Privacy Policy

At KadoPool, we take your privacy seriously. This Privacy Policy explains how we collect, use, and protect your information when you use our website, mobile app, and services.

1. Information We Collect

We collect information to facilitate group gifting and process payments.

• Account Information: Name, email address, and profile picture (via Google Auth or Apple Sign-In).
• Jurisdiction Data: We collect your country and state/province of residence to calculate applicable taxes, set local currency, and ensure compliance with regional financial regulations.
• Transaction Data: Payment amounts, dates, and Recipient details. Note: We do not store credit card numbers. All financial data is processed securely by Stripe.
• School Partner Data: If you register an Organization, we collect the entity name, a contact email, and zip code of the institution.
• Privacy Shield: We do not share individual contribution amounts and aggregate amounts are shared only after certain thresholds are met. The Recipient always knows the total pool amount when it is received but not individual contributions.
• Keepsake Content: Messages included in Keepsake gallerie as the app functionality makes this available. Only the Recipient will have access to what you decide to share when you contribute. It is possible to contribute anonymously.
• Usage & Technical Data: IP addresses, browser types, and device identifiers are collected automatically to ensure platform security and prevent fraudulent "bot" contributions.

2. How We Use Your Information

We use your data to:

• Process payments and issue Gift Cards.
• Verify the identity of School Partners for compliance (KYB).
• Send transaction receipts and pool updates (e.g., "The pool has closed").
• Detect and prevent fraud.

We do not sell your personal data to third parties.

3. Information Sharing

We share data only with the essential service providers required to run the app:

• Stripe: For payment processing and identity verification.
• Gift Card Providers (e.g., Tremendous): To generate the digital gift codes for Recipients.
• Cloud Infrastructure (e.g., Supabase/AWS): To host the application and database.

4. Partner & School Data

When a Pool is linked to a Partner Organization, we provide the Organization with aggregate reporting (e.g., total funds raised, total number of contributors). We do not share the names or contact information of individual Contributors, Organizers or Recipients with the Organization.

5. Data Retention & Deletion

We retain your data as long as your account is active or as needed to comply with legal obligations (e.g., financial record-keeping and tax reporting).

What happens when you delete your account:

• Permanently deleted: Your account profile, email address, display name, and profile picture are removed from our systems.
• Permanently deleted: Your Keepsake contributions — including any messages, photos, or personal notes you submitted to a pool.
• Permanently deleted: Your pool memberships, organizer history, and any pools you created that have not been funded.
• Anonymized, not deleted: Transaction records (payment amounts, dates) are anonymized rather than deleted. Financial records must be retained to comply with tax reporting and fraud prevention obligations. Your identity is permanently disassociated from these records.

Keepsake content you have not deleted is generally retained for up to 24 months following the closure of a Pool, after which it is permanently deleted.

6. Children's Privacy

KadoPool is not intended for use by children under 13. We do not knowingly collect personal information from children. If we discover such data, we will delete it immediately.

7. International Data Transfers

KadoPool is based in the United States. If you access the service from the EU, UK, or other regions, your data will be transferred to and processed in the US in accordance with standard data protection clauses.

8. Changes to This Policy

We may update this policy periodically. We will notify you of significant changes via email or an in-app notification.

9. Your Privacy Rights

Depending on your location (e.g., New Jersey, California, or the UK/EU), you may have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your data
• Object to data processing
• Request portability of your data