Privacy policy
Effective Date: August 15, 2026 Entity: Kesher Labs, LLC, a Florida limited liability company
1. Overview
This Privacy Policy explains how Kesher Labs, LLC ("Kesher," "we," "us") collects, uses, and shares information when you use the Kesher application and related websites (kesherapp.org, Club-branded sites, and other domains Kesher operates for the Service).
The Service is offered to United States residents and is not directed to, or intended for, individuals located outside the United States.
2. Information We Collect
Information you provide directly:
- Account information: name, email address, phone number, profile photo
- Address information, where provided (e.g., for club mailings or event logistics)
- Club membership and role information (member, officer, prospect)
- Event RSVPs, ride participation, and itinerary information
- Payment records for dues, merchandise purchases, or event fees that a Club officer enters into the Service (currently, Kesher only records that a payment was made and its amount, for the Club's own tracking — payment itself is arranged directly between members and their Club, outside the Service. If Kesher offers in-app payment processing in the future, this Policy will be updated to describe how card or bank information is handled by a third-party payment processor before that capability becomes available)
- Photos and posts you submit to the Club feed
- Waiver acceptance records, including the date/time you accepted a Club waiver or these Terms
- Any content you submit through feedback or support requests
- Device information (device type, operating system)
- App usage data (features used, pages viewed)
- IP address, recorded only as a one-way hash for security and abuse prevention, including at the time of a waiver acceptance. We do not retain the address itself
3. Location Information
The Service does not currently request or collect your device's location. Where a meeting point or route is shown, it opens in your own maps application, which is governed by that application's own privacy terms rather than ours.
If we add a feature that needs location — for example, live ride tracking — we will ask for your permission at the time, this Policy will be updated before that feature is released, and you will be able to decline in your device settings.
4. How We Use Information
We use the information above to: operate and maintain the Service; display rosters, events, and feeds to the appropriate Club members; allow officers to manage dues, merchandise sales, event charges, and membership; send you notifications about rides, announcements, or account activity; maintain records of waiver acceptances for legal and safety purposes; respond to support requests; and improve and troubleshoot the Service.
We do not sell your personal information.
5. How We Share Information
- Within your Club: your name, profile photo, roster status, and RSVPs are visible to other members and officers of your Club, consistent with the Service's normal functionality.
- Service providers: we share information with vendors who help us operate the Service — currently cloud hosting, database hosting, and email delivery — under confidentiality obligations and only as needed to provide their service to us. If Kesher adds a payment processor in the future, that processor will be added here before it goes live.
- Legal requirements: we may disclose information if required by law, subpoena, or to protect the rights, safety, or property of Kesher, our users, or the public.
- Business transfers: if Kesher is involved in a merger, acquisition, or sale of assets, user information may be transferred as part of that transaction, subject to this Policy or a successor policy.
6. Data Retention
We retain account and Club data for as long as your account is active or as needed to provide the Service. Waiver acceptance records are retained for at least five years after the relevant activity, to preserve their evidentiary value, even after account deletion. You may request deletion of your account; some records (e.g., waiver acceptances, dues records needed for Club financial recordkeeping) may be retained as required by law or legitimate business need.
7. Your Choices
You may: update your account information within the app; request an export of your Club's data (officers); request deletion of your account by contacting us; and manage device-level permissions (notifications, camera) through your device settings.
8. U.S. State Privacy Rights
Depending on where you live, state law may give you additional rights over your personal information, including the right to: know what personal information we have collected about you; request a copy of that information; request correction of inaccurate information; request deletion of your personal information; and not be discriminated against for exercising these rights.
California residents: the California Consumer Privacy Act, as amended by the California Privacy Rights Act, gives you the rights described above, plus the right to opt out of the "sale" or "sharing" of personal information. Kesher does not sell your personal information, and does not share it for cross-context behavioral advertising.
Residents of other states with comparable privacy laws (for example, Virginia, Colorado, Connecticut, and others as they take effect) have similar rights, which we honor on the same basis described above.
To exercise any of these rights, contact us at notices@kesherapp.org. We may need to verify your identity before completing your request.
9. Children's Privacy
The Service is intended for adult members of participating Clubs. You must be at least 18 years old to create an account, consistent with the eligibility requirement in the Terms of Service. We do not knowingly collect information from anyone under 18.
10. Security
We use reasonable administrative, technical, and physical safeguards designed to protect your information. No system is completely secure, and we cannot guarantee absolute security.
Where your data is hosted: the Service is hosted on infrastructure located in United States data centers. We do not currently transfer or store personal information outside the United States.
Backups: we maintain routine backups of Service data as part of standard operational practice, to guard against data loss. Backup copies are retained for a limited period and are subject to the same security safeguards as production data.
Independent audits and certifications: Kesher has not obtained a third-party security audit or certification (such as SOC 2) at this time. We may pursue independent security review or certification in the future as the Service grows.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via in-app notice or email to Club officers before they take effect.
12. Contact
Questions about this Privacy Policy can be sent to notices@kesherapp.org.
This Privacy Policy applies to the Service as accessed via kesherapp.org and any Club-branded site or domain Kesher operates that links to or hosts the Service.