Privacy Policy

The short version

• What we collect: the profile you post (Kik username, age, gender, country, bio, your public Kik photo), your email and password, and technical data such as your IP address and security logs.
• Why: to publish your profile at your request, keep the site safe (including automated screening), show ads that fund the free service, and respond when you contact us.
• Who else is involved: Google (advertising, analytics, consent management), Cloudflare (delivery and human verification), and service providers for hosting, email delivery, AI content moderation, and fraud prevention.
• Your rights: you can edit or permanently delete your profile yourself at any time, and you have the additional rights described below. Questions: contact us.

Who we are

KikFriendz operates kikfriendz.com and is the controller responsible for the personal data described in this policy. For anything related to your data or this policy, use the contact form; messages go straight to the team. KikFriendz is an independent website with no affiliation to Kik Messenger or its owner.

What we collect

Data you give us. When you post your Kik, we ask for your Kik username, age, gender, email address, a password, and an optional short bio. Your country is set automatically at signup (see below) and can be changed in your profile settings. Your password is stored only in hashed form, so we cannot read it. When you accept the Terms and Conditions, we also record which version you accepted and when.

Data from your public Kik profile. We check that the Kik username you enter exists and retrieve the public display photo from your Kik profile, which becomes your KikFriendz profile photo. We may re-check your public Kik profile when you edit your KikFriendz profile.

Data collected automatically. When you use the site we process your IP address and data derived from it (approximate country, network identifiers, and signals that an address belongs to a proxy, VPN or known abuse source). We keep security records such as failed sign-in attempts, password-reset requests (including browser information), and a minimal record when a profile is deleted. Cookies and similar technologies are covered in the cookies section.

Data from other users. If someone reports your profile or mentions you when contacting support, we receive and store that report or message.

Your profile is public

KikFriendz is a directory. The profile you post (your Kik username, age, gender, country, bio and photo) is published openly on the site, may be cached by our content-delivery network, and is indexed by search engines. Anyone, on or off KikFriendz, can see it and contact you on Kik. Do not put anything in your bio you don't want public.

Your email address, IP address and security data are not public, are never shown to other users, and are never sold.

How we use your data, and our legal bases

• Running the service: publishing your profile at your request, signing you in, sending account emails (activation, password reset, replies to your messages, important account notices). Legal basis: performance of our contract with you (the Terms and Conditions).
• Safety, moderation and fraud prevention: screening profiles, photos and reports; detecting bots, spam, under-18 users and rule violations; keeping security logs; enforcing bans and anti-abuse cooldowns. Legal basis: our legitimate interest in keeping an age-restricted service safe and lawful, and legal obligations where they apply.
• Advertising and analytics: funding the free service with ads and understanding site usage. Legal basis in the EEA, UK and Switzerland: your consent, asked for via the cookie banner and withdrawable at any time.
• Legal compliance: responding to lawful requests from authorities and establishing or defending legal claims. Legal basis: legal obligation and legitimate interests.

Providing the profile fields, an email address and a password is required to post a profile; without them the service cannot be provided. Everything else is optional.

Automated screening and moderation

To keep the site safe we use automated systems, including AI, that screen profile text, usernames and photos (including estimating whether a photo appears to show a person under 18), evaluate reports from other users, and assess network signals such as proxy or VPN use and the reputation of the connecting address. These systems can automatically reject content, hide a profile, or restrict an account, and signing up through anonymizing networks may be blocked.

If an automated decision affects your account and you believe it is wrong, contact us and a human will review it. We deliberately do not publish the detailed rules and signals these systems use, because doing so would help the spam and abuse they exist to stop.

Advertising and analytics

The site is funded by Google AdSense. Google and its partners use advertising cookies to serve ads. With your consent (or, outside consent regions, unless you opt out), Google also personalizes those ads based on your visits to this and other websites. You can read how Google uses information from sites that use its services and manage ad personalization in Google Ads Settings.

We use Google Analytics to understand overall site usage (pages visited, approximate region, device type).

If you are in the EEA, UK or Switzerland, a banner asks for your consent before advertising or analytics cookies are set. What each cookie does, and how to change your choice later, is covered in the cookies section below.

Cookies and similar technologies

Cookies are small files stored in your browser; we also use browser storage for one preference. What we use:

• Strictly necessary: a session cookie that keeps you signed in, a CSRF cookie that protects forms, and Cloudflare Turnstile, which verifies you're human on the signup, contact, report, password-reset, bump and profile-edit forms. These are required for the site to work and don't need consent.
• Preferences: a "kf-theme" value in your browser's local storage remembering light or dark mode. It never leaves your browser.
• Analytics: Google Analytics cookies measuring site usage. Set only where you have consented.
• Advertising: Google advertising cookies used to serve ads, prevent ad fraud, and (with consent, or unless you opt out where opt-out applies) personalize ads. See the Google cookie policy.

