Privacy policy

This is a draft. Pinda isn't open yet, so it isn't in effect.

Last updated: 2 November 2026

Pinda is a moodboard for photographers. Photographers ("you") make boards of reference photos and share them with the people they work with ("viewers") through view-only links. This page says what we keep, why, and for how long.

Photographers

• Your account: your Kurio account, which holds your email address, your password (only as a salted hash) and the passkeys you sign in with (a passkey's public part only; the private part never leaves your device). The same account works for Pinda and Kurio.
• Your devices: each signed-in device's name, browser and system, and the city and country it was last used from. You see and remove them in Settings → Devices.
• Your photos and boards: the photos you upload, the versions we make of them for the web, your boards, links and settings. They're stored with Cloudflare (R2 and D1) and shown only to you and to people who open a link you made.
• Security log: sign-ins, failed attempts and security changes, with city and country. We never store IP addresses, only a keyed hash of them, to slow down people guessing links or codes.
• Payments: handled by our payment provider, the merchant of record. We receive your email and what you bought, never your card details.

Viewers (people who open a shared link)

No account, name or sign-in is ever asked. When you open a link, the photographer who shared it can see:

• that the link was opened, when, and for how long;
• the kind of device (for example "iPhone · Instagram"), and the city and country it was opened from;
• which photos you opened and which you favorited.

To recognise the same phone on a later visit, we set one first-party cookie (cr_v, an anonymous random id, kept a year) and keep the same id in your browser's storage. Nothing third-party: no ads, no analytics services, no trackers. Link previews (when a link is sent in a message) and automated browsers are never counted as visits.

Viewer activity is kept for one year, then deleted.

Who else sees data

Only the services that run the app: Cloudflare (hosting, storage, the city/country lookup), our payment provider (payments), our email provider (sign-up and recovery emails) and Discord, only if a photographer turns on activity messages. We don't sell or share data with anyone else.

Your choices

• Delete photos, boards and links at any time; deleted data leaves the service after 30 days, and its last backup copy within 30 more.
• Delete your account from Settings, or by writing to hello@kurio.pro.
• Viewers can ask a photographer, or us, to remove their visits from a link.
• Depending on where you live (for example the EU, UK or California), you can ask for a copy of your data, correction or deletion: write to hello@kurio.pro.

Changes

If this changes, we'll update this page and the date at the top.

Contact

Beehp, hello@kurio.pro.