Privacy Policy

What we collect, and why

• Account: name, email address, password (stored only as a salted hash). To create and secure your account.
• Verification: date of birth, country, and the identity documents you upload. To confirm you are who you say you are.
• Profile: country, optional city, optional short bio, optional phone and WhatsApp. To match you, and so you can share a contact detail with a connection in one action if you choose to.
• Requests: the currency, countries, cities, amounts, and dates you enter. To find complementary members.
• Messages: what you write to a connected member. To deliver it, and so a moderator can review it if it is reported.
• Security: sign-in times, a coarse device description, the country of a sign-in, and a keyed hash of your IP address. To protect your account and detect abuse. We do not store raw IP addresses.

We do not ask for bank details, account numbers, card details, or proof of funds, because the platform has no part in any money.

What other members can see

Your initials, whether you are verified, your corridor, your amount range, and your timing.

Your city, how long you have been a member, and your completed-connection count are each a switch you control in your profile.

Your full name, email address, phone number, address, date of birth, and identity documents are never shown to another member. Contact details reach another member only when you explicitly share them with that specific connection, and you can revoke that.

Identity documents

Documents are stored in object storage that is not publicly reachable. They are never given a public URL and are never referenced from a profile. Only staff holding an explicit document-review capability can open one, and every view is recorded against that person with a timestamp.

Documents are deleted on a retention schedule after a verification decision is made.

Who else sees your information

Our infrastructure provider, Cloudflare, processes and stores the data as our processor. If email delivery is enabled, an email provider handles outbound messages. Those messages deliberately contain no other member's name, no amount, and no contact details.

If an AI feature is enabled, the specific text you submit to it (a sentence describing a request, a support question, or a report description under review) is sent to the configured model provider. No identity document, password, contact detail, or full member record is ever sent to a model.

We do not sell your information and we do not share it for advertising.

How long we keep it

• Account and profile: while your account is open.
• Identity documents: deleted on a configured schedule after a verification decision.
• Messages: kept while a connection exists, then subject to the configured retention window.
• Audit records of sensitive actions: retained, because they are the record of a safety and accountability process.
• Reports filed about you: retained, because they also concern the member who filed them.

Your choices

You can edit your profile and privacy switches at any time, change your email notification preferences, see and revoke every device signed in to your account, and close your account from Settings.

To request a copy of your information or ask us to correct something, write to hello@kodefoundry.com.

Closing your account

Your profile, private details, open requests, matches, and contact shares are removed. Safety reports filed about you and the audit record of decisions taken are kept, because they belong to a process involving other people. Messages are kept for the retention window in case a report is open, then removed.

Cookies

One cookie, for your session. It is HttpOnly, Secure, and SameSite=Strict, and it holds a reference to a session record on the server, not your identity. Your theme preference is stored in your browser and never sent to us. There are no advertising or tracking cookies.

Contact

Privacy questions: hello@kodefoundry.com.