Privacy Policy

ThinKuvate Ventures Pte. Ltd. ("ThinKuvate", "we", "us", or "our"), a company incorporated in Singapore, operates the ThinKuvate investor platform and mobile application (the "App"). This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our services.

By registering for or using the ThinKuvate platform, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Personal Information

When you register and use the App, we collect:

• Full name (first, middle, last), date of birth, and gender
• Email address and mobile phone number
• Country of residence and city
• Company name and LinkedIn profile URL
• Referral information

1.2 Investment & Financial Information

• Investment vehicle preference (e.g., India AIF, SPV)
• Investor tier and accreditation status
• Investment history and portfolio activity within the platform

1.3 Device & Technical Information

• Device identifier (Android ID or iOS Vendor ID) for push notification delivery
• Expo push notification token
• Device platform (iOS or Android) and app version

1.4 Authentication Information

• Email address and hashed password for account authentication
• One-time passwords (OTP) sent via SMS for identity verification
• Biometric credentials (fingerprint, Face ID, etc.) — these are stored exclusively on your device using the device's secure enclave and are never transmitted to or stored on our servers

1.5 Usage Analytics

We use PostHog, a product analytics platform, to collect anonymised usage data such as screens visited, features used, and error events. This helps us improve the App experience. No personally identifiable information is shared with PostHog beyond what is necessary for error diagnostics.

2. How We Use Your Information

We use your personal data to:

• Create and manage your investor account
• Verify your identity and eligibility as an investor
• Provide access to investment opportunities and portfolio information
• Send push notifications about deal updates, portfolio news, and platform announcements
• Communicate with you via email and SMS regarding account activity and verification
• Improve the App through anonymised analytics
• Comply with applicable laws and regulatory requirements

3. How We Share Your Information

We do not sell your personal data. We may share data with:

• Service providers: AWS (cloud infrastructure and database hosting), Twilio (SMS OTP delivery), Expo / Firebase (push notification delivery), PostHog (analytics)
• Regulatory authorities: where required by law or legal process
• Portfolio companies or co-investors: only with your explicit consent in connection with specific investment transactions

All third-party service providers are bound by data processing agreements and are required to process your data only for the purposes we specify.

4. Data Storage & Security

Your data is stored in Amazon DynamoDB databases hosted in the AWS Asia Pacific (Singapore) region. We implement industry-standard security measures including:

• Encrypted data transmission (HTTPS/TLS)
• JWT-based authentication with secure token handling
• Role-based access controls limiting data access to authorised personnel
• Secure credential storage on-device using the platform's native secure storage

5. Push Notifications

The App may send push notifications to your device regarding investment updates, portfolio activity, and platform announcements. You can enable or disable push notifications at any time from the Profile section of the App or from your device settings. Disabling notifications does not affect your ability to use the App.

6. Biometric Data

The App offers optional biometric login (fingerprint, Face ID, or other device biometrics). When enabled, your login credentials are stored in your device's secure enclave (iOS Keychain / Android Keystore). Biometric data itself is processed entirely by your device's operating system and is never accessed, transmitted, or stored by ThinKuvate. You can disable biometric login at any time from the Security section in your Profile.

7. Data Retention

We retain your personal data for as long as your account is active or as required to provide our services. If you request account deletion, we will delete or anonymise your personal data within 30 days, except where we are required to retain it for legal or regulatory compliance purposes.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your personal data
• Object to or restrict certain processing of your data
• Withdraw consent where processing is based on consent

To exercise any of these rights, please contact us at the address below.

9. Children's Privacy

The ThinKuvate platform is intended for accredited investors and is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. Continued use of the App after changes are posted constitutes your acceptance of the revised policy.

11. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at: