How we handle your information

What we collect

• Account info — email and password (or a Google identity if you sign in with Google).
• Profile info — display name, postal code, state, age bracket (under-13 / 13–17 / 18+), and your privacy preferences.
• Acts of kindness — the text you write, optional links, optional media, and timestamps.
• Network data — who invited you (if you signed up via someone's referral link or a per-act QR), and the points earned by each act in the chain you're part of.
• Operational data — basic logs needed to run the platform (errors, IP at sign-in for fraud detection, device type).

How we use it

• To run the network — show you your impact, your tree, your leaderboard rank, your tier perks.
• To moderate content according to the Do No Harm community guidelines.
• To award and track points across the inviter/invitee chain.
• To communicate with you about your account and platform updates (you can opt out of non-essential email).

What we do NOT do

• We do not sell your personal data.
• We do not show your postal code, state, age, or email to other users. Public-by-default fields are limited to display name, points, and tier — and only when you've opted into a public profile.
• We do not run ad networks or third-party tracking pixels on the site.

Where it lives

Account, profile, and act data are stored in Google Firebase (Authentication and Firestore). Optional media uploads, when they're enabled, are stored in Firebase Storage. Google's data centers are located in the United States.

How long we keep it

Account and profile data are kept while your account is active. Acts of kindness — even removed ones — are retained as part of the platform's audit log so points can be reconciled if needed. You can delete your account at any time by emailing privacy@rokindness.org; we'll permanently delete your profile within 30 days. Acts you posted while active will remain attributed to a redacted "Former member" identity.

Children

We do not knowingly collect personal information from children under 13 without verifiable parental consent. Anyone under 13 attempting to sign up is blocked at the onboarding step. A parent-consent flow is in development for Phase 2.

Your rights

You can request a copy of all data we hold about you, request correction of anything inaccurate, or request deletion of your account at any time. Email privacy@rokindness.org and a human will respond within 30 days.

Contact

Privacy questions or concerns → privacy@rokindness.org.