Kommonly is built for families connecting locally. This policy explains what we collect, what we deliberately avoid collecting (especially about children), how we use your information (including relevant ads on Kommonly), and the choices you have.
1. Who we are
Kommonly is operated by Kommonly LLC, a Florida limited liability company (“we,” “us,” or “our”). We provide a private community platform that helps families discover nearby families, join local groups and events, and connect with one another.
2. Information we collect
We collect information you provide and limited technical data needed to run the service:
- Account data: email address, password (stored securely by our auth provider), and optional sign-in via Google or Apple when you choose those options.
- Family profile: display names, bio, interests, curriculum or approach labels, photos you upload, and privacy preferences you set (such as whether you appear in the directory or on the map).
- Child profiles: first name and birth month (private by default). Connected families see first name and age range when you choose to share — never the birth month. We do not ask for per-child photos. An optional family photo may include children; visibility is controlled by your privacy settings.
- Location: your home address is used only to derive an approximate area label and jittered map coordinates. We do not store or display your exact street address.
- Connections and invites: connection requests, invite links you create or accept, and related metadata.
- User-generated content: messages, community posts, event details, board posts, and reports you submit.
- Settings and notifications: email notification preferences and in-app notification history.
- Technical data: device/browser type, IP address, and cookies or similar technologies used for authentication, security, and (with your consent) analytics.
3. Information we do not sell
We do not sell your personal information to third parties. We do not build profiles of children for marketing.
We may use your information to show relevant advertisements and sponsored content on Kommonly, based on what you share and how you use the service. That use stays on Kommonly—we do not sell your profile to data brokers or let advertisers use your personal information for their own purposes off-platform.
Children do not have their own login accounts. Child information is entered and controlled by the parent or guardian who owns the family account.
4. How we use information
We use your information to:
- Create and secure your account and family profile.
- Show your family in discovery features according to your privacy settings.
- Deliver connection requests, messages, notifications, and transactional emails (such as password reset or invite links).
- Operate communities, events, the local board, and moderation tools.
- Investigate abuse reports and enforce our Terms and Community Guidelines.
- Show relevant advertisements and sponsored content on Kommonly.
- Improve reliability, prevent fraud, and comply with law.
5. How we share information
Your profile visibility is controlled by you. Other families see only what your privacy settings allow (for example, directory listing, map pin, or profile details after a connection is accepted).
We do not sell personal information to third parties. If we work with advertising or analytics partners, we share only what is needed to serve or measure ads on Kommonly, under contracts that limit their use to providing services to us.
We share data with service providers who help us run Kommonly, under contracts that limit their use to providing services to us. These include hosting (e.g. Vercel), database and authentication (Supabase), email delivery (Resend when configured), and map tiles (OpenStreetMap contributors — no personal data is sent to tile servers beyond standard web requests).
If you sign in with Google or Apple, those providers process your sign-in according to their own policies.
We may disclose information if required by law, to protect users and children, or to respond to valid legal process.
6. Children's privacy
Kommonly is intended for use by parents and guardians. We collect minimal information about children only as part of a family profile (first name and age range). Adults at home (19+) may be listed on your profile but are not used for matching.
Children are not listed in the public directory. We design features so that contact between families is between adult account holders.
If you believe we have collected information about a child in error, use Help & support in Settings and we will delete it promptly.
7. Data retention and deletion
We retain your data while your account is active. You may request account deletion in Settings. Deletion is scheduled after a 30-day grace period, during which you can cancel. After that period, we delete or anonymize family data as described in the product, subject to backups and legal retention requirements.
Moderation records may be retained longer where needed to protect the community or comply with law.
8. Security
We use industry-standard measures including encrypted connections, access controls, and row-level security in our database so families can only access data they are permitted to see.
No method of transmission or storage is 100% secure. Please use a strong, unique password and keep your email account secure.
9. Your rights and choices
Depending on where you live, you may have rights to access, correct, export, or delete personal information. You can update most profile data in the app. Use Settings → Account → Download my data for a JSON export of your account and household data only (not other families’ profiles or messages you received). For other requests, use Help & support in Settings.
You can control discovery, notifications, and distance display units in Settings. You can block families and report content that violates our guidelines.
Where required by law, we ask for your consent before non-essential cookies (such as analytics). You can accept or decline analytics cookies using the banner when you first visit Kommonly.
10. International users
We may process and store information in the United States or other countries where our providers operate. By using Kommonly, you understand that your information may be transferred to jurisdictions with different data protection laws.
If you are in the European Economic Area, United Kingdom, or Switzerland, you may have additional rights under GDPR or similar laws, including the right to lodge a complaint with your local supervisory authority.
Our subprocessors include hosting (Vercel), database and authentication (Supabase), email (Resend when configured), analytics (Google Analytics, only with consent), and content moderation (OpenAI when configured).
11. Changes to this policy
We may update this Privacy Policy from time to time. We will post the revised version on this page and update the “Last updated” date. Continued use after changes means you accept the updated policy.