Privacy
Last updated 1 September 2026
Kind Soup exists because caregivers need somewhere that is not Facebook. That only works if the data behaves the way the product promises, so this page describes what actually happens rather than what we are technically permitted to do.
What we never ask for
- Your real name. A display name is all we store, and it can be anything. Most people here use something that is not their name.
- The name of the person you care for. There is no field for it anywhere in the system.
- Your address, your phone number, or your location.
- Any diagnosis or medical record. Care marks are self-selected labels you choose from a list; they are not medical data and nobody verifies them.
What we store
Your email address. Used only to sign you in and recover your account. It is never shown to another member, never sold, and never shared except with the email provider that delivers your sign-in code. If you sign in with Apple and use their private relay, we never receive a real address at all.
Your profile. Display name, picture, care marks, how long you have been caring, and the optional note you write for your circles.
Gender, if you provide it. Optional, and used for exactly one purpose: deciding which single-group circles are open to you. It is never displayed to anyone and is not readable by other members — including moderators — through any part of the product. The same is true of whether you tell us you are trans.
What you write. Posts, replies and direct messages, stored so the people you sent them to can read them.
Photos you attach. Location and camera metadata are stripped on your device before upload. Images live in private storage and are served through links that expire within the hour, so a photo cannot be forwarded by copying its address.
Basic technical data. Your device sends an IP address when it connects, which our hosting provider logs for security and abuse prevention. We do not use it to build a profile of you.
What stays private even from us
Your burnout check-in. Readable only by you. There is deliberately no staff access path to it anywhere in the system, it is never used for moderation, and it is never aggregated against your account.
Kept posts. Private, and the author of a post you keep is never told.
Direct messages. Not moderation material. A moderator sees one only if you or the person you were writing to reports it.
Anonymous posts
A post marked anonymous shows no name and no picture to any other member, permanently. Your care marks still show, because the room needs to know what you are speaking for.
We do store which account wrote it, so that a report about it can be acted on. A moderator can reveal that only by opening a report, and the act of looking is itself written to a permanent audit log.
Who can see your posts
A post goes either to one circle or to everyone on Kind Soup, and you choose which before you send it. A circle post is readable only by active members of that circle. A post to everyone is readable by every signed-in member.
Neither is public. There is no anonymous read path in the system at all: a logged-out request returns nothing. Nothing on Kind Soup is indexed by search engines, reachable by a link, or visible without an account.
Who we share data with
- Supabase — hosts the database, authentication and file storage.
- Resend — delivers your sign-in emails, and therefore sees your email address.
- Expo — delivers app updates and, if you enable them, push notifications.
- Vercel — hosts this website. It does not hold any member data.
Nobody else. We do not sell data, and the product has no advertising model — ads are incompatible with what this place is for.
Where your data lives
Our database is hosted in the United States. If you are elsewhere, using Kind Soup means your data is transferred there.
How long we keep it
What you write stays until you delete it or delete your account. Sign-in codes expire within the hour. Data export files are removed after seven days.
Moderation records are the one exception, and they outlive your account: if action was taken about you, a row naming the action, the date and the moderator survives deletion, with your identifying details removed. Without that, someone removed for taking posts outside a circle could return simply by deleting and re-registering.
Your rights over your data
Depending on where you live you may have a legal right to access, correct, export or erase your data, and to object to how it is used. We give everyone these regardless of where they are:
- Access and export. Settings → Download everything I’ve written produces a file containing your profile, posts, replies, messages, reactions and check-ins.
- Correction. Everything on your profile is editable in the app.
- Erasure. See the next section, and Deleting your account.
If you are in the UK or EU: our lawful basis for storing your profile and what you write is performance of a contract — we cannot run the service without it. For security logging and abuse prevention it is legitimate interest. Gender, where you provide it, is optional and given with your consent, and you can clear it at any time.
Deleting
Three separate things, deliberately not merged into one button:
- Pause my account — nothing of yours is visible to anyone. Nothing is deleted. Reversible.
- Delete everything I’ve written — every post, reply and message, along with the replies people left on your posts. Your account remains. Not reversible.
- Delete my account — all of the above plus the account itself, your name, your picture and your circles. Removed from our backups within 30 days. Not reversible.
Cookies and tracking
There are no advertising trackers, no third-party analytics, and no pixels — on this website or in the app. The app stores your session on your device so you do not have to sign in every time. This website stores nothing until you enter an email address on the invitation form.
Children
Kind Soup is for adults. You must be 18 or older to have an account. If we learn that an account belongs to someone younger we will remove it.
If something goes wrong
If member data is ever exposed, we will tell the people affected directly and promptly, and say plainly what happened rather than issuing a statement about how seriously we take security.
Changes to this page
If what we do with your data changes materially, we will tell you in the app before the change takes effect — not by quietly updating the date at the top of this page.
Contact
Questions, or a request to access or erase your data: privacy@kindsoup.com.
If you are in the UK or EU and think we have handled your data badly, you also have the right to complain to your national data protection authority.