Privacy Policy

1. Information We Collect

1.1 Information You Provide Directly

Account Information

• Name
• Email address
• Username
• Password (stored in hashed form)

Profile Information (Optional)

• Bio
• Avatar image
• Timezone
• Locale

User Content

• Knowledge entries
• Comments
• Messages
• Images, audio files, and other uploaded files

Verification Information (If You Apply for Verification)

• Government-issued ID documents (passport, driver's license, national ID, or similar)
• Written statement submitted as part of verification request
• Verification review metadata (approval or rejection status, timestamps)

1.2 Information Collected Automatically

When you use the Platform, we may collect:

• IP address
• User agent string
• Device type
• Browser type
• Login timestamps
• Failed login attempts
• Session identifiers
• Reading history
• Engagement metrics (likes, follows, bookmarks)
• Analytics events (such as page views and feature usage)

1.3 System-Generated Data

We generate and store:

• Reputation scores
• Writing streaks
• Milestones
• Trending scores
• Audit logs of administrative and moderation actions

2. How We Use Your Information

We use information to:

• Provide, operate, and maintain the Platform
• Authenticate users and secure accounts
• Process identity verification requests
• Detect and prevent fraud, abuse, or security threats
• Moderate content and enforce policies
• Personalise user experience
• Improve features and functionality
• Comply with legal obligations

We do not sell your personal information.

3. Legal Basis for Processing (International Users)

Where applicable under data protection laws (including GDPR), we process personal data based on:

• Performance of a contract (to provide account services)
• Legitimate interests (security, moderation, analytics, fraud prevention)
• Consent (verification submissions and optional communications)
• Compliance with legal obligations

4. Identity Verification Data

Users who apply for verification must submit government-issued identification documents. We process verification data solely to confirm user identity, to prevent impersonation and fraud, and to improve trust and accountability on the Platform.

Security Measures

• Documents are encrypted at rest
• Documents are encrypted in transit using TLS
• Access is restricted to authorised administrators
• Access and review actions are logged

Retention

Verification documents are retained only as long as reasonably necessary to complete the verification process and mitigate fraud risk. Verification documents may be permanently deleted at our discretion or upon account deletion, subject to legal retention requirements.

5. Messaging Data

Private messages are encrypted at rest. We do not actively monitor private messages. Messages may be reviewed only if reported for policy violations or required by law.

6. Data Sharing

We do not sell personal information. We may share information with:

• Infrastructure and hosting providers
• Cloud storage providers
• Email service providers (for transactional communications)
• Security and fraud-prevention tools
• Legal authorities where required by law

All third-party providers process data on our behalf under appropriate contractual safeguards.

7. Data Retention

We retain personal information:

• For as long as your account remains active
• As necessary to maintain security and prevent fraud
• As required to comply with legal obligations

If you delete your account, certain information may remain in backups or logs for a limited period before permanent deletion. Analytics data may be retained in aggregated or anonymised form.

8. Your Rights

Depending on your jurisdiction, you may have rights to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Request restriction of processing
• Request data portability
• Object to certain processing activities

Requests may be submitted to: legal@indigenous-knowledge.app. We may require identity verification before fulfilling requests.

9. International Data Transfers

The Platform is operated from the United States. If you access the Platform from outside the United States, your information may be transferred to and processed in the United States or other jurisdictions where our service providers operate. By using the Platform, you consent to such transfers.

10. Security

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

11. Children's Privacy

The Platform is intended for individuals aged 18 and older. We do not knowingly collect personal information from individuals under 18 years of age.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Continued use of the Platform after changes are posted constitutes acceptance of the revised policy.