Privacy policy

Account information: name, email address, password credentials and, where provided, telephone number and location.

Career record information: employment history, skills, certifications, project descriptions and any documents or links you submit as supporting evidence.

Attestation information: the name, email address, employer and response of any person you ask to attest to a claim.

Usage information: pages viewed, features used, device type, browser type, approximate location derived from IP address, and log data.

To create and operate your account and career record.

To confirm claims you choose to have confirmed, using the methods you select.

To match you with roles and to allow employers to search profiles you have made discoverable.

To operate community features and attribute contributions to you.

To secure the service, prevent fraud and misuse, and comply with legal obligations.

We process personal data on the basis of contract performance (operating your account), consent (optional processing such as marketing email and profile discoverability), legitimate interests (service security and improvement) and legal obligation.

Where processing relies on consent, you may withdraw that consent at any time in account settings.

Employers see only the parts of your profile you have made visible. Supporting documents are never disclosed to employers; only the status of a claim and the method used to confirm it are shown.

Third-party registries and platforms receive only the identifiers necessary to confirm a credential you have asked us to confirm.

Service providers (hosting, email delivery, analytics, payment processing) process data on our instructions under written agreements.

We disclose information where required by law or to protect the rights and safety of users.

We do not sell personal information.

Account and career record data is retained while your account is open. Following deletion, data is removed as described on the data deletion page.

Records we are legally required to keep, such as transaction records, are retained for the period the law requires.

Depending on your jurisdiction, you may have the right to access, correct, export, restrict processing of, object to processing of, or delete your personal data.

Requests can be made from account settings or by writing to privacy@krydapp.com. We respond within the period required by applicable law.

You may lodge a complaint with your local data protection authority.

Data is encrypted in transit and at rest. Access to production systems is restricted and logged. No system is entirely secure, and we do not represent otherwise.

Data may be processed outside your country of residence. Where it is, transfers are made under standard contractual clauses or another lawful transfer mechanism.

Kryd is not directed at, and may not be used by, anyone under 16 years of age.

Material changes will be notified by email or in-product notice before they take effect. The date below records the last revision.

TorestTech Limited, data controller. Written enquiries: privacy@krydapp.com.