Privacy Policy
Last updated: 6 November 2026
In short: we collect only what the app needs to work. We do not sell your data, use it for advertising, or track you across other apps or websites. You can delete your account and data from inside the app.
1. Who is responsible for your data
Krooti, based in Kuwait. Privacy questions: support@krooti.co.
2. What we collect
| Data | Why |
|---|---|
| Phone number | To sign you in with a verification code. Other users never see it. |
| Email address | Only if you sign in with Apple or Google; it is held by that sign-in provider. |
| Display name, photo and area | To show your profile and listings. You pick the area from a list; we never use your device's location. |
| Listings and photos | To show the cards you are selling. |
| Messages and their photos | To deliver your conversation with the other user, and to review reports. |
| Ratings, reports and blocks | For trust, safety and moderation. |
| Push notification token | To send message and alert notifications. |
| App usage | Statistics such as searches, listings viewed and chats opened, to improve the app. Linked to an internal user id, never your phone number. |
| Crashes and performance | Technical reports to fix bugs, without your messages or phone number. |
We do not collect your location, contacts or any payment details, and we do not use advertising identifiers.
3. What other users see
Other users see your display name, photo, area, listings and ratings. Your messages are seen only by the other person in the conversation, and by moderators when a report is made.
4. Who we share data with
We do not sell your data or share it for advertising. We use service providers that process data only on our behalf:
- Google Firebase: sign-in;
- Fly.io (Frankfurt, Germany): servers and database;
- Cloudflare R2: photo storage;
- Expo: push notification delivery;
- Sentry (EU): crash reports;
- PostHog (EU): usage statistics.
We may disclose data when a competent authority requires it under Kuwaiti law.
5. Where it is stored
Data is stored outside Kuwait, mainly in the European Union, with the providers listed above.
6. Retention and deletion
- We keep your account data for as long as your account exists.
- When you delete your account (Profile → Settings → Delete account) we immediately delete your account, listings, conversations, ratings, favourites, alerts and photos.
- Backups may hold a copy for up to 5 days before they are deleted automatically.
- Crash reports and usage statistics are deleted automatically at the end of each provider's retention period.
7. Your rights
You can edit your profile, delete your listings or delete your account at any time in the app, or email us to ask for a copy of your data or to correct it.
8. Age
Krooti is for people aged 18 and over. We do not knowingly collect data from minors.
9. Security
Traffic between the app and our servers is encrypted, and access to data is limited to what running the service needs. No system is perfectly secure, but we work to protect your data.
10. Changes
We may update this policy and will post the new version here with its date.