LEGAL
Privacy notice
Last updated: 24 August 2026
Who controls your information
Kinly is an independently operated service based in Cyprus. For privacy questions, access, correction, objection or deletion requests, contact Kinly support.
What we collect
When you create an account or reserve a seat, we collect your first name, declared or verified age, confirmed email address, chosen table, seat number and reservation time. A clear, recent private profile photograph is required before suggesting or joining a community activity. If you suggest an activity, we also store its title, description, category, preferred date, time, general area and estimated per-person budget range, Kinly-selected venue, participant list and the version of the Proposal Rules you accepted. If your confirmed circle uses chat, Kinly stores your messages, membership state, blocks, safety reports and private post-meeting reflection.
Identity and age verification
Where verification is enabled, Stripe Identity securely collects and checks your identity document and selfie. Kinly does not receive or store copies of those images. Kinly stores only the provider, verification reference, result, verified age and verification date so that it can enforce eligibility and protect the community. Stripe processes the verification under its own privacy terms. Contact Kinly if you need a reasonable non-biometric alternative.
Phone notifications
If you choose to enable notifications, Kinly stores a device-specific push subscription containing an endpoint and encryption keys supplied by your browser. It is used only for Kinly service alerts such as meeting confirmations and private-circle activity. Message content is not placed in notification previews. You may disable notifications at any time; expired subscriptions are removed automatically.
Why and legal basis
We use these details to authenticate your account, place you in an appropriate age group, reserve your seat, review and administer community activities, document acceptance of applicable rules, contact you about the outing, allow confirmed participants to arrange their meeting and protect participant safety. The legal basis depends on the activity and includes performing the service you request, legitimate interests in operating and safeguarding Kinly, legal obligations, and consent where specifically requested.
Private table chat
Chat is available only to confirmed participants after a table or approved community activity fills. Other participants see your first name and messages, but not your email address, age or profile photograph. Kinly does not routinely read private chats. The organiser may access messages and related records where a safety report is submitted, where reasonably necessary to investigate misuse, protect a person, secure the service, or comply with law.
Profile photographs
A profile photograph is optional and used for private account review and safety. It is not displayed publicly or to other guests.
Payments and memberships
Stripe processes membership checkout, recurring payments and the customer billing portal. Kinly stores Stripe customer and subscription references, membership status, promotional source and access end date. Kinly does not receive or store your full card number. Stripe processes payment information under its own privacy terms.
Service providers
Kinly uses service providers including Cloudflare for hosting, security and database infrastructure, Stripe for payments and optional identity and age verification, browser push services for optional phone notifications, and Resend for service emails. They process information only as needed to provide their services under applicable data-protection terms. Information is not sold or used by Kinly for behavioural advertising.
Retention
Each chat becomes read-only 24 hours after the scheduled meeting. Ordinary chat messages are scheduled for deletion shortly afterward and no later than 30 days after closure. A reported message and necessary safety records may be retained for up to 24 months where needed to investigate or defend a concern. Inactive accounts and uncompleted reservations are normally deleted or anonymised within 12 months of inactivity.
Your rights
Under the GDPR you may request access, a copy, correction, deletion, restriction, portability, objection or withdrawal of consent, and may complain to the Office of the Commissioner for Personal Data Protection in Cyprus.
Security and incidents
Kinly uses encrypted transmission, short-lived sign-in codes, private sessions, participant-only room checks and restricted administrator access. Kinly maintains a process for assessing and reporting personal-data breaches where legally required.
Children
Kinly is designed for adults aged 30 and over.