KINGUILD / Pre-release information · updated 23 October 2026
Privacy
Scope and operator
This notice describes the pre-release KinGuild website and current app implementation, operated by Mono Hut LLC. Privacy and deletion requests: alistaira@monohut.homes. The app is not publicly released; this notice will be updated for the final release.
Visiting this website
The website requires no account, sets no advertising or analytics cookies or local storage, and has no form for health records. Hosting and HTTPS/CDN services may process IP addresses, request times, paths and browser information to deliver and secure pages. Domains use Cloudflare proxy services, which may process connection metadata. The currently injected analytics script is blocked by our content security policy.
Accounts and social activity
The app processes usernames, display names, password verification information, sessions and recovery credentials for accounts. Friend relationships, accepted challenges, circle text and reports require server processing. Registration does not require an email address or phone number; an invitation code is optional. Passwords and session credentials are not public profile data.
Health, body and location data
The body journal and local run records use encrypted on-device storage. This does not mean all data never leaves the device. Local personal runs differ from formal challenge submissions: when you explicitly agree to submit challenge evidence, required results and encrypted route evidence are sent to the server for validation. Location and health access require system permission, which you can manage in iOS Settings.
Sharing by choice
Result cards hide nicknames by default and exclude route maps, body journals and friends’ results. After preview, the system share sheet passes the image to your chosen app or recipient, whose subsequent handling is outside the card’s controls.
Protection and deletion
We use access controls, HTTPS, hashed credentials and encryption for specific sensitive records. Security measures cannot guarantee absolute safety. Accepted account deletion locks the account, revokes sessions and cleans profile details, relationships, your cloud route evidence and encrypted records on this device in stages. The saved receipt checks progress after sign-out. Unresolved appeals retain related evidence with a waiting status. Completion retains minimal technical records for shared results, moderation and preventing account revival after a backup restore. Backups, other devices, original HealthKit records and shared images are not instantly cleared by this process. We do not promise a fixed completion period.
Disclosures still required before launch
Final retention periods, backup removal, the full processor and region inventory, applicable regional rights and any future AI data flows will be finalized with release configuration. This notice does not present unconfigured or unaccepted functionality as publicly available.