Privacy Policy

Effective date: 17 June 2026

1. Who we are

Kindred ("we", "us", "our") is a platform accessible at www.kindredapp.ch, operated in Switzerland by:

Rudiger Michael
Route de Bâle 4, 2805 Soyhières (JU), Switzerland
UID: CHE-233.695.533

The data controller responsible for your personal data is Rudiger Michael. For privacy matters, contact us at: support@kindredapp.ch

2. What data we collect

We collect the following data when you use Kindred:

Account data: email address, alias, passkey credentials
Profile data: age, gender, sexual orientation, location (postal code), physical attributes, about text, relationship preferences
Photos: images you upload to your profile
Usage data: likes, passes, matches, messages, last active timestamp
Technical data: session tokens, IP address, browser type

3. Why we collect it

To operate the Kindred platform and provide our service
To match you with compatible people based on your preferences
To maintain community balance and fairness
To communicate with you (magic link sign-in, notifications)
To prevent abuse and ensure platform safety

4. Legal basis (GDPR & Swiss DSG)

We process your personal data on the following legal bases:

Contract performance: processing necessary to provide the service you signed up for
Legitimate interests: security, fraud prevention, platform integrity
Consent: for optional profile data you voluntarily provide

5. Who we share data with

We do not sell your personal data. We share data only with the service providers ("processors") needed to run Kindred, each bound by a data processing agreement:

Railway (infrastructure): our hosting provider, where your account, profile, and message data is stored and processed on servers in the EU
Cloudflare R2 (photo storage & backups): stores the photos you upload and encrypted database backups, in Cloudflare's EU jurisdiction
Resend (email): sends transactional emails such as magic-link sign-in
Stripe (payments): if you purchase tokens, your payment details (name, email, payment method) are processed by Stripe under its own privacy policy. Kindred never stores card numbers or bank details.

Some of these providers are based in the United States. Where your personal data is transferred outside Switzerland or the EEA, the transfer is protected by the European Commission's Standard Contractual Clauses (and equivalent safeguards under the Swiss FADP), as set out in our data processing agreement with each provider.

Other users see only the profile information you choose to make visible.

6. Data retention

Active accounts: retained while your account exists
Deleted accounts: personal data removed within 30 days
Messages: retained for the duration of the match, deleted when the match expires or is deleted
Session data: 30-day TTL, cleared on sign out

7. Your rights

Under GDPR and the Swiss DSG, you have the right to:

Access the personal data we hold about you
Correct inaccurate data
Delete your account and associated data
Export your data in a portable format
Object to or restrict processing

To exercise any of these rights, email support@kindredapp.ch.

8. Cookies and sessions

We use a single session cookie (kindred_session) to keep you signed in. This cookie is strictly necessary for the service to function. We do not use tracking cookies or third-party advertising cookies.

9. Security

We use HTTPS for all data in transit, httpOnly secure cookies, and server-side sessions. Passkey authentication (where available) provides phishing-resistant sign-in without passwords.

10. Changes to this policy

We may update this policy as the service evolves. Material changes will be communicated via email. The effective date at the top of this page reflects the latest version.

11. Governing law

This policy is governed by Swiss law. The competent courts are located in Switzerland.