Privacy policy

1. Who is responsible for your data

Mobiflow International FZ-LLC, Ras Al Khaimah Economic Zone (RAKEZ), Ras Al Khaimah, United Arab Emirates (“KINDYZ”, “we” or “us”), is the controller of the data collected through the KINDYZ app (iOS and Android) and the website https://kindyz.com.

For any question or request about your data: support@kindyz.com. We may ask for proportionate proof of identity to protect your account.

2. The data we process

• Account: your phone number (your login identifier), date of birth, first name or nickname, language, and your email if you add one or sign in with Google.
• Profile: your photos, gender, bio, interests, prompt answers, city, matching preferences and anything else you choose to add.
• Sensitive data, only with your explicit consent: your neurotype. Your communication limits and sensory comfort are optional.
• Location: your precise position if you allow it, otherwise the city you enter. We keep only your last known position, never a movement history.
• Activity: likes, matches, messages, posts, comments, outings, reports, blocks and your daily energy if you share it.
• Guardian: the name and phone number of the trusted person you invite, and the link between your accounts.
• Verification: the selfies you send to get your profile verified.
• Purchases: the plan you chose and the status and history of your subscriptions and purchases. Payment is handled by Apple, Google or Stripe; we never see your card details.
• Technical data: your device’s notification identifier, security logs (IP address, date, device type) and time spent in each main section of the app.
• Website waitlist: your number, adult confirmation, language and, if you provide them, your first name, email, city, intent, limits-exercise answers (with separate consent) and referral code.

3. Why we use it

• Creating and securing your account and verifying your number by SMS: necessary for our contract with you (our terms of use).
• Suggesting compatible profiles, matches and outings, and running messaging and the community: necessary for the contract.
• Taking your neurotype into account in suggestions: your explicit consent, which you can withdraw at any time.
• Using your precise location: your consent, given through your phone’s permission and withdrawable at any time.
• Preventing abuse, moderating content, handling reports and protecting members: our legitimate interest in keeping the community safe.
• Managing KINDYZ+ and purchases: necessary for the contract, and our accounting obligations.
• Sending you notifications: your consent, adjustable in the app and on your phone.
• Improving the service from aggregate statistics: our legitimate interest.
• Responding to authorities when the law requires it: our legal obligations.

We do not sell your data and we do not use it for targeted advertising.

4. Your neurotype and sensitive data

Your neurotype is processed only with your explicit consent, given through a checkbox separate from accepting the terms of use. It is never required: no diagnosis is asked for, and “Being diagnosed” or “I don’t know yet” are full answers.

Refusing or withdrawing consent never counts against you: your profile is not shown less or ranked lower. You can withdraw consent in Settings → Data & consent; your neurotype is then erased.

Other members only see your neurotype if you choose to show it.

5. Suggestions and automated decisions

The order of the profiles and outings suggested to you is calculated automatically from your interests, communication limits, preferences, distance and, if you agreed, your neurotype. This calculation has no legal effect on you.

You can object to this profiling in Settings → Matching & profiling: personalised discovery is then suspended.

6. Moderation and safety

Uploaded photos are analysed automatically to detect nudity or explicit content, and to check that a profile photo shows a face. This only detects that a face is present: it recognises no one and creates no biometric template.

Verification selfies and reports are reviewed by our team. We may remove content or suspend an account that breaks our terms of use.

7. What others can see

• Other members see your profile according to your visibility settings, your city, your country and a rounded distance — never your exact coordinates.
• Your Guardian sees your activity and daily energy, read-only, and never your private messages. You can remove their access at any time.

8. Who we share your data with

We use service providers who act on our behalf, under contract, and may not use your data for their own purposes:

• Amazon Web Services: server hosting, photo storage, automated image analysis.
• MongoDB Atlas and Redis: database and technical cache.
• Vercel: website hosting.
• Twilio: verification text messages.
• Resend: emails.
• Expo, Apple and Google: delivering notifications to your phone.
• Google: Sign in with Google, if you choose it.
• Apple (App Store), Google (Google Play) and Stripe: payments.

We may also disclose data when the law requires it, or to protect someone in danger.

9. Transfers outside your country

KINDYZ is based in the United Arab Emirates and some of our providers process data in other countries, including the United States. When data leaves the European Economic Area, the United Kingdom or another country that regulates such transfers, we rely on recognised safeguards such as the European Commission’s standard contractual clauses.

10. How long we keep it

• Active account: for as long as you use KINDYZ.
• Inactive account: it may be deleted after 24 months without a login.
• After you delete your account: your profile, photos, messages, matches, posts and sensitive data are erased from our systems. Backup copies are erased as they rotate.
• SMS verification code: 10 minutes.
• Security and audit logs: up to 2 years.
• Reports and moderation decisions: as long as needed to protect members and handle any dispute.
• Purchase history: as long as accounting and tax rules require.
• Waitlist: until your access opens or you ask us to delete it.

11. Your rights

You can access, correct and erase your data, receive it in a reusable format, object to profiling, ask us to restrict processing and withdraw your consent at any time.

• Settings → Export my data: a complete copy of your data.
• Settings → Data & consent: your consent for your neurotype.
• Settings → Matching & profiling: objecting to profiling.
• Settings → Delete my account, or the page https://kindyz.com/en/suppression-compte.

For any other request, write to support@kindyz.com. We answer within one month. You can also complain to the data protection authority of the country where you live, such as the ICO in the United Kingdom or the CNIL in France.

12. Adults only

KINDYZ is only for people aged 18 and over. If we learn that an account belongs to a minor, we delete it. You can tell us from the app or by email.

13. Security

Connections are encrypted (HTTPS), login tokens are kept in your phone’s secure storage, data is encrypted at rest by our hosts, and our team’s access is limited by role and logged.

No system is perfect. If a data breach puts you at risk, we will tell you and inform the authorities as the law requires.

14. On kindyz.com

The website keeps your language, display country, calm mode and limits-exercise answers in your browser. You can clear these preferences from your browser. It uses no advertising cookies.

We use Vercel Web Analytics to count visits and page views without analytics cookies. We remove query parameters and fragments from page addresses before sending them. Measurement data includes pages visited, the referring website and general browser, device and country information. We do not send form answers to this tool.

15. Changes

If this policy changes in a significant way, we will tell you in the app or on the website before the change applies. The date of the current version is shown at the top of this page.

16. Contact us

Mobiflow International FZ-LLC — Ras Al Khaimah Economic Zone (RAKEZ), Ras Al Khaimah, United Arab Emirates. Email: support@kindyz.com.