TEMPLATE — pending counsel review. This privacy policy is a working draft and must be reviewed by counsel before public launch. Nothing on this page is legal advice or a final commitment from KinStation.

Privacy Policy

Last updated: June 9, 2026 · Effective only after counsel review

KinStation (“KinStation,” “we,” “us”) is a pet-information platform operated as a subsidiary of Nexudeit Corp. (“Nexude”). It provides a pet & plant encyclopedia covering common to exotic species, per-pet medical history, a behavioral AI assistant, a community Q&A, and related tools across the website, the mobile app, and any KinStation app. This policy describes what information we collect, how we use it, who we share it with, and what choices you have. KinStation is currently available to users in the United States only.

Information we collect

We collect the minimum we need to run the service. The categories below describe everything we currently touch:

Account information. You can create a KinStation account directly with your email address, a display name, and a password (which we store only as a salted hash — we never see it in plain text), or sign in with Nexude single sign-on, in which case we receive your email, Nexude user identifier, and display name from Nexude.
Community posts.If you post in the community Q&A, we store your questions, replies, the topics you tag, and any reports you file. Posts enter a moderation queue and do not appear publicly until approved.
Tank journals (build threads). If you publish a journal, its title, summary, dated entries, and any image URLs you link are public and shown on your public profile under your display name. Journals publish immediately (no pre-review) but can be hidden or removed if they break our rules.
Water-parameter tracker readings. If you use the water-parameter tracker at /tools/water-params, we store each dated reading you log — including temperature, pH, salinity, alkalinity, calcium, magnesium, nitrate, phosphate, ammonia, and nitrite — associated with your account. These readings are private to your account; they are never shown publicly, never shown on your public profile, and are not shared with other users.
Boards. When you create a board, we store its title, description, cover-image URL, the list of saved items it contains, and its visibility setting. Private boards are visible only to you and are never shown on your public profile or in the Boards directory. Public boards— title, description, item list, and cover image — are visible to anyone at the board’s URL, on your public profile if it is public, and in the KinStation Boards directory. Switching a board to private removes it from public view immediately.
Engagement & saves. When you like a post or save (bookmark) a species, morph, plant, or thread, we store that association with your account so we can show your saved items and display like counts. You can remove a like or save at any time by tapping it again.
Pet interests.If you pick pet categories you’re interested in during onboarding or in settings, we store that list to tailor what we show you. You can change or clear it at any time in account settings.
Your collection.When you mark a species or morph as one you keep (“I keep this”), we store that association so you can track your collection and its completion. If you make your profile public (it is off by default), the species in your collection are shown on your public profile.
Follows. When you follow a species or a community forum, we store that preference so we can build your personalized feed. Your follows are not shown on your public profile.
Public profile. Public profiles are off by default. If you turn yours on in settings, your display name, the species in your collection, the community threads you have published, and a reputation score and achievement badges derived from that activity become visible to anyone at your profile URL. You can turn it back off at any time to make your profile private again.
Launch-update emails.If you ask us to email you launch updates — for example, from a prompt shown when you try to save something while signed out — we store your email address for that purpose. You can unsubscribe at any time.
Notifications.We create in-app notifications to tell you about activity relevant to you — for example, when someone replies to a community thread you started. If you keep the reply-notification email setting on, we also email you about them. We may also send a weekly digest email summarizing new activity in the species and forums you follow. You can turn reply-notification emails and the weekly digest off independently in account settings at any time.
Suspensions. If your account is rate-limited or suspended for violating our rules, we keep a record of that for safety and abuse-prevention purposes.
Vaccine-certificate uploads (OCR).If you upload a photo or PDF of a vaccination certificate, we send the image to Amazon Textract to extract candidate fields for your review before anything is saved to your pet’s record. The image is stored in access-restricted storage tied to your account.
Shared records.If you mint a share link for a pet’s medical history, we record that the link exists, what it scopes access to, and when it is used, so you can revoke it.
Pet records you create.If you add pets, we store what you enter — names, species, photos you upload, weights, vaccination dates, allergies, medications, visit notes, and any free-text notes attached to a pet’s record.
Reviewer credentials. If you apply to volunteer as a veterinary reviewer, we collect your full name, license number, issuing US state board, and any documents you upload to verify your license. We use these only to verify you and to display your credentials next to content you sign off on.
Provider listing details. If you list a clinic or sitting service, we store your business name, address, phone, web and social URLs, species you serve, hours, and any photos or descriptions you submit. Listings are public once approved.
Behavioral AI conversations.When you ask the behavioral AI a question, we store the conversation so you can return to it. We may also retain anonymized portions to improve the model’s safety guardrails.
Operational logs. Our servers record IP address, user agent, timestamps, and request paths for security and debugging. Logs are retained for a limited operational window.
Product & usage events.To understand how the product is used and improve onboarding, we record a small set of in-product events tied to your account — for example, when you finish the first-time setup steps (“activation”). We use these in aggregate to measure and improve the experience.
Referrals.If you use the invite (“Invite a Keeper”) program, we store your personal referral code and, when someone creates an account through your invite link, a record linking that account to you so we can credit your reward. If you signed up through someone else’s invite link, we store that you were referred by them. See the referral terms in our Terms of Service.

