Loading
You're looking at a live Kinmoot hub. Want one of your own?
Get StartedAt Kinmoot, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our property investment marketplace.
We use your information to:
We may share your information with:
Not every site built on Kinmoot is run by us. Some are run by our customers — a property educator or sourcing business with their own branded site and their own members. If you joined through one of those sites rather than through kinmoot.com, then that business, and anyone they have made an administrator of their site, can see the following about you from the dashboard we give them:
Where your name appears in that list it is the name you gave on the form in question, not a name taken from your account — except for an introduction you ask for in the member app (section 8), which uses the name and email address on your account. What they can see is limited to their own site: they cannot see what you do on kinmoot.com, or on any other site run on Kinmoot that you belong to.
A business running a site on Kinmoot can connect an AI assistant — such as Claude, ChatGPT or a similar tool — so that they can ask questions about their own site rather than reading the dashboard themselves. Where they do:
If you want to know whether the site you joined through has connected an AI assistant, and which one, ask the business running it. If you would rather they did not, that is a decision for them and not for us — but you can ask us to delete your data at any time under section 6 below.
If you run a hub, or source deals for one, you can upload your own feasibility spreadsheet, a property brochure and photographs of the property and its paperwork, and have the figures read out of them into a draft listing. When you do, the text of the sheets you select, the text of the brochure, and the photographs themselves, are sent to Anthropic PBC in the United States, which returns the figures it found. Email addresses and telephone numbers are removed from the text before anything is sent to Anthropic. Nothing is removed from a photograph: it is made smaller and sent as it is, so anything written in it goes too.
Anthropic does not use this content to train its models, and deletes inputs and outputs within 30 days. We keep the text of the sheets and the brochure you upload — exactly as uploaded — and the photographs, together with what was read from them and what you changed while working on the draft, whether or not you go on to publish it, for twelve months, so that we can measure and improve the reader. That stored copy still includes any email addresses or telephone numbers in your original document; only the copy sent to Anthropic has them removed. A copy of each photograph is also added to the deal's own private record, with the rest of your evidence for that deal: that copy belongs to the deal and stays with it, rather than being deleted after twelve months. The extracted figures we use so that re-opening the same sheet does not need a second reading are still deleted after 30 days. Nothing read this way is published: it becomes a draft that you review, edit and submit yourself. Ask us at the address in section 12 to delete any of this sooner.
If you run a hub, you can have Claude, Anthropic's AI, draft the posts for a campaign. When it does, your message, where its link goes, your hub's name, your writing style note, the opening lines of up to three emails or posts you wrote yourself on your hub, and the place, type and description of any deals you pick are sent to Anthropic PBC in the United States, which returns the drafts. We do not send your members' details or the automatic emails your hub sends them, but anything you wrote in those opening lines goes as it is. The drafts are kept with your campaign for you to edit. Anthropic does not use this content to train its models, and deletes inputs and outputs within 30 days. If you choose to write the posts yourself, nothing is sent.
We are testing a tool on kinmoot.com that checks the figures a property sourcer has given you against market data. While we test it, only people we invite can use it. To decide who sees it, we check with PostHog whether it is switched on for your account, whatever you have chosen about analytics cookies. Our server checks before it answers any page or request of the tool, using your account identifier. Your browser checks whenever you are signed in, to show or hide its link in the menu, and sends PostHog the identity it holds for you: your account identifier and your email address.
If you use the tool:
We use this information to provide the tool you have asked to use, which is necessary for our agreement with you. We check who may see it, and measure how well it works, in our legitimate interests: keeping a tool that is still being tested to the people invited, and improving it.
Your analyses, and the record that you accepted the note, are kept for as long as your account exists and are deleted with it. We also keep a dated record of each request we make to PropertyData and what it answered: the postcode or district and the property details sent, the answer, when it was made and what it cost. PropertyData's licence lets us keep these as dated records, and we keep them with no end date, to show what we asked for and paid for. When you delete your account, they no longer record who asked.
