Privacy Notice

Who is responsible

Kristian Fleming provides Kindred and acts as the data controller for personal information processed to provide this service. Paddle separately handles payment information as Merchant of Record under its own privacy notice.

Information and purposes

• Account information: email, optional display name and authentication information, used to create, secure and maintain your account.
• Reflection entries: moods, feeling tags, notes, dates and affirmations you choose to save, used to sync your entries and display your personal journey. These may reveal sensitive wellbeing information; include only what you want stored.
• Technical information: IP address, browser/device information and error or security logs processed by hosting and authentication providers to operate, diagnose and protect the service.
• When paid offers become available: purchase and membership identifiers, status and access periods, used to deliver purchased content and manage access. Card information is collected by Paddle, not stored in your check-in entries.

Basis for processing

Where applicable law requires a legal basis, account and access data are processed to perform our agreement with you; essential security and troubleshooting rely on legitimate interests; required records rely on legal obligations. You choose whether to submit optional reflection information. Where consent is legally required for sensitive data, it must be obtained before that processing. Do not submit clinical records or information about other people.

Sharing and international processing

We use Lovable Cloud and its hosting and authentication service providers to operate the app. Sign-in providers process information when you choose their sign-in option. Paddle receives necessary customer and order information for sales, subscription management, payments, tax compliance and invoicing. We may disclose necessary information to professional legal or accounting advisers, or authorities where required by law. Providers may process data outside your country, subject to applicable safeguards. We do not sell your reflection entries or make them publicly visible.

Retention

Account and reflection information is retained while your account is active to provide your synced history. On a valid deletion request, information no longer needed is deleted or anonymised, subject to legal, security and backup retention requirements. Purchase records may be retained as required for tax, accounting and dispute obligations. Technical records are kept only as long as needed for operational and security purposes.

Your choices and rights

You may have rights to access, correct or delete your information, restrict or object to processing, receive portable copies, and withdraw consent where processing relies on consent. Rights and exceptions depend on applicable law. You may complain to your local privacy regulator, including the Office of the Australian Information Commissioner where applicable. Withdrawing optional consent does not affect processing already lawfully performed.

For privacy questions or requests, contact Kristian Fleming at Kristian.mckee1997@gmail.com.

Security and browser storage

We use encrypted connections and account-scoped access controls to help protect your data; no service can guarantee absolute security. Essential browser storage keeps you signed in and supports app operation. External sign-in and payment services may use their own cookies and storage. No advertising or optional marketing cookies are intentionally added by the current app. You can clear browser storage or manage cookies in your browser; doing so may sign you out. Optional tracking, if introduced, will require an updated notice and any legally required consent.