Privacy Policy · kndlng

kndlng is a platform that school parent groups, clubs, nonprofits and other community organizations use to run their membership, communication, events and fundraising. kndlng is provided by Jiva Creative, LLC. This policy explains what personal information kndlng holds, why, who it is shared with, how long it is kept, and the choices you have. It also explains how we handle student information under FERPA, the Family Educational Rights and Privacy Act, and children's information under COPPA, the Children's Online Privacy Protection Act.

Summary of key points

Each organization controls its own data. We hold it on the organization's behalf and never show one organization's records to another.
We do not sell personal information, we do not show advertising, and we do not use advertising or third party analytics trackers.
Some information is sensitive. Rosters can include children, and permission slips can include medical and allergy notes. Section 3 explains how we treat it.
Accounts are for adults. You must be 18 or older to have one, and children do not sign up for kndlng.
You can download your data and delete your account yourself from your account's security page.
We share information only with the service providers that run kndlng for us, listed in section 6.

1. Who is responsible for your information

The organization you belong to, such as your school's PTSA or your club, decides what information about its members it keeps in kndlng and what it does with it. For that information we act on the organization's instructions. Questions about what an organization keeps about you or your child are often fastest answered by that organization's administrators, and you can always write to us at the address in section 14.

For your own account, and for the visits and technical information described below, Jiva Creative, LLC is responsible.

2. What information we collect

From you, when you have an account:

Your name, email address and, if you add them, your phone number and photo.
Your password, which we store only as a one way hash, and your two factor authentication settings.
What you do in kndlng: messages and posts you write, forms you submit, sign ups, purchases, donations and pledges.
Your language preference and, if you opt in to text alerts, your verified phone number and the date you consented.

From an organization, about the people it serves:

Student and member names, grade or class, room or team, and photos.
Where the organization chooses to record them: date of birth, home address, contact details and notes.
Which adults are guardians of which students.
Teacher, staff and board member names and contact details.
Contact lists the organization imports.

When someone pays, gives or signs:

Names and email addresses of buyers, donors and sponsors, what they bought or gave, and payment status.
For saved cards, only the card brand, last four digits and expiry date. Full card numbers go straight to Stripe and never reach us.
For permission slips: the signer's details, a guardian phone number, emergency contacts, any medical or allergy notes the guardian provides, and the IP address and browser the slip was signed from, kept as a record of the signature.

Automatically:

When you are signed in, your session records your IP address and browser so the session can work and be secured.
On public pages we count visits without storing who visited. Section 7 explains how.
Error reports, which can include technical details of the request that failed.

We do not collect student academic records, grades or disciplinary records, and we do not buy information about you from data brokers or marketing partners.

3. Sensitive information

Some information in kndlng deserves more care than the rest, and we treat it that way:

Medical and allergy notes on permission slips are encrypted in our database. Signed slips are deleted two years after signing.
Information about children is visible only to the organization and the people it chooses. Section 8 covers what can appear on a public page.
Videos a guardian records for a fundraiser are reviewed by the organization before anyone else can see them. A video the organization rejects is deleted within seven days.

4. How we use information

To run kndlng for you and your organization: accounts, rosters, messages, events, sign ups, payments, receipts and reports.
To send the email and text messages you or your organization ask us to send.
To keep kndlng secure, prevent fraud and abuse, and fix problems.
To meet our legal obligations.

We do not use your information to advertise to you or to build profiles for anyone else.

5. Artificial intelligence features

Some features use Anthropic's AI models: drafting and simplifying posts and descriptions, translating content into other languages, suggesting descriptions for pictures, reading uploaded documents to make accessible versions, matching the columns of an imported spreadsheet, and answering visitors' questions from an organization's published website.

When a spreadsheet is imported, the AI sees its column headings and the shape of a few rows, never the names or details in them.
Features that write about students remove names, schools, rooms and teachers before anything is sent.
Reports and questions about an organization's figures send totals, never individual records.
Under Anthropic's commercial terms, information sent through its API is not used to train its models.

6. Who we share information with

Your organization's administrators see the information the organization holds. Beyond that, we share information only with the service providers that run kndlng, and only what each needs:

Laravel Cloud hosts the application, its database and its file storage. Cloudflare carries traffic to and from it.
Stripe processes payments, donations and payouts to organizations.
Resend delivers email.
Telnyx delivers text messages, such as urgent alerts and verification codes.
Apple delivers notifications to the kndlng iPhone app.
FastPix stores, processes and plays fundraiser videos, including transcripts and safety checks.
Anthropic provides the AI features described in section 5.
Google Maps shows locations and suggests addresses as you type them.
Gravatar supplies a profile picture for someone with no photo in kndlng, if they have one there. The browser asks for it with a scrambled form of their email address.
Laravel Nightwatch receives error and performance reports, with medical, contact and payment fields removed.

We may also disclose information when the law requires it, to protect the safety of a person, or as part of a sale or reorganization of our business, in which case this policy would continue to apply to it. We do not sell personal information or share it for advertising.

