Privacy Policy
Your privacy matters to us. This policy explains what personal data Krolik collects, why we collect it, how we use it, and the rights you have over it.
1. Data Controller
The data controller responsible for your personal data is IAcom.dev, operator of the Krolik application. For any privacy-related enquiries, contact us at legal@iacom.dev.
2. Data We Collect
- Account data: phone number and/or email address, display name, avatar photo, gender
- Location data: your approximate or precise position, used to show nearby posts and people and to apply your chosen search radius
- Content data: posts, stories, comments, and media (photos and videos) you publish, and the likes and follows you give
- Social data: the accounts you follow, the users you block, and your auto-follow preference
- Usage data: app interactions, feature usage, and connection timestamps
- Device data: device type, operating system, and app version
3. Lawful Basis for Processing
- Performance of a contract: processing necessary to provide the Krolik service to you (account creation, authentication, publishing content)
- Legitimate interests: improving the service, preventing fraud and abuse, ensuring security
- Legal obligation: complying with applicable laws and regulations
- Consent: where required (e.g. precise location access or marketing communications), we will ask for your explicit consent
4. How We Use Your Data
- To create and manage your account
- To authenticate your identity and secure your account
- To show you nearby posts, stories, and people based on your location and radius
- To power the social features of the service (follows, likes, comments, blocking)
- To send transactional communications (verification codes, sign-in links)
- To improve and develop the service
- To comply with legal obligations
5. Data Sharing
We do not sell your personal data. We may share it with trusted third-party service providers that help us operate Krolik, including authentication, cloud infrastructure, media storage, and email delivery services. These providers act as data processors and are contractually bound to protect your data and use it only as instructed.
6. Signing In With Google or Apple
If you choose to sign in using Google or Apple, they share with us the basic profile information needed to create your account (such as your name and email address), subject to your consent and their own privacy policies. We do not receive your password for these services.
7. Push Notifications
With your permission, we send push notifications for things like new followers, comments, and activity near you. You can disable push notifications at any time from your device settings.
8. International Transfers
Some of our service providers may be located outside the European Economic Area (EEA). Where personal data is transferred outside the EEA, we ensure appropriate safeguards are in place in accordance with applicable data protection law (such as standard contractual clauses).
9. Data Retention
We retain your personal data for as long as your account is active or as necessary to provide the service. You may request deletion of your account and associated data at any time by contacting us. We may retain certain data for longer periods where required by law.
10. Security
We use industry-standard encryption and security practices to protect your data. All connections to Krolik are encrypted via HTTPS/TLS. We regularly review our security measures to protect against unauthorised access, disclosure, or loss of your data.
11. Children
Krolik is intended for users aged 18 and over. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us so we can delete it.
12. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access: request a copy of the personal data we hold about you
- Rectification: request correction of inaccurate or incomplete data
- Erasure: request deletion of your personal data ("right to be forgotten")
- Restriction: request that we limit how we use your data
- Portability: receive your data in a structured, machine-readable format
- Objection: object to processing based on legitimate interests
- Withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting prior processing
To exercise any of these rights, contact us at legal@iacom.dev. If you are in the EU/EEA, you also have the right to lodge a complaint with your local data protection authority. If you are a California resident, you have similar rights under the CCPA, including the right to know what personal information we collect and to request its deletion; we do not sell your personal information.
13. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of significant changes through the app or by email. The date at the top of this page indicates when the policy was last revised.