kitefolio

Legal

Privacy Policy

Last updated 7 October 2026

Draft for launch. This document explains how Kitefolio works today and has not yet been reviewed by a lawyer.

Kitefolio lets people make a free link-in-bio and digital business card page. This policy explains what information we handle and why, in plain words.

1.Who we are

Kitefolio is an app designed by ARTH (designedbyarth.com) ("we", "us"). You can reach us at hello@designedbyarth.com for any privacy question or request.

2.What we collect

Account details: your email address and username. Your password is handled by Google Firebase Authentication. We never see or store it.

Your page: the name, bio, photo, links, images, videos and contact details you choose to put on it. If you publish the page, this content is public by design. Unpublished pages are private to you.

Visitor statistics for your page: anonymous daily totals only, namely page views, link clicks, contacts saved, QR opens, the visitor's country, the website they came from, and whether they used a phone or a computer. We do not store IP addresses, visitor IDs or anything that identifies a person, and we do not use cookies for this. If a visitor's browser sends a Do Not Track signal, we do not count them.

Referrals: if you join through a friend's link, we record that link's code against your account so your friend gets credit. We also record your own referral code.

Teams: if you create or join a team, we keep the team's name, look and links, and a record of who is a member.

Reports and messages: if someone reports a page or writes to us through the contact form, we keep the page name, reason, note, and the name, email and message they send, so we can reply.

Email sign-ups on pages: a page owner can add a sign-up box. If you join someone's list, we store your email, optional name and the time, on their behalf, so they can see and export it. You must tick a box agreeing that the owner may email you. The page owner decides how to use that list and is responsible for it. To have your details removed, contact the page owner or us.

Website visit count: we keep one total number of how many times this website has been opened. It holds no personal data and is not linked to any person.

Support access: if you share access with our support team (Settings, Support tab), our staff can view your page, settings and visitor totals, and, if you chose it, edit your page, only for the time you pick. They cannot see your password or your email sign-up list or change your plan. Every action is recorded with their email and the time, and you can read that record and stop sharing at any moment.

Usage numbers: we count how many times each account is used and when it was last used, and company-wide daily totals (sign-ups, logins, page views, clicks). Our staff use these to understand how the service is doing and to help people. Staff accounts use a verified company email.

Technical logs: our hosting provider keeps short-lived server logs, which can include IP addresses, to run and protect the service.

3.What we do not do

A page owner can choose to add their own Google Analytics or Meta Pixel to their page. If they do, visitors are asked first, and nothing from those companies loads unless the visitor clicks Allow. Embedded players (for example YouTube, Spotify, SoundCloud, Vimeo, Calendly or Google Maps) are loaded from those companies when a page with an embed is opened, and they may set their own cookies under their own policies.

4.Cookies and browser storage

Kitefolio uses your browser's storage only to keep you signed in (Firebase Authentication) and to remember a referral code between visiting a link and signing up. These are needed for the service to work. We set no advertising or analytics cookies.

5.Why we use your data

To create and run your account and page, to show your published page to visitors, to give you statistics, to run teams and referrals, to keep the service safe and handle reports, and to meet legal duties. Where the law requires a legal basis, it is performing our agreement with you, our legitimate interest in running and protecting the service, and your consent where we ask for it.

6.Who we share it with

We use these providers to run Kitefolio. They process data on our behalf:

When paid plans start, a payment provider (Razorpay and/or Stripe) will process payments. We will not store card numbers. We will update this policy then.

We may disclose information if the law or a valid legal request requires it, or to protect people from harm.

7.Where your data is stored

Your data is stored in the United States and may be processed in other countries where our providers operate. By using Kitefolio you understand your information can be transferred outside your country.

8.How long we keep it

We keep your account and page until you delete them. When you delete your account in Settings, we remove your page, username, referral code, visitor statistics, team records and account details. Server logs are kept for a short period by our hosting provider. Email sign-ups stay until the page owner deletes them or the account is deleted. Contact messages and reports are kept for as long as needed to answer them and for our records. We may keep a report about a page for as long as needed to keep the service safe.

9.Your rights and choices

You can see and change your page at any time in your dashboard. You can download a copy of your data and delete your account from Settings. You can unpublish your page whenever you like.

Under India's Digital Personal Data Protection Act, the EU/UK GDPR and similar laws you may also have the right to access, correct, erase and port your data, to withdraw consent, and to complain. Write to hello@designedbyarth.com and we will respond within 30 days. If you are not satisfied, you may contact your local data protection authority.

10.Visitors to Kitefolio pages

Pages are created by our users. We are not responsible for what linked sites do. If you see a harmful page, use the Report this page link at the bottom of the page.

11.Children

Kitefolio is not for children under 13. If you are under 18 you need a parent or guardian's permission to use it. If you believe a child has signed up without permission, contact us and we will delete the account.

12.Security

Data is encrypted in transit. Access to the database is controlled by rules that limit people to their own data. No system is perfectly secure. If a breach affecting your data occurs, we will tell you and the authorities as the law requires.

13.Changes

If we change this policy in a way that matters, we will tell you on the site or by email before it takes effect.

14.Contact and grievances

Questions, requests and complaints: hello@designedbyarth.com. Please write "Privacy" in the subject.