KINDRED

Legal · Privacy

Privacy Policy

Kindred Enterprises Ltd ("Kindred", "we", "us", "our")

Registered in England & Wales · Company No. 13719173 · Registered office: 167-169 Great Portland Street, London, England, W1W 5PF.

Trading as kndrd.ai and kndrd.co.

Contact: pip@kndrd.co

Last updated: 27 September 2026.

This Privacy Policy explains how Kindred collects, uses, and protects your personal data when you use our website at kndrd.ai and our related services (the "Service"). We handle your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

Kindred Enterprises Ltd is a company registered in England & Wales (Company No. 13719173) and is the data controller responsible for your personal data. If you have any questions about this policy or how we handle your data, contact us at pip@kndrd.co.

2. The data we collect

We collect and process the following categories of personal data:

  • Account & identity data: your name and email address, collected when you request an audit on our sign-up form, and the login details for the client account we set up for you to view your report.
  • Contact & enquiry data: your name, email and message content, collected when you submit a form or contact us.
  • Usage data: technical information such as IP address, device and browser type and the pages you request, recorded automatically in our hosting providers' server logs when you use the website.
  • Communications: emails and messages you exchange with us, collected directly from you.
  • Audit data: information about the business being audited (name, website, locations, services, competitors) that you give us or that is publicly available, together with the answers AI engines and search results return about it (see section 2.1).

2.1 How an audit works and what it processes

To produce an audit we send search questions about your business and its category to AI engines and search services, and store every answer they return. The questions are about the business, its services and the areas it serves; they do not contain your personal data. However, publicly available answers and search results can mention named people connected with the business (for example owners, or names in public reviews), and those answers are stored as part of the report.

Our audits currently use:

  • OpenAI (ChatGPT), Anthropic (Claude), Google (Gemini) and Perplexity: queried through their official APIs with live web search enabled.
  • SerpAPI: to retrieve Google Search results (AI Overviews, the local map pack, organic results and Google AI Mode) and Microsoft Copilot answers. Searches can be made from the specific UK towns and areas named in each question, so results reflect what local customers see.
  • An AI-crawlability check: we fetch your business's public website (for example its home page, robots.txt, sitemap and llms.txt) to check whether AI crawlers can read it. We only access publicly available pages.
  • A brand search check: we look at the first page of Google results for searches that name the business, and at the review platforms that appear.

We also use AI models (Anthropic's Claude and OpenAI) to help draft findings and recommendations from these results. Every finding is reviewed by a member of the Kindred team before a report is published.

2.2 Sign in with Google (legacy accounts)

We no longer offer Sign in with Google. If you created an account with Google before September 2026, we hold only the name, email address and profile picture Google shared with us at the time. We never received your Google password or accessed any other Google services, and our use of that information followed the Google API Services User Data Policy, including the Limited Use requirements. You can ask us to delete it at any time.

3. How we use your data and our legal basis

We use your personal data for the following purposes, relying on the lawful bases set out under UK GDPR:

  • To create and manage your account and authenticate sign-in (performance of a contract).
  • To run your audit, publish your report and give you (and the people you invite) access to it (performance of a contract).
  • To provide, operate and improve the Service (legitimate interests).
  • To respond to your enquiries and provide support (legitimate interests / contract).
  • To send service-related and, where you have opted in, marketing communications (consent / legitimate interests).
  • To maintain security and prevent fraud or abuse (legitimate interests / legal obligation).
  • To comply with our legal and regulatory obligations (legal obligation).

4. Service providers and data sharing

We do not sell your personal data. We share it only with trusted service providers ("data processors") who help us run the Service, under contracts that require them to protect your data:

  • Supabase: database, authentication and backend hosting.
  • Vercel: website and application hosting.
  • Resend: transactional and notification email delivery.
  • OpenAI, Anthropic, Google and Perplexity: AI engines queried during an audit, and (OpenAI and Anthropic) AI assistance in drafting findings.
  • SerpAPI: retrieval of Google Search, Google AI Mode and Microsoft Copilot results during an audit.

Audit queries sent to these providers describe the business being audited, not you.

We may also disclose your data where required by law, to enforce our terms, or to protect the rights, safety and property of Kindred or others.

5. International transfers

Some of our service providers are located outside the UK. Where we transfer personal data internationally, we rely on appropriate safeguards such as UK adequacy regulations or the International Data Transfer Agreement (or Addendum to the EU Standard Contractual Clauses) to ensure your data remains protected.

6. Data retention

We keep your personal data only for as long as necessary for the purposes set out in this policy, including to satisfy any legal, accounting or reporting requirements. When you close your account, we delete or anonymise your data unless we are required to retain it by law. Published reports and the raw AI answers behind them are kept for the life of your engagement so that re-audits can be compared over time, and are deleted on request once the engagement ends.

7. Your rights

Under UK GDPR you have the right to access your data; to request correction or erasure; to restrict or object to processing; to data portability; and to withdraw consent at any time where processing is based on consent. To exercise any of these rights, contact pip@kndrd.co. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies

We use cookies and similar technologies to operate the website, keep you signed in, and remember your preferences. For example, your report's night/day display setting is stored in your browser's local storage and never sent to us. Our fonts are self-hosted, so viewing the site does not send your data to a font provider. You can control cookies and local storage through your browser settings; disabling them may affect how the Service works.

9. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. No method of transmission or storage is completely secure, but we work to protect your data and review our measures regularly.

10. Children

The Service is not directed to individuals under the age of 16, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you.

12. Contact us

Kindred Enterprises Ltd · pip@kndrd.co · 167-169 Great Portland Street, London, England, W1W 5PF.

Kindred Enterprises Ltd · Company No. 13719173 · 167-169 Great Portland Street, London, England, W1W 5PF