Draft for review. This policy accurately describes how the product works today, but it has not yet been reviewed by a qualified data-protection lawyer. Have counsel review and localise it before public launch.

Privacy Policy

Last updated: 6 July 2026

Kindrd is a relationship-first dating service for LGBTQ+ people. This policy explains what personal data we collect, why, how we protect it, and the rights you have over it. We take particular care with data about your gender identity and sexual orientation, which the law treats as special-category (sensitive) data.

Who we are

Kindrd ("we", "us") is the data controller for the personal data described here. For any privacy question, or to exercise your rights, contact us at the address published on our site. (Before launch, insert your legal entity name, registered address, and a dedicated privacy contact or Data Protection Officer where required.)

The data we collect

Account data: your email address, a securely hashed password (we never store your password in readable form), and your date of birth, which we use only to confirm you are 18 or older.
Special-category identity data: your gender identity, who you are seeking, your sexual orientation, and pronouns. We process this only with your explicit consent, given at sign-up, and only to match you and to show the parts of your profile you choose to make visible.
Profile content: your display name, bio, city (optional), interests, prompt answers, and photos you upload.
Activity data: likes and passes, matches, messages you send, profiles you view, and blocks or reports you make, so the service can function and stay safe.
Technical data: a single first-party session cookie to keep you signed in, and your IP address transiently for security and abuse-prevention (rate limiting). We do not use advertising or third-party tracking cookies.

Why we use it, and our legal bases

To provide the service (accounts, discovery, matching, messaging): performance of our contract with you.
To process your identity data for matching: your explicit consent, which you can withdraw at any time.
To keep people safe (moderation, blocking, reporting, anti-abuse): our legitimate interest in a safe community, and compliance with legal obligations.
To contact you about your account (verification, password reset, essential notices): performance of our contract.

How your data is protected

Data is encrypted in transit (HTTPS everywhere). Passwords are hashed with a strong, salted algorithm. Photos are kept in a private store and served only through short-lived signed links, never publicly listed. Access to production data is limited and server-side only; your identity data is never exposed to other users beyond the display fields and visibility you choose. We enforce a strict content-security policy and standard security headers.

Who we share it with

We do not sell your data and we do not share it for advertising. We use a small number of service providers (processors) strictly to run the service: a cloud database and file storage host, an email delivery provider (for verification and password-reset emails), and a rate-limiting service. Each processes data only on our instructions. Some providers may process data outside your country; where they do, appropriate safeguards apply.

How long we keep it

We keep your account data for as long as your account is active. When you delete your account, we permanently remove your personal data, including your photos, and anonymise or remove associated records; safety reports may be retained in de-identified form where we have a legal or safety reason to do so. Short-lived security tokens and stale non-essential signals are cleared automatically on a schedule.

Your rights

Wherever the law provides them, you can:

Access and export your data (Settings has a one-click download of everything we hold about you).
Correct your profile at any time from Edit profile.
Delete your account and data permanently from Settings.
Withdraw consent to identity-data processing (this means closing your account, since matching depends on it).
Object or restrict certain processing, and lodge a complaint with your local data-protection authority.

Age

Kindrd is strictly for adults aged 18 and over. We do not knowingly allow anyone under 18 to use the service.

Cookies

We use one essential first-party cookie to keep you signed in, and your browser's local storage to remember your light or dark theme. We do not use tracking or advertising cookies, so there is no consent banner to click through.

Changes to this policy

If we make material changes, we will update the date above and, where appropriate, notify you. Continued use after an update means you accept the revised policy.