At ThetaSet, we value the privacy and data protection rights of our users. This notice explains how we collect, process, and protect your personal data when you use our web app/browser extension, Kindred.

1. Types of Data Collected:
When you use our web app/browser extension, we collect the following types of personal data:
Account Information: When you create an account, we collect your email address and username.
Saved Content: We collect the websites you save privately, such as bookmarks, which are stored locally in your browser and synced across devices.
Publicly Published Content: If you choose to publicly publish reviews and collections of links, that content will be stored in our database and associated with your account.
Cookies: We may use cookies for authentication purposes only. These cookies are essential for providing secure access to your account.

2. Data Encryption and Storage:
Kindred is built to be a secure and private space for individuals and families to keep their data. Although we collect data, in most cases, we do not have access to user data since we use client-side encryption to store most data the user collects within Kindred.
Client-Side Encryption: We use client-side encryption for data we deem “potentially personal.” This includes:
- Most text data (e.g., notes, bookmarks, collection names, posts, comments)
- Certain metadata (e.g., website metadata)
- File content (e.g., photos, videos)
Non-Encrypted Data: The following data does not use client-side encryption:
- Relationships between items, categories, or item types (used for operations)
- Published or cross-account sharing content (e.g., reviews, published collections, imported items, subscription IDs)
- Basic account info used for login (e.g., username, email) used for operations and communications

Client-side encryption is enabled by default, but users can disable it for specific content. We optionally allow users to safely store their encryption key on the server for account recovery services only, not for data processing.

3. Purpose of Data Processing:
We process your personal data for the following purposes:
Providing the Service: We use your account information to authenticate and provide you access to our web app/browser extension.
Personalization: We may analyze your saved content to provide personalized recommendations and improve your user experience.
Publicly Published Content: If you choose to publicly publish content, we display it to other users as per your preferences.
Communication: We may send you notifications, updates, and important announcements related to our services.

4. Data Retention:
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this notice and as required by applicable laws. Retention periods vary based on the type of data and the purpose for which it is collected.

5. Data Sharing:
We do not sell, trade, or rent your personal information to third parties. We may share your data in the following circumstances:
Service Providers: We may engage trusted third-party service providers to assist us in delivering our services, subject to appropriate data protection agreements.
Legal Compliance: We may disclose your personal data if required by law or to protect our rights, property, or safety, or the rights, property, or safety of others.

6. Your Rights:
Under the GDPR, you have the right to:
Access, rectify, or delete your personal data.
Object to or restrict the processing of your personal data.
Withdraw your consent at any time, if consent is the legal basis for processing.
Lodge a complaint with the appropriate data protection authority.

7. Security Measures:
We take appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, access controls, and regular reviews of our security practices.

Consent:
By using our web app/browser extension, you acknowledge and agree to the processing of your personal data as described in this GDPR notice. We obtain your consent for the use of cookies and any other data processing activities that require it.

Contact Information:
If you have any questions or concerns regarding your privacy or data protection, please contact us at kindredly.ai/contactUs