Privacy Policy

1. Information We Collect

Because KithBox is a private, family-centric platform, we only collect the minimum amount of information necessary to provide a secure sharing environment:

• Account Information: When you register, we collect your name, email address, and a securely hashed password. If enabled, we also process security keys/passkeys and two-factor authentication (2FA) configurations to protect your account.
• Family Media Content: We store the photographs, home videos, descriptions, and comments that you upload or post to your family's private albums.
• Media Metadata: To facilitate clean rendering and processing, we store basic file metadata, including original file names, MIME types (formats), and media sizes.
• Engagement Data: We record the comments you write and the "likes" you give to photos within your family albums.
• Cookies and Session Data: We use native Laravel session cookies strictly to keep you securely signed in and protect against cross-site request forgery (CSRF) attacks.

2. How Your Information Is Stored & Processed

To ensure your media is safe and performs well, we integrate with industry-leading providers:

• Cloud Media Storage: Your physical photos and videos are securely uploaded to, stored by, and streamed from our cloud media provider, Bunny.net. No media is publicly indexed, and it is only accessible via secure, authenticated tokens.
• Database Records: Your account credentials, comments, likes, and album descriptions are stored securely in our private database.

3. Sharing Your Information

• No Third-Party Sharing: KithBox does not sell, rent, or trade your family's personal data or uploaded media with third-party advertisers or marketers.
• Family-Only Access: Your albums and media are strictly private. They are only visible to you and the specific family members you explicitly invite via secure, private email links.

4. Data Security & Retention

• Your passwords are encrypted using high-grade hashing algorithms (BCRYPT).
• If you or the album owner delete an album, all associated media files are permanently deleted from our databases and immediately purged from our Bunny.net cloud servers.

5. Your Rights & Control

• You have full control over your media. You can upload, rename, or permanently delete your photos and albums at any time.
• You may update your user profile or delete your account through your account settings.