Privacy notice

The person below operates KinBee and is the controller of your personal data. Use this email for privacy requests and questions.

Account data includes your email, password hash, public username, language, time zone, notification preferences, account status and activity timestamps. We use it to provide login, verification, password resets and service notifications. An email and password are required to register; a public username, town and at least one spoken language are required to publish a profile. Other profile fields are optional.

We process the profile details you choose to provide, such as photos, interests, activities, languages, birth date, gender, description and visibility settings, to show your profile and find compatible members. Town coordinates are used for distance matching. We also store favorites, seen profiles, messages, discussion posts, participation and read state to provide those features. These service functions rely on Article 6(1)(b) GDPR (providing the service you request).

For security and moderation, we process IP addresses, request and error logs, login attempts, blocks, reports, reported content, staff notes and moderation records. Reports may include information submitted about you by other members. Our legitimate interests are preventing abuse, protecting members, keeping the service reliable and handling disputes (Article 6(1)(f) GDPR). Where a legal obligation requires processing or disclosure, Article 6(1)(c) GDPR applies.

Do not upload other people’s private information without permission.

Other members see profile information according to your visibility settings; existing conversation partners can retain access to your profile even when it is hidden from discovery. Your email, password hash, full birth date and stored coordinates are not shown on member profiles. Discussion participants see posts and shared profile or activity snapshots; recipients see your messages. Blocking limits further access and contact.

Messages are stored on the server and are not end-to-end encrypted. Authorized staff can access account information and relevant content to operate the service and investigate reports. Information may be disclosed to authorities when legally required.

Discovery uses profile fields, preferences, distance and shared interests to filter and rank suggestions. KinBee does not make solely automated decisions with legal or similarly significant effects about you.

Hetzner Online GmbH (Germany) hosts the VPS, including the application, database and uploaded photos. Scaleway SAS (France) delivers transactional emails and receives recipient email addresses and email content. Your chosen email provider also receives those messages; depending on that provider, delivery may involve processing outside the European Economic Area.

Cloudflare provides DNS only. Website traffic and member content are not routed through Cloudflare’s proxy in this setup. DNS requests are also subject to your DNS resolver’s and Cloudflare’s processing.

When you search for a town, the search text and language are sent from our server to Nominatim, operated by the OpenStreetMap Foundation (United Kingdom). If you press ‘Use my current location’ and allow browser location access, device coordinates reach our server and are rounded to two decimal places before the external lookup. The provider sees our server’s IP address, not your account email or username. You can enter a town instead; do not search for your home address. Lookup results are cached for 24 hours. The UK is covered by an EU adequacy decision.

Provider information: Hetzner, Scaleway, Cloudflare, OpenStreetMap Foundation.

KinBee uses sessionid for login (normally up to two weeks) and csrftoken to protect forms (up to one year). Choosing a language saves NEXT_LOCALE for one year. Choosing a theme saves kinbee-theme in local storage until removed. Temporary navigation state is stored in session storage for the current browser tab. These support the service and preferences you request; you can clear them in your browser, which may sign you out or reset preferences.

This setup uses no advertising cookies or visitor analytics. We do not sell your personal data.

Account and profile data is retained while your account exists. The scheduled cleanup removes unverified registrations after 14 days from registration. Verified accounts still without a profile become eligible after 180 days from registration and a delivered reminder, subject to the next cleanup run.

Deleting your account removes the live profile and profile photos, clears your public username and replaces your email with a deletion identifier. Messages, discussion posts, previously shared snapshots and moderation or audit records are not automatically erased. Conversation history is retained to preserve exchanges for their participants; safety records are retained while needed to investigate incidents, enforce sanctions or handle legal claims. Contact us to request erasure of remaining personal information; we consider applicable duties and other people’s rights.

Technical logs remain until removed by log rotation; incident evidence may be kept while an investigation or related claim requires it. Backup copies can outlast deletion in the live system until they are overwritten or removed in the backup rotation. Backups are used for recovery, rather than normal member access.

Subject to the GDPR’s conditions, you can request access, correction, erasure, restriction and data portability. You can object to processing based on legitimate interests for reasons relating to your situation. Where processing relies on consent, you can withdraw it for the future. Contact the controller at the email above; we normally respond within one month.

You can lodge a complaint with the Austrian Data Protection Authority or your local supervisory authority: Österreichische Datenschutzbehörde.