You can withdraw or change consent any time via Cookie Settings in the footer, and block or delete cookies in your browser settings; the site keeps working, though you'll need to sign in again. Refusing advertising and analytics cookies does not remove ads; it makes them non-personalized.

Who we share data with

• Google: advertising, analytics and consent management, as described above.
• Service providers acting on our instructions: hosting and infrastructure providers, content-delivery and security providers, email delivery providers, AI content-moderation providers, and fraud- and abuse-prevention services.
• Everyone: the public profile you asked us to publish.
• Authorities: if required by law or to protect the safety of users, we may disclose data to law enforcement or other authorities.
• Service continuity: if KikFriendz is ever transferred to a new operator, account data would transfer with it under this policy.

We do not sell personal data. Beyond the Google advertising described above, we do not give anyone your data for marketing of their own.

International transfers

Our service providers process data on servers in the United States. Where data of EEA, UK or Swiss users is transferred there, we rely on appropriate safeguards: providers certified under the EU–US Data Privacy Framework (and its UK and Swiss extensions) and/or standard contractual clauses.

How long we keep data

• Your account and profile: until you delete them, or until we delete them because the account has been unused for more than 24 months. (This rule is being phased in: the first removal will run by January 2027.) Deleting a profile permanently removes the account and photo from the live site; cached copies expire and short-term infrastructure backups roll over shortly after.
• Unverified accounts: never published; from 24 hours after signup the account counts as expired and is deleted automatically, freeing the username and email for a new registration.
• Deletion records: when a profile is deleted we keep a minimal record (username, network address, date) for up to 30 days to prevent abuse of deletions and re-registrations.
• Security and moderation records: failed sign-in records are kept for up to 90 days, password-reset logs for up to 12 months, and reports, support messages, account change history and moderation decisions for up to 24 months. Records that back an enforcement action (such as a ban) are kept for as long as that action stands.
• Backups: automated database backups exist for disaster recovery and expire automatically after about 7 days.

Your GDPR rights (EEA and UK)

If you are in the EEA or the UK, the General Data Protection Regulation (GDPR) gives you the right to access your data and get a copy, correct it, or have it erased. You can also restrict or object to processing based on legitimate interests, receive data you provided in a portable format, and withdraw consent at any time (for cookies, via Cookie Settings) without affecting past processing.

The fastest route for most of this is self-service: edit your profile to correct it, or use Delete profile in the account menu to erase it. For anything else, contact us; we may ask you to confirm control of the account email before acting, and we respond within one month (for unusually complex requests the law allows up to two further months, and we'll tell you within the first month if that applies). You also have the right to complain to the data protection authority in the country where you live.

Your US state privacy rights (CCPA and similar laws)

Under US state privacy laws, including the California Consumer Privacy Act (CCPA/CPRA), you may, depending on your state, have the right to know and access the personal information we hold about you, correct it, delete it, and obtain a portable copy. You may also opt out of "sharing" and of the use of personal information for targeted advertising. We do not sell personal data; the only "sharing" we do (as some state laws define it) is the personalized-advertising cookie activity described above. Opt out via Cookie Settings in the footer; we honor the Global Privacy Control browser signal where required. We do not respond to legacy "Do Not Track" browser signals.

To exercise any of these rights, use the self-service options or contact us; an authorized agent may submit a request on your behalf if you give them written permission. We verify requests against the account email, do not discriminate against you for exercising rights, and respond within 45 days (extendable once by another 45 days where reasonably necessary; we'll tell you if so). If we refuse a request you may appeal by replying to our decision; if the appeal fails you can contact your state Attorney General.

Age requirement

KikFriendz is restricted to persons aged 18 or older, and we do not knowingly collect data from minors: signup requires an age confirmation, and automated and human moderation work to detect and remove underage profiles. If you believe a minor has a profile, please report it; the account and its data will be removed.

Security

All traffic to the site is encrypted (HTTPS). Passwords are stored using a modern one-way hashing algorithm. Sign-in is rate-limited, sensitive forms are protected by human verification, and account data is accessible only to authorized staff for support and moderation. No online service can promise perfect security, but if we learn of a breach affecting your data we will notify as the law requires.

Changes to this policy

When this policy changes, we update the date at the top; for material changes we also show a notice on the site. The current version always lives at this address.

Contact

Privacy questions, requests and complaints: use the contact form. See also our Terms and Conditions.