Privacy Policy

1. Who we are

Health and Kind (“we”, “us”, “our”) is operated by KCF LLC (Kindness Community Foundation), based in Newport Beach, California, United States. We are the data controller for personal data processed through this platform. You can contact us at contact@kindnesscommunityfoundation.com.

2. What data we collect, and where it actually lives

Two different things happen with your data, and they are worth keeping separate because the protections are different:

• Companion conversations, journal entries, and wellness check-ins are stored on your device only — in your browser's local storage, not on our servers. There is no server-side copy sitting somewhere for us to lose, be breached, or fail to delete. Each message you send is transmitted to Anthropic (see section 5) as conversation context so the AI can reply, and to our safety classifier so a crisis can be recognised, but it is not retained by us afterwards. Clearing your browser or switching devices loses this data on our end exactly as it does on yours — we cannot recover it because we never had it.
• Account data — name, email address, password (hashed), and profile information you provide when you create an account — is stored server-side with our database provider, Supabase.
• Usage data: pages visited, features used, device type, browser, and approximate location (country/region).

Health and Kind is free to use. We do not process payments and hold no payment or card data of any kind.

3. How we use your data

We use your data to:

• Provide and personalise the Health and Kind service
• Match you with appropriate helpers and support
• Ensure safety, including detecting crisis situations where intervention may be needed
• Improve the AI model's responses (using anonymised, aggregated data only)
• Send you service-related communications
• Comply with legal obligations

We do not sell your data, use it for advertising, or share it with third parties except as described in section 5.

4. Legal basis for processing

• Contract performance: to provide you with the service you have signed up for
• Legitimate interests: to improve our service, prevent fraud, and ensure platform safety
• Consent: for optional features and marketing communications
• Vital interests: in genuine crisis situations where safety is at risk
• Explicit consent: for processing special category health data

5. Who we share data with

We share data with trusted third-party service providers who process it on our behalf:

• Supabase, database and authentication
• Anthropic. AI processing (messages are not retained for training without consent)
• Netlify, platform hosting and rate-limit storage

We may also disclose data where required by law, court order, or to protect safety in an emergency.

6. Data retention

Companion conversations, journal entries, and wellness check-ins live only in your browser, so you control their retention directly — clearing them (from the Memory page, or by clearing your browser data) deletes them immediately and completely, with nothing left on our servers.

We retain server-side account data for as long as your account is active. Account deletion is not yet automatic: email us at contact@kindnesscommunityfoundation.com and we will remove your account data within 30 days, except where retention is required by law.

7. Your rights

Depending on where you live, privacy laws such as the GDPR (UK/EU) or state privacy laws (US) may give you the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data (“right to be forgotten”)
• Object to or restrict certain processing
• Data portability, receive your data in a machine-readable format
• Withdraw consent at any time

To exercise any of these rights, email contact@kindnesscommunityfoundation.com. We will respond within 30 days.

8. Cookies

We use essential cookies to keep you logged in and remember your preferences. See our Cookie Policy for full details.

9. Children's data

Health and Kind is intended for users aged 16 and over. Child profiles (added by a parent or guardian) are treated as the most sensitive category of data and are never shared or used for anything other than providing the service to the parent/guardian who created them.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by a notice on the platform. The date at the top of this page shows when it was last updated.

11. Contact and complaints

For privacy questions, contact us at contact@kindnesscommunityfoundation.com. UK and EU users also have the right to lodge a complaint with their local data protection authority, such as the UK's Information Commissioner's Office (ICO) at ico.org.uk. US users can contact their state Attorney General's office or the Federal Trade Commission.