These notices describe the current pre-launch website and private testing. Public earning and cashouts are not available. Launch terms and the remaining operator details will be published before the service opens. Operator & contact information
Who is responsible
KairoEarn is a pre-launch project based in the Netherlands. The legal operator identity and correspondence address have not yet been finalized for publication. New waitlist signups are paused. For existing data, support or privacy requests, contact support@kairoearn.com.
What this notice covers
This notice covers the public website, existing waitlist records, support enquiries and private account/provider testing. Public earning and payouts are not live. The lawyer review and some provider retention and international-transfer arrangements are not complete. This notice is not a claim of certification or a completed compliance audit.
Launch waitlist
New waitlist signups are paused while we confirm and publish our operator details. Existing subscribers can still remove their signup using their email link or contact support@kairoearn.com. Existing records contain an email address, optional country, coarse signup source, confirmation time and consent version. The waitlist does not create an earning account. Resend handles confirmation and launch/availability emails based on signup consent. Unconfirmed records become eligible for removal after eight days and waitlist records after one year; cleanup is triggered when the waitlist is used, so eligibility does not guarantee immediate deletion. Removal links and support remain available during the pause. Country is optional and consent can be withdrawn without affecting earlier lawful processing.
Accounts and preferences
Private account features process email, display name, optional avatar and phone number, phone-country choice, country and payout-currency preference. Authentication processes credentials, confirmations, sessions and enabled security factors. Onboarding asks for a coarse age group or prefer not to say, plus optional interests, not exact birth date, gender, income or precise location. Older records may contain previously supplied gender or income groups; these are not used for matching and can be requested for deletion. Task, referral and reward records support the features you use. Required account information is needed for those features; optional interests can be left blank. An undisclosed age is not treated as adult eligibility.
Purposes and processing grounds
Waitlist emails and optional analytics use consent, which you can withdraw. Account administration, task history and replies to enquiries support the service you request. Proportionate rate limits, account security, duplicate-reward prevention and network checks protect users and the service under legitimate interests. Records may also be needed for applicable legal obligations or disputes. Accepting terms or a provider disclosure is not blanket marketing or cookie consent. Support contacts are not automatically subscribed to marketing. The purpose-by-purpose legal assessment remains part of the pre-launch review.
Survey tests and data sharing
TheoremReach receives an account identifier, IP address and country after its disclosure is accepted; a launch adds a survey-session identifier. CPX Research administrator tests send a test account identifier, IP address and browser user-agent; a launch adds a session identifier and signed return token. These requests do not send name, email, phone or onboarding answers. Providers and survey destinations process their questions and answers under their notices. KairoEarn records session times, disclosure version, transaction and offer/survey identifiers, points, USD revenue, outcomes and reversals for accounting and support, not survey answers or full signed URLs. Test results are not withdrawable rewards. Opening a survey does not grant blanket consent to third-party nonessential cookies.
Lootably game and video previews
The private test catalogue requests country-filtered offers without sending user identifiers, IP addresses or user-agent data in the catalogue request. Test starts record a session and offer/milestone snapshot without opening an advertiser tracking link. Reward callbacks can record provider/offer identifiers, a hashed user reference, session and goal identifiers, revenue, points and status changes. Images and external provider pages can receive connection information when loaded. Viewing a preview does not enable public live access. A future live integration would share a pseudonymous account reference, connection IP, browser user-agent and session reference for eligibility and attribution, after its disclosure is accepted.
Support and disputes
Zoho Mail handles email enquiries, which may be forwarded to the founder for a reply. Signed-in missing-points reports store a task reference, explanation, timestamps and replies linked to the account and are visible to you and the administrator. Do not include credentials, identity documents or bank details. Records are used to answer your request and investigate issues, not automatically for marketing. Email records are separate from account and waitlist records.
