Privacy Notice — Kindward

1. Who we are

This Privacy Notice is issued by Kindward Technology Ltd ("Kindward", "we", "us"), the operator of the Kindward service ("Service"). Kindward Technology Ltd is the data controller for personal data processed in connection with the Service. You can reach us at hello@kindward.co.

2. Personal data we collect

Account & contact data: name, email address, login credentials.
Card content: the messages, recipient names, and details you submit to generate cards.
Usage & telemetry: pages visited, features used, reactions, IP address, device and browser identifiers.
Support data: messages and attachments you send to support.
Payment data: handled by our reseller Paddle — we do not store full payment card details.

3. How we use your data and our legal bases

Providing the Service and generating your cards — performance of a contract.
Account creation, authentication, and customer support — performance of a contract.
Security, fraud prevention, and abuse detection — legitimate interests.
Product analytics and improvement — legitimate interests.
Marketing communications (where applicable) — consent, which you may withdraw at any time.
Compliance with legal obligations — legal obligation.

4. Who we share data with

Paddle.com Market Ltd — our Merchant of Record, who processes payments, manages subscriptions, handles tax compliance, and issues invoices.
Hosting and infrastructure providers — to host the Service and store data.
Analytics and error-monitoring providers — to operate and improve the Service.
AI model providers — to generate the words and designs that make up your card. Card content is sent to these providers strictly to produce your output.
Professional advisers — legal, accounting, and tax advisers where necessary.
Authorities — where required by law or to protect our rights.

5. International transfers

Some recipients are located outside the UK and EEA. Where this is the case we rely on appropriate safeguards such as the UK International Data Transfer Agreement, EU Standard Contractual Clauses, or an adequacy decision.

6. Data retention

We keep personal data only for as long as needed for the purposes set out above, then delete or anonymise it. Card content is retained while your card link remains active and for a reasonable period afterwards to support recovery and abuse investigation.

7. Your rights

Depending on your location you may have rights to access, rectify, erase, restrict, port, or object to our processing of your personal data, and to withdraw consent. You also have the right to lodge a complaint with your local data protection authority. We respond to verified requests within one month. Contact us at hello@kindward.co.

8. Security

We use appropriate technical and organisational measures — including encryption in transit, access controls, and least-privilege practices — to protect your personal data.

9. Cookies

We use strictly necessary cookies and local storage to operate the Service (for example to keep you signed in and remember your reactions). We may also use limited analytics cookies to understand usage. You can manage cookies in your browser settings.

10. Changes

We may update this Privacy Notice from time to time. Material changes will be notified through the Service.