Know Your Neighbor ordinary-member privacy notice

Version 2.0.0

Five Letter Agency operates KYN. The Korey Streich Campaign Committee, operating publicly as AI for Wisconsin, is a separate relying party. Their credentials, databases, logs, authority, and backups remain separate.

Data KYN handles

KYN stores a pseudonymous subject, your public device key, exact consent version and purposes, one-way recovery commitment, privacy and recovery records, public-safe receipts, and the minimum state needed to issue short-lived member presentations. Optional claim or verifier features remain separate and are not required for campaign membership.

KYN does not require or ask the ordinary enrollment path for a legal name, email, social login, exact address, government identifier, biometric, full birth date, or ballot choice. Sensitive evidence collection is disabled.

Poll separation

For an eligible poll, KYN creates a short-lived, determination-specific pairwise presentation after your device proves control of its key and your ballot-purpose consent is active. The presentation contains no KYN subject, device key, recovery information, attestor, verifier, or private graph edge.

Campaign Core exchanges that presentation for a separately signed poll-specific authorization. The ballot store receives the poll, manifest, expiration, and nullifier needed to enforce one current ballot. It receives no KYN subject, Campaign Core account, email, external account, verifier relationship, or reusable cross-poll identifier. KYN does not receive or store the ballot choice.

KYN may publish a signed eligible-member count and snapshot digest. It never publishes or sends the campaign a subject list. Small participation and self-service membership remain visible limitations.

Retention, rights, and recovery

Consent, recovery, privacy-action, public-safe receipt, and required security/audit lineage are retained according to the active KYN policy and applicable legal or security hold. You may request export, correction or invalidation, consent withdrawal, or deletion. Deletion removes the participant-key binding and invalidates dependent KYN state prospectively; it does not rewrite a ballot validly accepted under its frozen rule.

KYN state is backed up to a separate encrypted recovery repository. It does not enter the Campaign Committee backup repository. Recovery changes are accountable and auditable. KYN does not persist a portable export after returning it to the requesting participant.

Questions or security reports use the public contact shown on the active operator release. Do not send identity evidence or recovery secrets by ordinary email.