Profile and leaderboard visibility
The leaderboard shows display names, profile pictures and lifetime verified points for eligible public profiles to signed-in members. Change profile visibility in Settings. Private profiles appear to other members as Private player without a photo; their rank and points remain visible. Your own name, photo and rank remain available to you. Pending, reversed and demo rewards do not count. Emails, phone numbers, individual transactions and demographic answers are not shown. Referrers can see a limited summary of referred players activity and earnings, not survey answers, contact details or payout destinations. Choose a display name and image you are comfortable showing.
Network security and human review
Authenticated API requests record a keyed hash of the connection IP, account identifier and observation time for abuse review. The hash is personal data, not anonymous data. Observations are retained for 30 days and removed by an hourly cleanup job or associated account deletion. A shared IP is not proof of abuse. When configured, IPinfo checks connection IPs for VPN, proxy, Tor, relay, hosting and residential-proxy signals. Returned location and venue details are discarded; a keyed IP hash and allow/block decision are cached for five minutes. Missing or failed checks can prevent starting tasks. Automated signals alone do not prove fraud or authorize forfeiture: request human review through support@kairoearn.com. Hosting/provider logs may still contain raw IPs.
Optional public-page analytics
Only with optional analytics consent, public information pages can load Vercel Web Analytics and Speed Insights, plus PostHog EU when configured. We exclude account, authentication, onboarding, administration and survey pages, URL queries/fragments, account IDs, emails, input contents, survey answers and balances. PostHog uses in-memory identifiers with recordings, persistent identifiers and person profiles disabled; structural click information may be measured. Receiving providers still process connection information. Rejection, withdrawal, Global Privacy Control and Do Not Track disable these measurements. Change your choice through Analytics preferences.
Active time and service reliability
Optional active-time measurement uses a random in-memory visit identifier and cumulative active seconds, without account identifiers, URLs, raw IPs or device identifiers in its table. Idle periods and hidden tabs are excluded. Reports cover 30 days; expired records are removed on subsequent writes. The administrator sees aggregates. Separate anonymous daily provider-request counters contain only date, provider and success/error counts. Reports cover 30 days and expired counters are removed on subsequent writes. They do not measure success inside external provider sites.
Providers and international transfers
Supabase supplies authentication and databases; Vercel hosts this site and optional analytics; Cloudflare supplies DNS and configured Turnstile security checks; Resend handles waitlist emails; Zoho Mail handles correspondence. Google processes data when you choose Google sign-in. IPinfo supplies configured network checks and PostHog EU supplies configured optional analytics. Survey/game and external media providers receive information described above when used. OpenAI Sites may host a separate private preview. Providers can process data outside the EEA. The complete processing-location, retention and transfer-safeguard review is unfinished; contact support@kairoearn.com for the information available for your data. New identity, SMS or payout providers will be identified before data is collected for them.
Retention, deletion and security
You can request deletion at any time. Eligible preview accounts can be deleted in Settings > Security after recent sign-in and confirmation, removing login, profile, onboarding, activity and referral links from the live database. Reward records or unresolved disputes require support review so valid claims are not silently discarded. We will explain records that must be retained and why. Account deletion does not automatically delete separate waitlist signups, emails, external-provider records or backups. Waitlist, network and analytics retention is described above; final schedules for support, financial records and provider backups are not settled. Do not assume they disappear immediately. Access controls and authentication are used, but no online service guarantees absolute security.
Your privacy rights
Email support@kairoearn.com to request access, correction, deletion, restriction, portability or to object, subject to applicable law. We respond without undue delay and normally within one month. Where the law allows an extension for complex or numerous requests, we will explain it within that month; the extension is at most two further months. Proportionate verification may be needed, but do not send identity documents unsolicited. Withdraw optional consent without affecting earlier lawful processing. You may complain to the Dutch Autoriteit Persoonsgegevens or another competent authority; contacting us first does not remove that right.
Children and updates
The earning service is not intended for under-18s. Public phone answers and illustrative points stay in page memory and are not submitted as survey responses. Do not submit another person's information. Material changes to processing will be explained before they apply, with new consent where required.