Last updated: 9 September 2026
About this policy
Kinkred ("we", "us") is a consent-first dating and community app for adults. Because of the nature of our community, the information you share with us can be among the most sensitive personal data there is. We treat it that way. This policy explains what we collect, why, how long we keep it, and the rights you have over it. It applies to the Kinkred app and website.
Kinkred complies with applicable data protection laws, including the Personal Data Protection Act 2012 (PDPA). Our Data Protection Officer can be contacted at privacy@kinkred.com.
1. Sensitive information — your explicit consent
Some of what you can choose to add to your Kinkred profile reveals sensitive things about you: your sexuality, gender identity, relationship structure, roles, and interests.
None of it is required. You can use Kinkred without completing these fields. Where you do choose to provide them, you explicitly consent to us processing that information for the purposes set out in this policy — principally, showing your profile to other users and matching you with compatible people.
You can edit or remove any of these details at any time in Settings → Edit Profile, and you can withdraw your consent by removing the information or deleting your account. Withdrawing consent does not affect processing that already happened.
2. Information we collect
- Account information — email address, date of birth (to verify you are 18 or over), and authentication data.
- Profile information you choose to share — display name, photos, bio, identity, sexuality, mood, roles, intentions, and what you're looking for. You control how much you share. See section 1.
- Messages and content — text chats with matches, voice notes, images you send, community posts, and comments. Messages are stored so we can deliver them across your devices; they are not end-to-end encrypted, and trained moderators may review content that is reported or flagged by our safety systems.
- Approximate location — only when you use nearby features (Spark), and only at reduced accuracy. We never request or store your precise location. Your location is never shown to other users as a point on a map, and Spark availability expires automatically after 2 hours.
- Verification selfie — if you choose to verify your profile, we collect a selfie used solely for verification review. It is stored privately, is never shown to other users, and is deleted according to our retention schedule.
- Screenshot events — when an image shared in a private chat is screenshotted, the app detects this and notifies the person who sent it. We record that a screenshot happened, not its contents. This exists to protect people who share images in confidence.
- Purchase information — subscription status via the App Store / Google Play and our billing partner RevenueCat. We never see or store your card number.
- Device and usage data — device type and identifier, push notification token, crash reports, and analytics events that help us fix bugs and improve the app.
3. How we use your information
- To operate the service: showing your profile in discovery, delivering messages, and matching you with compatible people.
- To keep the community safe: enforcing our 18+ rule, reviewing reports, scanning images for policy-violating content, and preventing banned users from returning.
- To provide paid features and verify subscriptions.
- To communicate with you: service messages, and — only if you opted in — marketing. You can opt out at any time in Settings.
- To comply with legal obligations, including responding to lawful requests from authorities.
We do not sell your personal data, we do not share it with data brokers, and we do not show third-party advertising.
4. Automated moderation
Images uploaded to Kinkred are scanned automatically before they are stored or delivered, and images identified as explicit are blocked. Some safety signals are also assessed automatically. These systems can be wrong.
If an automated decision affects your account or your content and you believe it is mistaken, email support@kinkred.com and a person will review it. Decisions to suspend or ban an account for a serious violation are reviewed by a human before they are made final.
5. Sharing & third parties
We share data only with the service providers needed to run Kinkred:
- Google Firebase — authentication, database, file storage, push notifications, crash reporting, and analytics.
- RevenueCat — subscription and purchase management.
These providers process data on our behalf under contractual terms that require them to protect it and to use it only for the purposes we specify. Data may be stored or processed on servers in other countries. Where it is, we rely on those contractual commitments to ensure a standard of protection comparable to the PDPA, as required by the Transfer Limitation Obligation.
We may disclose information if required by law, or where necessary to protect the safety of our users — for example, reporting child sexual abuse material to the relevant authorities.
If we incorporate. Kinkred is currently operated by an individual. We intend to transfer the Service to a company formed to operate it. When that happens, your personal data will transfer to that company, which will become the data controller and will be bound by this policy or a policy no less protective. The same applies if Kinkred is ever involved in a merger, acquisition, or sale of assets. We will notify you in-app before any such transfer takes effect. If you would rather not have your data transferred, you can delete your account at any time before it does.
6. Data retention
- Account and profile data — kept while your account is active.
- Verification selfies — deleted once verification review is complete, or when you cancel a pending verification.
- If you delete your account — your profile, photos, and content are deleted within 30 days.
- Ban and safety records — where an account is terminated for a serious violation, we retain a minimal record (such as a hashed identifier and the reason) for up to 5 years, so that banned users cannot simply return. This is necessary for the safety of other users.
- Records we must keep by law — retained for as long as the relevant law requires.
- Messages you sent to others — may remain visible to those recipients, consistent with how messaging works.
- Backups — deleted content may persist in encrypted backups for a short period before those backups rotate.
7. Your rights
Under the PDPA and this policy, you can at any time:
- Access and export your data (Settings → Data Export).
- Correct your profile information (Settings → Edit Profile).
- Delete your account and data (Settings → Data Export → Delete Account, or see Account Deletion).
- Withdraw consent — for marketing communications, or for the sensitive profile information described in section 1. Note that withdrawing consent for information essential to the Service (such as your date of birth) means we can no longer provide you an account.
- Complain — contact our DPO at privacy@kinkred.com. If you are not satisfied, you may approach Singapore's Personal Data Protection Commission (PDPC).
We respond to requests within 30 days.
8. Security
Data is encrypted in transit, access to production systems is restricted, and sensitive operations (age verification, profile verification, premium status, moderation) are enforced server-side rather than trusted from the app.
No system is perfectly secure. If a data breach is likely to result in significant harm to affected individuals, we will notify them and the PDPC as required by the PDPA — within 3 calendar days of determining that a notifiable breach has occurred.
9. Children
Kinkred is strictly for adults 18 and over. We do not knowingly collect data from anyone under 18, and we enforce this with both in-app and server-side age checks. If we learn that a user is under 18, we terminate the account and delete the data. If you believe a minor is using Kinkred, report the profile in-app or email safety@kinkred.com — see our Child Safety Standards.
10. This website
These legal pages are static and do not set advertising or tracking cookies. Our hosting provider records standard server logs, including IP addresses, for security and reliability.
11. Changes
We'll notify you in-app of material changes to this policy before they take effect. Continued use after a change means you accept the updated policy. The "last updated" date above always reflects the current version.
12. Contact
Data Protection Officer
privacy@kinkred.com