Privacy Policy

What we collect

When you create an account and use Krets, we collect:

• Account data — your email address, display name, date of birth (if provided), profile picture, and optional bio.
• Authentication data — password hash (if you use email sign-in) or Apple Sign In identifier. We never see your Apple ID password.
• Content you create — photos, videos, text posts, comments, reactions, polls, events, and other content you choose to share in your groups.
• Location data (optional) — if you choose to tag a post with a location, we store the latitude/longitude and place name with that post. Krets only requests “When In Use” location access and never tracks your location in the background.
• Push notification tokens — a device-specific token issued by Apple so we can deliver push notifications about activity in your groups. You can disable these in Settings.
• Basic usage information — app version, platform, and crash logs used to diagnose problems.

We do not collect advertising identifiers, we do not use third-party analytics SDKs, and we do not sell or share your data with advertisers.

How we use your information

We use the information we collect to:

• Operate the core app: show you content from your groups, deliver comments/reactions/notifications, tag posts with locations, and run features like Birthdays, Time Capsules, Daily Snap, and the map view.
• Authenticate you and keep your account secure.
• Respond to support requests and investigate abuse reports.
• Improve the app by diagnosing crashes and errors.

Content you post is visible only to members of the groups you share it with. Krets does not make any content public.

How your data is stored

Krets is built on Supabase. Your account data and content are stored in Supabase’s Postgres database and object storage, protected by row-level security policies so that only authenticated members of a given group can read its content.

Supabase may store your data in the United States or the European Union. By using Krets you consent to this cross-border processing.

Push notifications are delivered via Expo’s push notification service, which forwards tokens to Apple Push Notification service (APNs).

Data retention and deletion

You can delete your account at any time from the Profile tab. Deleting your account permanently removes:

• Your profile, email, and authentication record
• All posts, comments, reactions, and media you created
• Your push tokens
• Your memberships in every group

Deletion is immediate and irreversible. Some backup copies may persist for up to 30 days before being purged.

Data portability

You can download a copy of all your data at any time from the Profile tab in the app. The export includes your profile, posts, comments, reactions, group memberships, event RSVPs, and more, in a machine-readable JSON format.

Children

Krets is not intended for children under 13 (or the equivalent age in your jurisdiction). We do not knowingly collect information from children. If you believe a child has created an account, email us at hello@getkrets.app and we’ll delete it.

Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your data (you can do this yourself from the Profile tab)
• Object to or restrict certain processing
• Data portability

To exercise any of these rights, email hello@getkrets.app.

Abuse and content reporting

Krets provides in-app tools to report offensive posts, comments, or users, and to block other users. Reports are reviewed within 24 hours and offending content or accounts may be removed. Report abuse by tapping the three-dots menu on any post or profile, or email hello@getkrets.app.

Changes to this policy

We may update this policy from time to time. Material changes will be announced in-app. Continued use of Krets after a change means you accept the updated policy.

Contact

Questions, concerns, or data requests: hello@getkrets.app