Privacy Policy
Effective and last updated: September 4, 2026
This Privacy Policy explains how the Kach mobile application and its developer (collectively, Kach, we, us, or our) handle personal information. Kach is a free local marketplace where adults can give away and receive physical items.
For privacy questions or requests, contact conxconx199@gmail.com.
Information we collect
Section titled “Information we collect”Account and profile information
Section titled “Account and profile information”Depending on how you create and use an account, we may process:
- your name, email address, account identifier, profile photo, city, language, and authentication information;
- information supplied by Google or Apple when you choose social sign-in;
- public profile information, including your display name, profile photo, ratings, reviews, and community activity counters;
- account status and moderation history needed to protect the community.
Kach does not receive your Google or Apple account password.
Listings and user content
Section titled “Listings and user content”We process content you submit, including listing titles, descriptions, categories, condition, urgency, photos, messages, chat images, reviews, reports, support requests, favorites, follows, saved searches, and interest preferences.
Listings and public profiles are visible to other users. Direct messages are intended for the conversation participants and authorized safety or support review when needed.
Location information
Section titled “Location information”If you grant location access, Kach may obtain a precise device coordinate while the app is in use. A coordinate may also come from a city or street you select manually. Kach uses this input to identify a location, calculate distances, match nearby interests, and help create a listing.
The coordinate submitted for a listing is converted on the server to an approximate point on an approximately 500-metre grid before storage and public display. Kach does not publish the address you typed as a listing’s exact pickup address. Users should share a final meeting location privately only when they choose to do so.
Native location services are used first. When needed, a near-exact coordinate or address query may be sent to Geoapify for geocoding or address suggestions. Approximate map coordinates may be requested from Google Maps or Yandex Static Maps to display maps.
You can deny location permission and choose a supported city manually. Device operating systems control location permission.
Device, notification, diagnostics, and usage information
Section titled “Device, notification, diagnostics, and usage information”We may process:
- Expo, Apple, or Firebase push tokens used to route functional notifications;
- notification language and delivery status;
- device platform, app version, network state, crash reports, stack traces, and performance diagnostics;
- app screens, searches, feature interactions, and related internal identifiers when product analytics is enabled in a build.
Notification permission controls system notifications. Kach may still refresh information while you use the app or when you return to it.
How we use information
Section titled “How we use information”We use information to:
- create and secure accounts;
- display profiles and listings and calculate approximate distance;
- deliver messages, reservations, reviews, follows, interests, and functional notifications;
- synchronize account and marketplace changes between your device and our service;
- detect spam, scams, harassment, prohibited items, sexual content, hate, threats, violence, self-harm, and other unsafe or unlawful activity;
- process reports, blocks, appeals, and moderation actions;
- diagnose failures, protect the service, prevent abuse, and improve reliability;
- respond to support, privacy, and account-deletion requests; and
- comply with applicable legal obligations.
We do not sell personal information and do not use Kach information for cross-app advertising tracking.
Automated content safety
Section titled “Automated content safety”Text and images submitted to Kach may be automatically checked using OpenAI moderation services. Text checks can identify categories such as harassment, hate, threats, sexual content, violence, self-harm, and some illicit activity. Image checks can identify categories such as sexual content, violence, and self-harm.
Automated systems can make mistakes and do not replace user reports or human review. Kach may block, limit, or flag content for moderator review. To question a moderation outcome, contact conxconx199@gmail.com.
Service providers
Section titled “Service providers”Kach uses service providers to operate the app. They process information for the functions described here and under their applicable service terms:
| Provider | Purpose and information involved |
|---|---|
| Supabase | Authentication, database, file storage, server functions, security, and account deletion. |
| Expo, Apple Push Notification Service, and Firebase Cloud Messaging | Device tokens and notification payloads used for functional notifications and foreground updates. |
| Apple and Google | Optional account authentication. |
| Geoapify | Address search, geocoding, and reverse geocoding. |
| Google Maps and Yandex Static Maps | Interactive or static map display using map coordinates and ordinary network request information. |
| Sentry | Crash reports, diagnostics, and performance monitoring. |
| PostHog | Product usage analytics only when enabled in the distributed app build. |
| OpenAI | Automated safety classification of submitted text and images. |
These services may receive ordinary technical information such as IP address, device or request metadata when your device or Kach servers communicate with them.
Kach requires service providers that receive personal information from Kach to protect it to the same or an equivalent standard as described in this Privacy Policy and required by applicable law, and to process it only for the services they provide to Kach.
We may also disclose information when reasonably necessary to comply with law, protect a person’s safety, investigate abuse, or protect Kach and its users. Kach does not disclose information to advertisers for targeted advertising.
Public information and other users
Section titled “Public information and other users”Your public profile, active listings, listing photos, approximate listing location, public ratings, reviews, and relevant marketplace counters can be seen by other users. The people you message receive the messages and images you send them. Other users may copy information you intentionally share with them, so do not send sensitive information that is unnecessary for arranging a giveaway.
Blocking a user limits interactions supported by Kach but cannot erase information that user previously received or copied.
Retention and deletion
Section titled “Retention and deletion”We keep account information and user content while needed to provide your active account and operate Kach. Listings also follow lifecycle and expiration rules within the service. Security, diagnostic, and delivery records may be kept for a limited operational period.
When account deletion completes, Kach removes the account and associated active profile, listings, uploaded media, messages, reviews, favorites, follows, interests, saved searches, notifications, and registered push tokens from its active systems. Limited records may be retained where reasonably necessary for legal compliance, fraud and abuse prevention, safety investigations, dispute resolution, or enforcement of these policies. Copies in backups and security logs are removed through their normal protected rotation rather than being used as active account data.
Deleting Kach cannot delete information another user independently copied or information held by an external provider under that provider’s own legal obligations.
See Account Deletion for instructions.
Your choices
Section titled “Your choices”You can:
- edit profile and listing information in Kach;
- control camera, photo, location, and notification permission in device settings;
- unfollow users, remove interests, and change saved searches;
- block or report another user;
- request support or correction of inaccurate information; and
- permanently delete your Kach account.
Some rights depend on the law where you live. We may need to verify your identity before completing an access, correction, or deletion request.
Security
Section titled “Security”Kach uses access controls, encrypted network connections, database row-level authorization, and restricted administrative access. No online service can promise absolute security. Protect your device and account credentials, and report suspected unauthorized access promptly.
Adults only
Section titled “Adults only”Kach is intended only for people age 18 or older. We do not knowingly allow children to create accounts. If you believe a person under 18 has provided information through Kach, contact us so we can investigate and remove it as appropriate.
Changes to this policy
Section titled “Changes to this policy”We may update this policy when Kach’s features, providers, or legal obligations change. We will update the date above and provide additional notice in the app when a change materially affects how personal information is handled.
Contact
Section titled “Contact”Email: conxconx199@gmail.com