Kevula Privacy Policy
Effective date: 9/3/2025
Privacy-first by design1) Scope & Who We Are
This Privacy Policy applies to Kevula (“Kevula,” “we,” “us,” “our”) and covers our website, apps, and related services (collectively, the “Services”). By creating an account or using the Services, you agree to this Policy.
Controller: CF Midas, LLC, Plano, Texas, USA.
2) Information We Collect
A. You Provide to Us
- Account data: name, email, username, password, profile details (bio, photo).
- Transactions: wallet funding, purchases of digital goods, payout details (via bank connection).
- Content: posts, stories, comments, images, and any information you share.
- Invites & contacts: optional invitations you send to friends.
- Support: messages you send to customer support.
B. Automatically Collected
- Usage data: app activity, pages viewed, features used, engagement with posts.
- Device data: IP address, device identifiers, browser/app version, language, time zone.
- Diagnostic & analytics: crash logs, performance metrics.
C. From Third Parties
- Payments & payouts: limited data from payment processors and banking partners (e.g., status, masked identifiers) to complete transactions.
- Security & fraud: signals from service providers to help prevent abuse.
3) How We Use Information
- Provide the Services: account creation, purchases of digital goods, commission tracking, monthly payouts.
- Improve & personalize: feature development, recommendations, and performance.
- Safety & integrity: detect, prevent, and respond to fraud, abuse, security incidents, and violations of our Terms.
- Communications: service messages, receipts, statements, feature updates, and optional marketing you can control.
- Legal compliance: tax, accounting, regulatory obligations, and dispute resolution.
No data sales: We do not sell your personal data to advertisers or data brokers.
5) Your Controls & Choices
- Profile & visibility: choose what to share; edit or delete profile info at any time.
- Content: create, edit, or delete posts and comments you control.
- Privacy settings: manage who can see your activity, notifications, and invitations.
- Financial controls: set spending limits; link or unlink bank accounts for payouts.
- Access, export, deletion: request a copy of your data or account deletion by contacting us (see Contact Us).
- Marketing opt-outs: unsubscribe using the link in our emails or via in-app settings.
6) Data Retention
- Transactional records: retained as required by law (e.g., tax/accounting) and for legitimate business purposes.
- Content & activity: retained until you delete it or close your account, subject to legal holds.
- Inactive wallet funds: unused funds may be refunded after ~90 days of inactivity (minus processing fees), subject to regional/payment method rules.
7) Security
- Encryption: bank-level encryption for payments/payouts; encryption in transit and at rest where applicable.
- Access controls: strict, least-privilege access; logging and review of sensitive operations.
- Your role: use strong passwords and enable two-factor authentication (2FA) where available.
No system is 100% secure, but we take reasonable, industry-standard measures to protect your information.
9) Communications & Marketing
- Service emails: receipts, statements, and important account notices (you can’t opt out of strictly necessary communications).
- Optional updates: product drops, features, events—opt in/out anytime via email footer links or settings.
10) Region-Specific Rights (e.g., CCPA/CPRA, GDPR)
Your rights may vary based on where you live. Subject to verification and applicable law, you may have the right to:
- Access the personal information we hold about you.
- Correct inaccurate personal information.
- Delete personal information (with legal/operational exceptions).
- Portability — receive a copy in a portable format.
- Limit certain processing (e.g., sensitive categories) and object to some uses.
- Non-discrimination: we will not discriminate against you for exercising your rights.
Do Not Sell or Share: Kevula does not sell your personal information. If your region requires a “Do Not Sell or Share” control, we will honor those choices.
Legal bases (GDPR/EEA/UK): We process data to perform our contract with you (provide the Services), for our legitimate interests (safety, improvement), to comply with legal obligations, and with your consent where required.
How to exercise rights: contact us (see Contact Us). We’ll respond within the timeframe required by law.
11) Children’s Privacy
The Services are not intended for individuals under 18. We do not knowingly collect data from children. If you believe a child has provided data, contact us to remove it.
12) International Transfers
If you access Kevula from outside the United States, your information may be processed in the U.S. or other countries that may have different data-protection laws. Where required, we utilize appropriate safeguards for cross-border transfers.
13) Changes to this Policy
We may update this Privacy Policy periodically. We’ll post the updated version with a new “Effective date.” Your continued use of the Services after changes take effect constitutes acceptance.
14) Contact Us
KevulaCF Midas, LLC
6860 Dallas Parkway, Suite 200
Plano, Texas, USA
privacy@kevula.com