Privacy Policy

Last Updated: September 16, 2026

This Privacy Policy explains how Kindlo (the mobile application and related services, the “Service”), owned and operated by SDM GROUP LLC, 800 West El Camino Real, #180, Mountain View, CA 94040, USA (“we,” “us,” or “our”), collects, uses, discloses, and safeguards Personal Data. Capitalized terms not defined here have the meaning given in our Terms of Service (End User Service Agreement).

Questions about this Privacy Policy may be sent to support@joinkindlo.com.

1. Personal Data We Collect

Personal Data is information that identifies or can be used to contact you, or that is reasonably linked to you. We collect Personal Data when you create an account, use messaging or calling features, purchase Premium, contact support, or otherwise use the Service. We may also receive information from Apple or Google in connection with app distribution and in-app purchases.

Aggregated Data. We may create aggregated or de-identified statistical information that does not identify you. If we combine such data with Personal Data so that it can identify you, we treat it as Personal Data under this Policy.

Categories of Personal Data we collect include:

• Account Data: username, email address, and password.
• Profile Data: optional profile photo and gender, and other profile fields you choose to provide in the App.
• Communications Content: text messages, photos, videos, voice messages, and related delivery metadata that you send or receive through the Service. Message content is not end-to-end encrypted. Content is transmitted to and stored on our servers (and processed by service providers acting on our behalf) so we can deliver messages, operate the Service, provide support, and meet legal obligations.
• Call Data: information needed to provide voice and video calls (for example, user IDs, call signaling data, and call status), processed with our call infrastructure provider.
• Payment / Premium Data: subscription or purchase status and related transaction records provided by Apple or Google. We do not store your full payment card number.
• Technical Data: information such as IP address, device type, operating system, app version, and push notification tokens (for example, via Apple Push Notification service or Firebase Cloud Messaging), used to operate, secure, and deliver the Service.
• Safety & Support Data: information you submit when you block or report a user, create private notes, change privacy settings (such as preventing incoming calls), or contact us for support.

2. How We Use Your Personal Data

We use Personal Data to:

• Create and manage your account;
• Provide messaging, media sharing, QR-code contact features, voice/video calls, push notifications, Premium features, and customer support;
• Store and deliver your messages and media to intended recipients;
• Maintain security, prevent fraud and abuse, troubleshoot, and enforce our Agreement;
• Process Premium purchases and manage membership status;
• Send service-related communications (for example, account, security, and support messages);
• Comply with applicable law.

Where data-protection law requires a legal basis, we rely on performance of our contract with you, our legitimate interests in operating and securing the Service, compliance with legal obligations, and consent where required.

3. Who We Share Data With

We do not sell your Personal Data. We may share Personal Data as follows:

• Service providers: companies that help us host the Service, deliver push notifications, provide voice/video calling infrastructure, and process in-app purchases, under obligations to protect the data.
• Other users: information you choose to share (such as your username, profile photo, messages, and media you send) is available to the intended recipients as needed to provide the Service.
• Affiliates: SDM GROUP LLC affiliates, including for security and fraud prevention, subject to this Policy.
• Legal and safety: to respond to lawful requests, protect rights and safety, investigate violations of our Agreement, or address security incidents.
• Business transfers: if we are involved in a merger, acquisition, financing, reorganization, or bankruptcy, Personal Data may be transferred as a business asset.

Apple and Google process purchase and platform data under their own policies when you use their stores or billing systems.

4. Data Security

We use administrative, technical, and organizational measures designed to protect Personal Data. Transmission to our Service may use standard transport encryption (such as TLS). That does not mean message content is end-to-end encrypted—we can access message content stored on our systems as described above. No security measure is perfect, and you should protect your account credentials.

5. Your Choices

To protect privacy and security, we may verify your identity before fulfilling certain requests.

• Access / correction: You may update certain profile information in the App, or contact support@joinkindlo.com.
• Push notifications: You may disable notifications in App or device settings.
• Delete account: You may delete your account in App settings or by contacting us. After deletion is completed, your account generally cannot be restored. We may retain limited information where required for legal, security, accounting, or dispute-resolution purposes.

6. International Transfers

If you are in the European Economic Area (EEA) or another region with data-transfer rules, Personal Data may be transferred to and processed in the United States and other countries that may have different data-protection laws. Such transfers are necessary to provide the Service. Contact us for more information about safeguards used for transfers out of the EEA.

7. Your Rights

Depending on applicable law, you may have the right to request access, correction, erasure, restriction, objection, or portability of your Personal Data, and to withdraw consent where processing is based on consent. To exercise these rights, contact support@joinkindlo.com. We usually respond within one month; complex requests may take longer. We generally do not charge a fee, but may refuse or charge for requests that are clearly unfounded, repetitive, or excessive.

8. Data Retention

We retain Personal Data only as long as needed to provide the Service and for the purposes described in this Policy, including legal, accounting, security, and compliance requirements. Retention periods depend on the nature of the data and applicable law.

9. California Privacy Rights

California residents may request access, deletion, and portability of their Personal Data as permitted by law, and may request certain information about disclosures for direct marketing, by contacting support@joinkindlo.com. We will not discriminate against you for exercising privacy rights, though some features may be unavailable if we cannot process data needed to provide them.

We do not sell Personal Data. We may disclose Personal Data for business purposes to service providers and as otherwise described in this Policy. We may verify requests and, for authorized agents, require proof of authority.

10. Children’s Privacy / Age Requirement

The Service is for adults. You must be at least 20 years old to create an account or use the Service. We do not knowingly collect Personal Data from anyone under 20. If we learn that we have collected such information, we will delete it. Contact us if you believe someone under 20 has provided Personal Data to us.

11. Other Sites and Services

The Service may contain links to third-party sites or services we do not operate. Their privacy practices are not covered by this Policy.

12. Questions or Concerns (EEA)

EEA users should contact us first at support@joinkindlo.com. We will investigate and try to resolve complaints. You may also contact your local Data Protection Authority.

13. Updates

We may update this Privacy Policy from time to time. Material changes will be indicated by updating the “Last Updated” date and posting the revised Policy. Continued use after changes become effective constitutes acceptance of the then-current Policy, to the extent permitted by law.

14. Contact Us

SDM GROUP LLC

• US: 800 West El Camino Real, #180, Mountain View, CA 94040, USA
• Canada: 10 - 8707 Dufferin St, Suite 160, Vaughan, Ontario L4J 0A6, Canada
• Email: support@joinkindlo.com
• Website: joinkindlo.com