Privacy Policy

At KadoPool, we take your privacy seriously. This Privacy Policy explains how we collect, use, and protect your information when you use our website, mobile app, and services.

1Information We Collect

We collect information to facilitate group gifting and process payments.

• Account Information: Name, email address, and profile picture (via Google Auth or Apple Sign-In).
• Jurisdiction Data: We collect your country and state/province of residence to calculate applicable taxes, set local currency, and ensure compliance with regional financial regulations.
• Transaction Data: Payment amounts, dates, and Recipient details. Note: We do not store credit card numbers. All financial data is processed securely by Stripe.
• Partner Organization Data: If you register an Organization, we collect the entity name, a contact email, and zip code of the institution.
• Privacy Shield: We do not share individual contribution amounts; aggregate amounts are shared only after certain thresholds are met. The Recipient always knows the total pool amount when it is received, but not individual contributions.
• Keepsake Content: Messages included in Keepsake galleries as the app functionality makes this available. Only the Recipient will have access to what you decide to share when you contribute. It is possible to contribute anonymously.
• Usage & Technical Data: IP addresses, browser types, and device identifiers are collected automatically to ensure platform security and prevent fraudulent contributions.

2How We Use Your Information

We use your data to:

• Process payments and issue Gift Cards.
• Verify the identity of Partner Organizations for compliance (KYB).
• Send transaction receipts and pool updates (e.g., "The pool has closed").
• Detect and prevent fraud.

We do not sell your personal data to third parties.

3Information Sharing

We share data only with the essential service providers required to run the platform:

• Stripe: For payment processing and identity verification.
• Gift Card Partners: To generate digital gift codes for Recipients.
• Cloud Infrastructure (e.g., Supabase): To host the application and database.

4Partner & Organization Data

When a Pool is linked to a Partner Organization, we provide the Organization with aggregate reporting (e.g., total funds raised, total number of contributors). We do not share the names or contact information of individual Contributors, Organizers, or Recipients with the Organization.

5Data Retention & Deletion

We retain your data as long as your account is active or as needed to comply with legal obligations (e.g., financial record-keeping and tax reporting).

What happens when you delete your account:

• Permanently deleted: Your account profile, email address, display name, and profile picture are removed from our systems.
• Permanently deleted: Your Keepsake contributions — including any messages, photos, or personal notes you submitted to a pool.
• Permanently deleted: Your pool memberships, organizer history, and any pools you created that have not been funded.
• Anonymized, not deleted: Transaction records (payment amounts, dates) are anonymized rather than deleted. Financial records must be retained to comply with tax reporting and fraud prevention obligations. Your identity is permanently disassociated from these records.

Keepsake content is generally retained for up to 24 months following the closure of a Pool, after which it is permanently deleted.

6Children's Privacy

KadoPool is not intended for use by children under 13. We do not knowingly collect personal information from children. If we discover such data, we will delete it immediately.

7International Data Transfers

KadoPool is based in the United States. If you access the service from Canada, the EU, the UK, or other regions, your data will be transferred to and processed in the US in accordance with standard data protection clauses.

8Changes to This Policy

We may update this policy periodically. We will notify you of significant changes via email or an in-app notification.

9Your Privacy Rights

Depending on your location (e.g., New Jersey, California, Quebec, or the UK/EU), you may have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your data
• Object to data processing
• Request portability of your data