Privacy

Privacy Policy

Last updated: October 17, 2026

The Kintsugi Collective is a community website, not a separate company. In this policy, “we” means the people who maintain the site. This policy explains what information the site handles and the choices available to you.

Information we collect

Account and sign-in information: your name, email address, profile image, Google account identifier, sign-in tokens, session records, and account status. We do not receive your Google password.

Profile information: anything you add to your profile, including your display name, username, photo, city, region, country, gym, rank, bio, offers, specialties, availability, contact methods, social links, and optional support or payment link.

Community activity: invitations and who invited whom; Needs and offers to help; direct asks; help requests and messages; testimonials; reports and moderation actions; notification preferences and delivery history; and the agreements you accept.

Technical information: the service receives request data such as IP address, browser and device information, page and error logs, and security events. Vercel location headers may be used to suggest a city, region, or country during setup. The site uses cookies for sign-in, session security, redirects, and invite attribution—not for advertising.

How we use information

We use this information to create and secure accounts, operate profiles and the directory, connect people around requests for help, send service emails, remember preferences, prevent abuse, review reports, troubleshoot problems, and comply with legal obligations. The site does not sell or rent personal information, run ads, or use advertising trackers.

What other people can see

If you enable public listing, your public profile may show your name, photo, region, country, bio, offers, availability, testimonials, and whether people can send you a direct ask. Public profile photos are stored as publicly readable files, so anyone with the file URL may be able to view them.

Signed-in members may see more profile information through the directory, including your city, gym, rank, invitation relationship, contact and social links, and optional support link, depending on the profile and account involved.

Public Needs pages can be viewed by anyone and may be indexed by search engines. They can show the asker's first name, location, description of the need, tags, and the sponsor's first name. Direct asks are not public.

People participating in a request can see its messages. In some existing request flows, accepting or completing a connection reveals stored contact links in the private request or sends an introduction email containing the participants' email addresses. An outside person who submits a direct ask may not have a Collective account.

Reports are reviewed privately by the person who moderates the site, who can see the reporting account, the reported profile, and the report details.

Service providers

Google handles sign-in. Vercel hosts the site, request logs, and profile-photo storage. Neon hosts the database. Resend delivers service emails and receives the recipient address and email contents, which may include member-supplied names, request details, or message snippets. These providers process information under their own terms and privacy policies.

Your choices

You can edit most profile information and turn public listing on or off. A username cannot currently be changed after it is set. You can manage optional email categories in notification settings; essential account, access, and safety messages may still be sent.

Signed-in members can close their account in account settings. This immediately removes sign-in access, sessions, contact details, profile information, offers, and public presence. Past requests, messages, reports, and agreement records remain under a de-identified “Deleted member” record when needed for safety and continuity. You can also email hello@thekintsugicollective.com to ask for access to or correction of your information, or for help with an account closure. We will explain anything that needs to be retained.

How long we keep information

We keep account and profile information while the account is active. We may keep request, message, invitation, agreement, moderation, and security records after account closure when reasonably needed for safety, fraud prevention, dispute handling, service integrity, or legal obligations. Deleted information may remain for a limited time in backups, logs, email records, or third-party caches. Public photo links may also remain cached after the active file is removed.

Security and age

We use reasonable measures to protect information, but no online service can guarantee complete security. The Collective is for people who are at least 18 years old. Do not use the site if you are under 18.

Changes

We may update this policy as the service changes. The new version and its date will be posted here, and we will give additional notice when a change materially affects how personal information is handled.