Privacy Policy

1. Who we are & scope

Ki Bole is a public-opinion and polling platform for Bangladesh. This policy describes how we process personal data under the Personal Data Protection Ordinance 2025 (as amended 2026).

2. What we collect

Account: email, password hash, display name, a coarse age band (not date of birth). Profile: country, division, district (no street address). Activity: identified votes, comments, reactions, requests. Technical (pseudonymous): device fingerprint and a hashed IP (never raw). Anonymous votes are NOT personal data — they carry no link to your account.

3. Why we process it (consent)

Consent is our primary lawful basis (the PDPO is consent-centric). Purposes are granular: account (required), analytics, ad-targeting, and communications. Fraud-prevention processing of pseudonymous technical data protects poll integrity and is disclosed at the point of voting.

4. Your rights

Download your data anytime from your profile — an instant JSON export of your profile, votes, comments, and consents. Delete your account from your profile: it is deactivated immediately and permanently anonymized after a 30-day grace period; logging in again within those 30 days reactivates it. Correct your details via profile edit. Anonymization removes your identifiers and de-links your votes/comments; consent records are retained where law requires.

5. Minors

We use a coarse age band. Users under 18 receive no targeted advertising and no behavioural tracking; processing a child's data requires guardian consent.

6. Sharing & sub-processors

We use a small set of processors (AI features with minimized content, delivery/security, OAuth sign-in, a device-fingerprint provider, and a CAPTCHA provider). We do not sell personal data; any data products are aggregate and anonymized.

7. Retention & security

Data is kept only as long as necessary (hashed IPs ~90 days, fingerprints ~180 days, audit/consent records per legal requirement). We use encryption in transit and at rest, hashed IPs, role-based access, and audit logging.

8. Changes & contact

We will notify material changes. Contact [email protected] for any privacy request; you may also contact the national data-protection authority.