Privacy policy

Who we are and scope

MarkMyTech LLC owns and operates Kolsphere and is responsible for the personal information described here. Contact [email protected] for privacy questions, access, correction or deletion requests. This Privacy Policy covers our website, browser app, iOS and Android apps and related services. It does not control what other members do with information they receive, or the practices of third-party websites you choose to visit.

Information you provide

We collect your email address and account name for authentication and your account. Optional profile information includes your picture, profession, bio and date of birth. We also process your chosen interests, created interests, connections, scheduled sessions, posts, comments, reactions, bookmarks, messages, session chat, questions, takeaways and feedback when you use those features. Support requests may include the contact details and information you choose to provide. Please avoid sharing sensitive personal information that is unnecessary for the conversation.

If you choose Google sign-in, Google provides a verified account identifier and basic identity information such as email and name. We use an identity token to verify sign-in, not to request access to your Gmail inbox, contacts or Drive files. Email sign-in remains available. We do not ask for a password to your email account.

If you choose password sign-in, we store a salted, memory-hard password hash rather than the plaintext password. Passwords are used only to authenticate your account and are not sent to Google. Password-reset links contain a secret, single-use token; the server stores a keyed digest of that token. A successful reset does not automatically sign you in.

Activity, technical data and live audio

We process session join and leave events, attendance evidence, speaker and microphone publication events, ratings, reactions, reports and related timestamps to operate sessions and calculate standing. Scores and their supporting source events are associated with your account. We also process network addresses, request information, authentication events, security signals and service errors needed to operate and protect the service. Hosting and delivery providers may keep their own technical logs.

Live audio passes through the configured audio infrastructure to participants. The current release does not provide platform audio recording or snapshot storage. Microphone permission is requested for speaking. Camera and photo-library permissions are optional for selecting a profile picture; we receive the image you choose to upload, not unrestricted access to your library. You can change device permissions in your operating-system settings.

Why we use information

We use information to create and secure accounts, deliver sign-in codes, display profiles and content, run audio sessions and messaging, match interests and bandwidth access, calculate versioned scores, provide notifications and support, investigate errors and abuse, enforce our rules and meet legal obligations. Recommendations and admission rules use product activity and interests; a score is not a statement about your real-world professional competence.

Where a legal basis is required, we rely on performing our agreement for core account and service functions; legitimate interests for proportionate security, integrity and service improvement where these do not override your rights; legal obligations where applicable; and consent when law requires it for an optional use. You can withdraw consent for that use without affecting earlier lawful processing. We do not treat agreement to Terms as blanket consent to every possible use of data.

What other members can see

Your name, username, optional profession, bio, profile picture and content may be visible to signed-in members under the product’s visibility rules. Date of birth is private and is not included in other members’ profile views. Your email is not published on your profile. Accepted connections can see profile standing; other members cannot. Owner activity logs are private. Mutual interests are shown to connections where the app provides that view.

Posts can reach signed-in members outside your bandwidth. Private messages are available to authorized conversation participants; session messages follow session access rules. Presenter-only feedback is restricted to authorized presenters. Reporting controls do not publish reporter identities to the reported person or other participants. This is not a promise that no operator record or legal process could identify a report. Do not rely on chat or messages as end-to-end encrypted communications.

Other people may copy or screenshot content they can access, retain quotations, forward shared links or disclose what they heard. Deleting your account cannot remove copies outside our control. Links and reposts do not grant access to a restricted session.

Service providers and other disclosures

We host Kolsphere’s application, account data and live-audio service. Cloudflare provides domain, website traffic routing and security services. Brevo delivers sign-in emails and processes recipient addresses and message content for delivery. Google processes the identity-verification interaction when Google sign-in is enabled and chosen; choosing Google sign-in does not send your live audio to Google. These providers may process technical and delivery records under their own terms and privacy notices. Contact us with questions about the providers handling your information. We will update this notice if our practices materially change.

Authorized administrators may access records needed for support, security and enforcement. We may disclose information when reasonably necessary to comply with law or valid legal process, protect people and our services, investigate fraud or enforce rights. We may also share information at your direction or in a corporate transaction, subject to applicable safeguards and notice requirements. We do not sell personal information or use member content for cross-context behavioral advertising in this release.

Storage, retention and deletion

We keep account information and active content while needed to provide your account and the features you use. Sign-in challenges expire after ten minutes and account sessions normally expire after seven days; expired records are cleaned during authentication activity rather than guaranteed erased at the instant of expiry. The profile score-change view shows seven days, but balances and supporting score events may remain for the account’s lifetime to preserve integrity. The seven-day display window is not a general deletion deadline.

Deleting a post, comment or account removes the corresponding active database records under the service’s deletion rules. Related source evidence, shared quotations, security or administrative audit records, necessary backups and records required for legal claims may remain where necessary. We limit retention based on the purpose, account lifecycle, security needs and applicable legal obligations; backup and provider retention are separate from immediate app visibility. We do not promise a universal erasure deadline that our infrastructure does not enforce. Contact us for the status or scope of a deletion request.

You can delete your account in Profile → Settings → Delete account. If you cannot sign in, email us from your account address and request deletion. We verify ownership and may ask for enough information to locate the account; never send a sign-in code, email password or unnecessary identity document. Some deletion effects, including content removal and score-source changes, cannot be undone.

Password-reset tokens expire after 30 minutes, and a newer reset request replaces the earlier token. Reset records are removed after use, account deletion or later cleanup. Password hashes remain until changed or the account is deleted. Password changes sign out other sessions; password resets sign out all existing sessions. We send a security notification when a password is changed or reset, subject to email-service availability.

Cookies, local storage and notifications

The browser app uses a session cookie for authentication and a short-lived Google sign-in flow cookie when needed. Browser storage may remember interface choices, and installed apps use protected device storage for credentials. These are used for requested service and security functions; this release does not include advertising tracking cookies. Your browser may also cache public application assets. Blocking essential storage may prevent sign-in or other features.

Notifications cover activity such as session reminders, messages and relevant account events. Available in-app preferences and device or browser settings control their delivery. Essential security and account communications may still be needed. Optional push or other delivery features operate only when enabled and permitted on your device.

Your rights and choices

You can edit profile details, manage interests and connections, remove your own content using available controls, change device permissions and delete your account. Depending on your location and applicable law, you may also have rights to access or obtain a copy of information, correct it, delete it, object to or restrict certain processing, withdraw consent, or appeal a decision on a privacy request. Contact [email protected] to exercise these rights. We verify requests proportionately and respond within applicable legal time limits. We do not charge for an ordinary valid request where law prohibits a fee or penalize you for exercising a protected right.

Some requests are subject to lawful exceptions, such as preserving other people’s rights, necessary security evidence or legal obligations. We will explain relevant limitations where required. You may complain to your local privacy regulator or other competent authority. Contact us if you need an accessible way to submit a request or information about a relevant appeal process.

Security, international processing and age

We use safeguards such as access controls, secure credential handling and restricted administrative access. No system or transmission is completely secure. Protect your email and devices and notify us promptly about suspected compromise. Information may be processed in the United States and other locations used by our configured providers. Where legally required, appropriate transfer safeguards must apply; contact us about processing locations or applicable safeguards.

The beta is intended for adults aged 18 or older and is not directed to children. We do not knowingly offer accounts to children. Contact us if you believe a child has provided personal information so we can investigate and take appropriate action.

Policy changes and contact

We will update this Policy when our practices change and provide notice of material changes through the service or another appropriate channel. The version and effective date identify the current text. New purposes requiring consent will not be treated as authorized simply because this page changes. For questions or requests, contact MarkMyTech LLC at [email protected].