Your KulaTu data, in plain terms.

What we collect

Account data: email address, password hash handled by Supabase Auth, and phone number when you sign in by SMS OTP.

Profile data: your user id, saved spots, submitted spots, reviews, and moderation role if assigned.

Location data: your current coordinates only when you grant permission for “Near me”. They are stored on-device to reload your last choice.

Photos: images you upload for spot contributions, plus related metadata such as upload time and storage path.

Device messaging: an Expo push token if notifications are enabled on your device.

How we use it

We use account data to authenticate you, sync saved spots, and attribute reviews or contributions.

We use location to rank nearby spots and power the map view when you explicitly choose “Near me”.

We use uploaded photos and reviews to improve public spot pages and community trust.

We use push tokens only to send product notifications tied to your activity, such as review-related updates.

Where data is stored

Authentication, database records, and uploaded media are stored with Supabase.

The public site is served via Netlify. Basic site delivery logs may be processed by Netlify for hosting and security.

Maps and directions may hand off to third-party mapping apps when you tap “Directions”. Their privacy terms then apply.

Retention and deletion

Saved spots, push tokens, profile records, and moderation-role rows tied to your account are removed when you delete your account.

Reviews and uploaded photos are deleted as part of account deletion.

Spots you submitted may be retained without personal attribution so the public directory does not lose verified place data.

Authentication records are soft-deleted in Supabase so the account can no longer be used to sign in.

Sharing and disclosure

We do not sell your personal information.

Public spot pages may display the content of your submitted spots, reviews, ratings, and approved photos, but not your email address or phone number.

We may disclose information when required by law, to enforce safety rules, or to investigate abuse of the service.

Your choices

You can sign out at any time inside the app.

You can refuse location permission and continue by choosing a neighborhood manually.

You can request password reset from the sign-in screen.

You can delete your account from the app or from the public deletion page below.