Privacy

We never ask for a seed phrase, a recovery phrase, a private key, or any credential that could move funds. Wallet sign-in will only ever request a signature over a message, never a transaction.

A gift record: its kind, status, the copy you write, the scenario details, the visual theme, and the recipient details you choose to enter. A payment record, if payments are enabled: amount, currency, network, destination and transaction identifiers.

An account, once wallet sign-in exists, consists of a public wallet address and an optional display name. No custodial credentials are stored, because Kindred never holds them.

A wallet address is public by nature, and blockchain activity is publicly visible and permanent. If you connect a wallet, expect that any transaction you sign is visible to anyone and cannot be deleted.

A recipient name and email are stored only if you enter them. Leave them empty and the gift is shared purely by link. A restricted link is intended to limit access to the recipient you name — it is not an encrypted message.

Creating a gift can mint a token: an ERC-721 receipt that records the gift was created. Its data is written into a public blockchain and, by design, cannot be deleted, edited, or removed by us — not when the gift is deleted, and not when an account closes. That is a property of the chain, not a choice we can reverse, so this page states it plainly rather than promising a deletion we could not perform.

Because of that, the receipt deliberately contains no personal data. It carries the gift’s identifier as a hash, the chain it lives on, the date it was created, and the fact that it is a receipt. It does not contain your name, your wallet address, the recipient’s name or email, the promise text, or the gift’s title. Nothing you type into a gift is copied into the token.

The token is a record that a gift was created. It is not the gift itself, it is not a claim on funds, and it does not guarantee that anyone keeps their word. Availability of a public chain is outside our control, so a token may be readable by anyone, forever, independently of Kindred.

When sign-in exists, the session will be carried in a cookie that is HttpOnly, Secure in production, and restricted with an appropriate SameSite policy. Session expiry will require signing in again with a fresh nonce.

You can cancel a gift at any time from My gifts, which stops the link from working. Deletion of an account and its records has not been implemented yet, and will be documented here once it exists.