Where "Ask Kini" appears on a site, you can ask Kini, our help assistant, how to use it. Kini answers from our help articles and, if you are signed in, from a read-only look at your own account on that site: your role, whether your profile is complete and the sites you belong to, the deals you have registered interest in or submitted, your course progress and your booked calls, and, if you run the site or help run it, what is waiting for you there. It cannot change anything, and it gives no property or financial advice. If you are not signed in, Kini reads no account, and your conversation is stored under a random identifier rather than your name.
When you ask, your question, the conversation so far, the help articles it uses and what it reads about your own account are sent to Anthropic PBC in the United States, which writes the answer. Anthropic does not use this content to train its models, and deletes inputs and outputs within 30 days.
We keep your conversations for twelve months after your last message, and then delete them; if you delete your account sooner, they go with it. Kinmoot can read them, to see where our help falls short. The business running the site cannot: it sees only topics and unanswered questions shared by at least three people, never who asked. To improve our help articles we use anonymised rewrites of the questions Kini could not answer, never what you typed. If Kini cannot answer and you ask it to pass your question on, your question and a short summary are emailed to the business running the site, or to us on kinmoot.com, with your email address so that they can reply to you.
When you book a call on kinmoot.com, the calendar is provided by Calendly, Inc. in the United States. The name, email address and any notes you enter go to Calendly and to us, so that we can hold the call and contact you about it. If you have allowed analytics and advertising cookies, we also tell Google Analytics and Meta that a call was booked, so we know which of our adverts work; we do not send them what you entered.
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.
You have the right to:
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection, at ico.org.uk/make-a-complaint. We would appreciate the chance to address your concerns before you approach the ICO, so please do contact us first — by email at privacy@kinmoot.com or by phone on 07706 029772.
We use cookies and similar tracking technologies to improve your browsing experience, analyze site traffic, and understand where our visitors come from.
Cookies are small text files that are stored on your device when you visit our website. They help us recognize your device and remember certain information about your visit.
With your analytics consent, we use the following providers to understand how the site is used and to fix problems. Until you give that consent, none of them receive any information about your visit, with one exception. When you are signed in, your browser asks PostHog which features are switched on for your account, whatever you have chosen, and sends it your account identifier and email address to do so (section 4.5 describes one such feature). Until you consent, that is all PostHog receives: no events, page views or recordings. PostHog stores only an empty record and a note of your choice on your device — no identifier is created.
We also use Sentry to record technical errors. Error reports contain the page, browser and a technical stack trace, plus your account identifier if you are signed in. They do not include your email address, and error reporting is not used to track or profile you.
You can manage your cookie preferences through the cookie banner shown on your first visit to any site run on Kinmoot, including the sites described in section 4.1. You can change your choice at any time afterwards using the Cookie settings link in the footer of any page. Withdrawing analytics consent stops event collection immediately, and stops session recording wherever it applied.
A business running its own site on Kinmoot (see section 4.1) may add its own advertising and analytics tags, such as a Meta pixel, Google Analytics or Google Ads. These are set and controlled by that business, which decides how the information is used, and they load only if you accept marketing cookies (for advertising tags) or analytics cookies (for Google Analytics). The cookie settings on that site name the tools it uses. They record that a page was viewed, a quiz was completed or a call was booked; we do not send them your name, email address or answers.
Kinmoot advertises on Meta (Facebook and Instagram) and Google. The step on kinmoot.com where you set up your hub has a box that says “Let Kinmoot measure which ad brought you here”. It is unticked unless you tick it, and your hub works the same either way.
If you tick it, we tell Meta that you opened a hub and, if you later take a paid plan, which plan and what it cost; and we tell Google Analytics that you opened a hub. We do this so we can tell which of our adverts work, and we do it on the basis of the consent you give by ticking the box, even if you declined marketing or analytics cookies. That consent covers these messages only: ticking the box does not change your cookie choices, sets no advertising cookies and does not load Meta’s pixel.
Meta receives your email address and account identifier, each scrambled (hashed) on our servers before it is sent, so that Meta can only match them to an account it already holds; your IP address and browser details; and Meta’s own cookie identifiers if you have accepted marketing cookies. Google Analytics receives that a hub was opened, without your name or email address. Meta and Google handle what they receive under their own privacy policies.