7. Cookies and tracking

kndlng uses only the cookies it needs to work: one that keeps you signed in, one that protects forms from forgery, and, if you choose "Remember me", one that keeps you signed in longer. We do not use advertising cookies, tracking pixels or third party analytics.

To tell an organization how many people visited its public pages, we count visits without storing who made them. A visitor is recognized for one day by a scrambled code made with a secret that changes every day and is never stored, and those codes are deleted daily. Only the daily totals are kept.

Some pages show content from other services, such as a map, a video, or a profile picture from Gravatar. Your browser then contacts that service directly, which shares your IP address with it. Videos from YouTube and Vimeo are embedded in their privacy enhanced modes.

8. Children's information, FERPA and COPPA

kndlng is not for children to use. As our Terms of Service say, you must be 18 or older to have an account. A child's information is entered by their school or organization or by their guardian, and children do not sign up, post or upload anything themselves. kndlng will not give a login to a member whose date of birth shows them under 18, and asks the organizer to confirm the age when none is recorded. If you believe a child has an account or has given us information directly, email hello@kndlng.pro and we will delete it within 10 business days.

Public pages. When an organization runs a public fundraiser, a child's page shows their first name and last initial unless the organization chooses otherwise. A child marked as opted out of photos is shown without one. Children's fundraiser, class and leaderboard pages ask search engines not to list them.

FERPA. When we hold student information for a school's parent organization, we act as a school official with a legitimate educational interest under FERPA, use the information only for that organization, and never disclose it to another school or organization. Parents and guardians have the right to:

Inspect and review the records the organization holds about their child.
Ask for a record they believe is inaccurate to be corrected.
Ask that their child's directory information not be shared within the organization.
File a complaint with the U.S. Department of Education if they believe FERPA has been violated.

To exercise these rights, contact your organization's administrators or the school's records custodian, or email hello@kndlng.pro.

9. Where information is stored

kndlng's servers and database are in the United States. If you use kndlng from another country, your information is transferred to and processed in the United States, and some of the service providers in section 6 may process it in other countries. We protect it as this policy describes wherever it is processed.

10. How long we keep information

We keep information only as long as it serves its purpose, then delete it automatically:

Deleted accounts and organizations can be restored for 30 days, then are erased with everything they hold.
Deleted students, teachers and rooms can be restored for one year, then are erased.
Signed permission slips are deleted two years after signing.
The change history of who edited what is kept for two years. It records which fields changed and leaves out sensitive values.
Rejected fundraiser videos are deleted within seven days. Approved videos are deleted with the child's record or the organization.
Imported spreadsheets are deleted 90 days after import.
Records of who an email was sent to are kept for one year.
Daily visit totals are kept for three years. The codes used to count them are deleted every day.

Copies in backups are removed as those backups expire. An organization that needs its financial records for tax or accounting purposes should download them before deleting its account.

11. How we protect information

Passwords are stored only as one way hashes. Two factor authentication secrets, recovery codes and permission slip medical notes are encrypted.
Two factor authentication is available to everyone, and we can require it for an organization's administrators.
Every page is served over HTTPS, and browsers are told to use HTTPS for all future visits.
Each organization's records are kept separate, and every request is checked against the organization it belongs to.
Changes to records are logged with who made them and when.
Sessions expire after two hours without activity and end when you sign out.

No system is perfectly secure. If we learn of a breach affecting your information, we will notify you and your organization as the law requires. To report a security concern, email security@kndlng.pro.

12. Your choices and rights

See and download your data. Sign in and choose Download my data on your account's security page. It covers your own records and your children's at that organization.
Correct it. Update your profile yourself, or ask your organization's administrators to correct what they hold.
Delete your account. Choose Delete my account on your account's security page. It can be restored for 30 days, then is erased. If you are the only owner of an organization that has other members, hand ownership to someone else first.
Stop bulk email. Every newsletter and announcement from an organization has an unsubscribe link. Receipts, password resets and other messages about your own activity are still sent.
Stop text messages. Reply STOP to any text, or use Unsubscribe on your account's text message page.
Withdraw consent. Where we rely on your consent, you can withdraw it at any time. That does not affect what was done before.

Depending on where you live, including California, you may have further rights to know, correct or delete the personal information we hold, and to not be treated differently for using them. We do not sell or share personal information for advertising, so there is nothing to opt out of. To make a request, email hello@kndlng.pro. We will confirm your identity before acting on it.

13. Do Not Track

Some browsers send a Do Not Track signal. kndlng does not track you across other websites, so the signal does not change anything we do.

14. Changes and contact

When we change this policy we update the date at the top. If a change is material, we email account holders at least 14 days before it takes effect.

Questions or requests: hello@kndlng.pro. For records held by your child's school or parent organization, you can also contact that organization's administrators or the school's records custodian.

Jiva Creative, LLC
909 Marina Village Pkwy, #139
Alameda, CA 94501, United States