How we use the information

To provide the features you sign up for — encyclopedia, pet records, first aid, directories, and the behavioral AI.
To verify reviewers and providers before publishing their content.
To send transactional email such as sign-in links, verification confirmations, listing-status updates, and the reply notifications and weekly digest you have left enabled.
To send care-reminder emails when a pet’s vaccine or medication is coming due — only if you keep reminders on. Every reminder has a one-click opt-out, and you can turn a specific record’s reminder off too.
To send reef water-test reminder emails if you use the water-parameter tracker and haven’t logged a reading in a while — only if you keep these reminders on. Every reminder has a one-click opt-out.
To measure how people find KinStation — when you use the Share button, the link includes first-party attribution parameters (e.g. utm_source=kinstation) so we can see that a visit came from a share. These carry no personal information and are not third-party ad tracking.
To investigate abuse, debug crashes, and improve safety guardrails.

We do not sell your personal information. We do not run third-party advertising trackers, analytics pixels, or fingerprinting on KinStation surfaces.

Third-party processors

A small set of vendors process data on our behalf under contract:

Amazon Web Services (AWS). Hosting, database, and file storage (EC2, RDS, S3) in US regions. We also use Amazon Textract to read vaccination certificates you upload for OCR, returning extracted text for your review.
Resend. Transactional email delivery (sign-in links, listing notifications). Resend receives the recipient email and message body.
Anthropic.The behavioral AI sends your question and the relevant grounded context to Anthropic’s Claude API to generate a reply. Anthropic does not train on API content by default.
OpenAI. We use OpenAI embedding models to compute vector representations of encyclopedia and first-aid content for semantic search. User-generated content sent for embedding is limited to what you choose to ask or post.
Cloudflare. DNS and edge protection for kinstation.com.

Cookies

KinStation uses a single first-party session cookie (kinstation_session for native accounts, or the shared nexude_session cookie if you sign in with Nexude) to keep you signed in. We do not set advertising cookies, analytics cookies, or third-party tracking cookies on KinStation pages.

Your rights

You can request a copy of your account data, ask us to correct information, or ask us to delete your account and associated pet records. Send requests to [email protected]. We respond within a reasonable window — usually a few business days while we are pre-launch. Some records (for example, content you have published as a reviewer or provider) may be retained in an anonymized form for editorial integrity.

Data retention

We keep account data for as long as your account is active. If you delete your account, we remove your personal data from primary systems within 30 days, except where we are required to keep records for legal or safety reasons (for example, a record of a banned account). Backups are rotated on a 90-day cycle and are access-restricted.

Deceased users, authorized agents & legal process

The GDPR right to erasure and the CCPA right to deletion apply to living individuals. For a deceaseduser, we honor a documented deletion wish if one exists; otherwise our default is to memorialize (lock) the account. A verified executor may request a structured export of the deceased user’s own records. If you are in the EU, UK, or California, an authorized agent may submit an access, portability, or deletion request on your behalf with a signed authorization and government ID. We respond within 30 days (GDPR/UK) or 45 days (CCPA). All such requests go through identity- and authority-verification (certified proof, manual review, cooling-off, and — for high-authority requests — counsel review and two-person sign-off); we will never reveal a password or transfer login access. Where a valid court order, subpoena, or legal holdrequires it, we will preserve, produce, or erase data as ordered. Start a request at account access.

Children

KinStation is not directed at children under 13. If we learn we have collected information from a child under 13, we will delete it.

Changes to this policy

As we approach public launch we will update this policy. Material changes will be communicated by email to active accounts and posted here with a new “last updated” date.

Contact

Questions about privacy? Email [email protected]. Until forwarding is in place, you may also reach the operator directly at [email protected].