We keep a record of when you ticked the box, for which hub, and the exact wording you saw, and it is included when you download your data. You can withdraw your consent at any time by emailing privacy@kinmoot.com; we then send nothing more on the strength of it. Withdrawing cannot recall what has already been sent.
Members of a hub run on Kinmoot may be given a mobile app carrying their own organisation’s name. The app is a second way into the same hub, it holds no separate account, and this policy covers it as it covers the website. It has no cookies, so section 7 does not apply to it; what follows does instead.
What you send through the interest, booking and introduction forms goes to the business running your organisation’s hub, as described in section 4.1.
The app has nothing to buy in it and asks for no payment details. It does not use your location, your contacts, your photos, your microphone or your camera.
Besides Sentry and PostHog (sections 8.3 and 8.4), the app relies on the following services, and each receives the information described:
The app sends crash and error reports to Sentry so that a fault reaches us without you having to report it. Crash reporting is always on and has no setting in the app. A report carries the error, the device model and operating system version, and your Kinmoot account identifier — never your email address, and never a screenshot or recording of your screen. For a sample of sessions the app also sends Sentry performance measurements, such as how long the app took to start and to load information.
Product analytics in the app go to PostHog (EU region), the same provider named in section 7.3, and they are switched off until you switch them on. A fresh install sends nothing. If you turn on “Help improve the app” in Settings, we record a fixed set of named events: for example that you signed in, that a notification arrived or was opened, that you viewed a deal or registered interest in one (and which deal), that you started or finished a lesson (and which lesson), or that you booked a call. We also record when the app is installed, opened, updated or moved to the background, with basic information about your device and the app version. We do not record every screen you open or everything you tap. These events are linked to your Kinmoot account identifier and to your organisation, the same identifier the hub’s website uses. You can turn analytics off again in the same place at any time, and collection stops immediately.
The app never records your screen. Session replay and screenshot capture are both disabled in the app deliberately and permanently, because the screens in it show live deal details and an organisation’s own course video. There are no advertising or ad-measurement services in the app, and nothing it collects is shared with a data broker or used to track you across other companies’ apps and websites.
You can delete your account in the app, from Settings, then Delete account, or on the web at /account/delete on the site you joined through. Your other rights over your data are set out in section 6.
If you run a hub on Kinmoot, you can connect your Google Calendar so that members can book a call with you at a time you are genuinely free. This section applies only to the person who connects the calendar. Members who book a call never connect one, and nothing here applies to them.
We ask for two permissions and no others:
calendar.freebusy). This returns the start and end times of the things in your calendar, and nothing else. We use it to remove times you are already busy from the slots your members are offered.calendar.events). We add a booking to your calendar when someone books, and remove it if the call is cancelled.We never read the contents of your calendar. Not the title of a meeting, not its description, not its location, not who else is attending. The narrower permission above returns busy periods only, which is why we ask for it instead of full calendar access. Events we did not create are, to us, an anonymous block of time.
We do not copy, mirror or store your calendar. Your availability is fetched from Google at the moment a member looks at your booking page and is not retained afterwards.
You can disconnect at any time from Book a call in your hub dashboard, which stops all access immediately. You can also revoke it directly from your Google Account under Security, Third-party apps with account access. Disconnecting does not delete bookings already made, so that neither you nor your members lose a record of them.
Kinmoot’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, we do not sell it, we do not transfer it to anyone except as needed to provide the booking feature, and no human reads it except where you ask us to help with a specific problem or where the law requires it.
Our services are not intended for individuals under the age of 18. We do not knowingly collect or maintain information from children.
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.
The data controller for the personal data described in this policy is Kinmoot Ltd, a company registered in England and Wales under company number 17381326, whose registered office is 66 Paul Street, London, EC2A 4NA.
Kinmoot Ltd is registered with the Information Commissioner's Office under registration reference ZC223910.
If you have any questions about this Privacy Policy, please contact us at privacy@kinmoot.com or on 07706 029772.