Trust & Safety

The rules that protect residents.

How Kindtoall retains, deletes, shares, and safeguards information — written to match what the system actually does, not what sounds good.

Who operates Kindtoall

Kindtoall is operated by Louis Legacy LLC. The service is currently founder-operated and offered through a limited controlled pilot — access is controlled by user roles and database policies, not informal administrator access.

We do not claim independent security certification. Access controls, retention rules, and deletion behavior described here are implemented in the system and testable.

Data retention

Abandoned draft applications and their document attachments are removed 30 days after the last update. Withdrawn applications are removed 30 days after withdrawal. Security and audit events are retained for up to 12 months, then removed.

Passport answers and Evidence Wallet documents remain until you delete them or delete your account — they are yours to keep and reuse. Scheduled cleanup is enforced server-side by a retention function, not manually.

Account deletion

You can delete your account inside the app: Account & Privacy → Delete My Account. Deletion requires your password and a typed confirmation — it cannot happen by accident.

Deletion removes your profile, Passport answers, uploaded documents and files, applications, drafts, sessions, and your sign-in. Audit events are kept for the security window with your identifiers anonymized. A non-identifying deletion receipt is recorded. Funding or legally required records are handled per the retention schedule.

Sharing and consent

Connecting with an organization is not sharing. Before any supported submission, Kindtoall shows you the exact answers and documents requested and requires your explicit authorization.

What you authorize is frozen into an immutable submission snapshot. The organization sees the snapshot — not your live Passport or Wallet. You can review what was shared and when.

Organization access rules

Organization staff may access resident information only through an authorized application, referral, or information request — and only while holding an active membership with an appropriate role in that organization.

Organizations may use resident information only for the program the resident engaged with. Downloading or reusing resident documents for unrelated purposes is prohibited and grounds for removal from the platform.

Community safety

Be honest and respectful. Do not post identifying details about other people, do not harass or deceive, and do not use community features to solicit money or sensitive information.

Content that endangers, harasses, or deceives may be removed. Repeated or severe violations can result in loss of access.

How AI is used

Kind, the built-in assistant, can explain requirements, organize your information, help prepare applications and responses, and suggest next steps. It works from information already in your account — it does not make eligibility, approval, or funding decisions.

AI-assisted text you produce is yours to review before it is sent or submitted. Do not rely on the assistant for legal, medical, or financial advice.

Reporting a security or privacy problem

If you believe your information was accessed improperly, you found a security vulnerability, or something about the service seems unsafe, report it immediately to the contact below.

We will acknowledge your report, disable affected access while investigating, determine what was affected, and tell you what changed. Preserving logs and fixing the root cause come before resuming normal operation.

Incident & privacy reports

Security or privacy concern? Email jimmylou27@icloud.com with “SECURITY” in the subject line. Include what happened, when, and any accounts involved — do not include passwords or document contents.