username, bio, profile photo (optional), spoken languages, interests, country of origin
• Waitlist data: city, selected interests, host preference
• Usage data: created/joined KINRS, reliability score, reports and blocks, account creation date and last activity
• Communication data: messages shared in KINR chats
• Location data: geolocation (with permission) to show nearby KINRS
• Notification data: push token for service notifications
• Technical data: device type, OS, anonymized technical identifiers, user-agent, and hashed IP for security

3. Why We Process Data

We process personal data to:

• Create and manage user accounts
• Enable KINR discovery, participation, and chat
• Send transactional and service notifications
• Compute and maintain reliability score
• Prevent abuse and moderate content and behavior
• Analyze and improve the product experience

4. Legal Bases (GDPR)

• Performance of a contract (Article 6.1.b) for core app and waitlist features
• Legitimate interests (Article 6.1.f) for moderation, anti-fraud, and service improvement
• Consent (Article 6.1.a) for geolocation and push notifications

5. Processors and Third Parties

We use vetted providers acting as processors, including:

• Supabase (database and authentication)
• Vercel (hosting and infrastructure)
• Resend (transactional emails)
• PostHog (analytics, if enabled)
• Google Maps Platform (mapping and geocoding)
• Expo / EAS (push notification infrastructure)

We do not sell personal data.

6. Retention

• Account data is kept while your account is active
• If you delete your account, your data is retained for up to 30 days, then permanently deleted
• After this 30-day retention period, deletion is irreversible and data cannot be recovered
• Moderation-related records may be kept up to 12 months for safety purposes

7. Geolocation

Geolocation is used to display nearby KINRS, support KINR creation, and send nearby KINR notifications. It is only used with explicit consent and can be disabled anytime in your device settings.

8. Your Rights

Under GDPR, you may request:

• Access to your personal data
• Correction of inaccurate or incomplete data
• Deletion of your data
• Restriction or objection to processing
• Portability of your data
• Withdrawal of consent at any time

To exercise your rights, contact contact@kinr.app. You can also lodge a complaint with the CNIL: www.cnil.fr.

9. International Transfers

Some processors may process data outside your country. Where required, we implement appropriate safeguards for international transfers.

10. Security

We apply technical and organizational security measures, including:

• Encryption in transit (HTTPS/TLS)
• Secure authentication and access controls
• Data minimization and anti-abuse protections
• Principle of least privilege and role-based restrictions

11. Changes to this Policy

We may update this Privacy Policy from time to time. Material updates may be notified via website and/or app. The latest version is always available on this page.