Privacy Policy

This Privacy Policy applies to personal information we collect through the Services: the anniemoses.org website (including streaming, donations, ticketing, email signup, and the shop) and the KIN App (video and audio streaming and the shop). It does not apply to information collected offline or through channels we do not control, such as third-party websites linked from the Services.

By using the Services, you acknowledge that your personal information will be handled as described in this Policy. If you do not agree with this Policy, please do not use the Services.

Information you provide to us

• Account information. When you create an account, we collect your name and email address. Account authentication is provided by Clerk, our identity service provider.
• Donation and payment information. When you make a donation or payment, the transaction is processed by Stripe or Donorbox. Your full card number and other sensitive payment credentials are transmitted directly to those processors and never touch our servers. We receive transaction records (such as your name, email, donation amount, and date) needed to acknowledge your gift, issue receipts, and administer sponsor benefits.
• Purchase information. When you buy from our shop, the order is handled by Shopify, which collects your order details, shipping address, and payment information under its own terms. We receive order and fulfillment records.
• Email signup. When you subscribe to our mailing list, we collect your email address (and your name, if you provide it).
• Communications. When you write to us, we keep the correspondence and your contact details so we can respond.

Information collected automatically

• Playback and usage events. We record analytics events about how the Services are used — for example, which videos or audio tracks are played, playback progress, and which pages or screens are visited — so we can operate the Services and understand what our audience values.
• Device and log information. Like most online services, we and our service providers automatically receive technical information such as IP address, device and browser type, operating system, and timestamps.
• Cookies. See Section 6 (Cookies and Similar Technologies).

We do not collect government identifiers, precise geolocation, biometric information, or sensitive personal information as defined under applicable privacy laws.

We use personal information to:

• provide, maintain, and personalize the Services, including authenticating your account and determining your access tier (free preview or sponsor);
• process donations, ticket purchases, and shop orders, and send receipts, confirmations, and acknowledgments;
• administer sponsor entitlements, which are granted on the basis of donations made on the website;
• send you emails you have asked for, such as our newsletter, and service messages about your account;
• understand how the Services are used so we can improve content, performance, and reliability;
• protect the security and integrity of the Services, prevent fraud and abuse, and enforce our Terms of Service; and
• comply with legal obligations, including tax and charitable recordkeeping requirements that apply to a 501(c)(3) public charity.

We do not use personal information for targeted advertising, and we do not sell personal information.

If you are in the European Economic Area or the United Kingdom, we process your personal information on the following legal bases:

• Performance of a contract — to provide the Services you have signed up for, including account access and streaming.
• Consent — for our email newsletter and for non-essential cookies. You may withdraw consent at any time.
• Legitimate interests — to operate, secure, and improve the Services, and to maintain donor and supporter relationships, where those interests are not overridden by your rights and freedoms.
• Legal obligation — to keep records required by tax, charitable, and accounting law.

We share personal information only as described below. We do not sell or rent personal information, we do not share it for cross-context behavioral advertising, and the KIN App contains no third-party advertising SDKs.

Service providers

We use a small set of service providers who process information on our behalf, under contracts that limit their use of it to providing services to us:

• Clerk — account creation and authentication.
• Stripe and Donorbox — donation and payment processing.
• Shopify — shop orders and fulfillment.
• Cloudflare — video streaming (Cloudflare Stream), audio delivery (Cloudflare R2), and network security.
• Sanity — content management for editorial and catalog content.
• Email delivery and analytics providers that help us send mail you have requested and measure how the Services are used.

Other disclosures

• Legal compliance and protection. We may disclose information if required by law, subpoena, or other legal process, or where we believe in good faith that disclosure is necessary to protect the rights, safety, or property of the Institute, our users, or the public.
• Organizational changes. If the Institute merges with or transfers its operations to another nonprofit organization, personal information may be transferred as part of that transaction, subject to this Policy.
• With your direction. We share information when you ask us to or otherwise consent.

The website uses two categories of cookies:

• Essential cookies — required for the Services to work, such as authentication and session cookies set by Clerk and cookies that keep your shop cart together. These cannot be switched off through the Services.
• Analytics cookies — used to measure visits and understand how pages and media are used, so we can improve the Services. You can decline or remove these through your browser settings, and where required by law we will ask for your consent before setting them.

We do not use advertising cookies and we do not permit third parties to track you across other websites for advertising purposes through our Services. Most browsers also let you block or delete cookies entirely; the Services will still work, though you may need to sign in more often.

Because we do not engage in cross-site tracking for advertising, we treat browser “Do Not Track” and Global Privacy Control signals consistently with the practices already described in this Policy.

Some of our programming — including The Wonderful World of Benjamin Cello — is made for families and enjoyed by children. The Services themselves, however, are directed to a general audience and to parents: accounts are created and managed by adults, donations and purchases are made by adults, and we do not knowingly collect personal information from children under 13.

