Privacy notice · 23 August 2026

Privacy notice

This is the legal privacy notice for Cindra. A separate product map explains what the app does today. If they disagree, this notice wins for legal questions.

1. Why we process data

• Contract — to create your account, run the 14-day trial, run membership, and operate the help loop.
• Legitimate interest — security, abuse handling, and bounded first-party product measurement. We do not use this to rank a feed or build ad profiles.
• Legal obligation — invoices and tax records once payment exists.

Cindra does not sell personal data, does not run ads, and does not use Google Analytics, advertising pixels, or engagement ranking.

2. What we process

• account: email, password credentials handled by the auth provider, sessions;
• profile: name, role, organisation, site, bio, expertise, country, fields, avatar, ways you can help;
• help loop: goals, tasks, posts, comments, help relationships, conversations, media you upload;
• product events: fixed categories, technical identifiers, scope and time. No name, email, post, goal or message text in those events;
• membership: Stripe customer, subscription, invoice and payment-method identifiers when you start a trial or pay.

Goals start private. A public preview exists only after you publish. Private messages stay with their participants.

3. Who else sees data

Cindra uses processors to run the product. European location is not the same as European ownership.

• TransIP (Netherlands) — public website and files;
• Supabase (contracting entity in Singapore; project region eu-central-1, Frankfurt, on AWS) — authentication, database, storage;
• Google Workspace — domain email such as welcome@cindra.eu;
• Stripe — membership checkout, payment method, invoices and the customer portal. Card numbers stay with Stripe, not on Cindra.

Processor contracts, subprocessors and transfer safeguards are still being completed. This notice does not pretend that work is done. See the infrastructure map.

4. How long we keep it

Account and content stay while the account exists. Self-service deletion removes the account, profile, owned content, goals, execution data, help relationships, identities, sessions and owned media. Words written by other conversation participants may remain because they control their own words. Anonymous aggregate events may remain without your account identifier.

5. Your rights

You can access, correct, export, delete, restrict, object, and — where consent is used — withdraw it. In the product you can already edit your profile, choose visibility, download a JSON export in your browser, and delete your account.

For a human request, write welcome@cindra.eu. You can also complain to the Autoriteit Persoonsgegevens in the Netherlands, or to your local EU supervisory authority.

6. Children

Cindra is for people aged 18 or older. If we learn that a younger person created an account, we delete it.

7. Changes

If this notice changes in a way that affects you, Cindra will say so in the product or by email. The date at the top is the current version.