A child may watch or listen under a parent’s account without providing any personal information to us. If you believe a child under 13 has provided personal information to us, please contact us at info@anniemoses.org and we will delete it promptly, consistent with the Children’s Online Privacy Protection Act (COPPA).

• Email. Every marketing email we send includes an unsubscribe link. You may also ask us to remove you by writing to info@anniemoses.org. We may still send non-promotional service messages, such as receipts.
• Account deletion. You can delete your account at any time from within the KIN App, or by emailing info@anniemoses.org from the address on the account.
• Cookies. See Section 6 for cookie controls.
• Access and correction. You may request a copy of the personal information we hold about you, or ask us to correct it, at any time (see Sections 12 and 13 for rights that may apply to you specifically).

We keep personal information only as long as we need it for the purposes described in this Policy:

• Account information is kept while your account is active and deleted within a reasonable period after you delete your account, except as noted below.
• Donation and transaction records are retained for the period required by federal and state tax and charitable-solicitation law applicable to a 501(c)(3) organization.
• Email subscription records are kept until you unsubscribe, plus a suppression record so we do not email you again.
• Analytics events are retained in identifiable form only as long as needed for reporting and are aggregated or deleted thereafter.

We may retain limited information longer where necessary to comply with law, resolve disputes, or enforce our agreements.

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit (TLS), access controls, and reliance on established providers for the most sensitive processing — most importantly, payment card data is handled entirely by Stripe, Donorbox, and Shopify and never touches our servers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security; if we learn of a breach affecting your personal information, we will notify you as required by applicable law.

The Institute is based in the United States, and the Services are operated from the United States. If you use the Services from outside the United States, your personal information will be transferred to and processed in the United States and in other countries where our service providers operate, which may not provide the same level of data protection as your home jurisdiction. Where required, we rely on appropriate safeguards for such transfers, such as the European Commission’s Standard Contractual Clauses or our providers’ participation in the EU–U.S. Data Privacy Framework.

If you are in the European Economic Area or the United Kingdom, you have the right to:

• access the personal information we hold about you;
• have inaccurate information corrected;
• have your information erased (“right to be forgotten”), subject to legal retention requirements;
• restrict or object to certain processing;
• receive your information in a portable, machine-readable format; and
• withdraw consent at any time, where processing is based on consent, without affecting prior processing.

To exercise these rights, contact info@anniemoses.org. We will respond within one month. You also have the right to lodge a complaint with your local data protection supervisory authority (in the UK, the Information Commissioner’s Office).

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, gives you specific rights. In the preceding 12 months we have collected the following categories of personal information, as described in Section 2: identifiers (name, email address, IP address); commercial information (donation and purchase records); and internet or other electronic network activity (playback and usage events, device and log information). We collect this information from you directly and from your devices, for the purposes described in Section 3, and we disclose it to the service providers described in Section 5.

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising. We have no actual knowledge of selling or sharing personal information of consumers under 16 years of age. We do not use or disclose sensitive personal information for purposes requiring a right to limit.

You have the right to:

• know what personal information we collect, use, and disclose;
• access the specific pieces of information we hold;
• correct inaccurate information;
• delete your information, subject to legal exceptions (such as tax records of donations); and
• be free from discrimination for exercising any of these rights.

To exercise these rights, email info@anniemoses.org. We will verify your request using the email address associated with your account or subscription. You may designate an authorized agent to make a request on your behalf; we will require proof of the agent’s authority.

A few practices specific to the KIN iOS App:

• The App offers a free preview tier. Sponsor access is granted on the basis of a donation made on anniemoses.org — the App contains no in-app purchases and no in-app payment collection.
• The App contains no third-party advertising SDKs and does not track you across other companies’ apps or websites.
• Streaming is delivered through Cloudflare, which receives the technical information (such as IP address) necessary to deliver media to your device.
• You can delete your account, and the personal information associated with it, directly within the App or by emailing info@anniemoses.org.

The Services link to third-party sites and services — for example, Shopify-hosted checkout, Donorbox donation pages, ticketing pages, and social media. Those services have their own privacy policies, and this Policy does not apply to them. We encourage you to read the privacy policy of any third-party service before providing it with personal information.

We may update this Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page, and if the changes are material we will provide additional notice — such as an email to account holders or a prominent notice on the Services — before the changes take effect. Your continued use of the Services after the effective date of an updated Policy means the updated Policy applies to you.

Questions, requests, and complaints about this Policy or our handling of personal information should be directed to:

The Annie Moses Institute for Music & Culture
Attn: Privacy
Nashville, Tennessee, USA
info@anniemoses.org

We respond to privacy requests within thirty days.