Privacy Policy

Last updated: September 2026

Your privacy matters to us. This policy covers two different things you might use: the Krolik mobile app, and this website. Part 1 covers the app. Part 2 covers the website, including our pre-launch waitlist. A few things (your rights, how we keep data secure) apply to both, and are grouped at the end.

1. Data Controller

The data controller responsible for your personal data, whichever part of this policy applies to you, is IAcom.dev, operator of the Krolik application and this website. For any privacy-related enquiries, contact us at legal@iacom.dev.

Part 1: The Krolik App

This part covers the Krolik mobile app: the account you create, the content you publish, and the location-based social features. It doesn’t apply if you have only visited this website.

1.1 Data We Collect

• Account data: phone number and/or email address, display name, avatar photo, date of birth, and gender
• Location data: your approximate or precise position, used to show nearby posts and people and to apply your chosen search radius
• Content data: posts, stories, comments, and media (photos and videos) you publish, and the likes and follows you give
• Social data: the accounts you follow, the users you block, and your auto-follow preference
• Usage data: app interactions, feature usage, and connection timestamps
• Device data: device type, operating system, and app version
• Security data: a device identifier and your IP address at sign-up, used to detect multiple accounts created from the same device and prevent abuse

1.2 How We Use It

• To create and manage your account
• To authenticate your identity and secure your account
• To show you nearby posts, stories, and people based on your location and radius
• To power the social features of the service (follows, likes, comments, blocking)
• To send transactional communications (verification codes, sign-in links)
• To automatically screen the text and images you submit before they are published, so we can catch content that breaks our rules
• To improve and develop the service
• To comply with legal obligations

1.3 Signing In With Google or Apple

If you choose to sign in using Google or Apple, they share with us the basic profile information needed to create your account (such as your name and email address), subject to your consent and their own privacy policies. We do not receive your password for these services.

1.4 Push Notifications

With your permission, we send push notifications for things like new followers, comments, likes, messages, and activity near you. You can turn push notifications off entirely from your device settings, or choose which types you receive from the app’s own notification preferences screen.

1.5 Who We Share It With

We do not sell your personal data. We may share it with trusted third-party service providers that help us operate the app, including:

• Mapbox: maps and location display
• GIPHY: GIF content in posts, comments, and messages
• Sentry: crash and error diagnostics
• OpenAI: automated moderation of the text and images you submit (posts, stories, comments, your bio, and your profile photo), so we can screen for content that breaks our rules before it is published or shown to anyone else
• Firebase (Google): delivering push notifications, and verifying your phone number if you sign in that way
• Amazon Web Services: secure storage of your photos and videos
• other providers for authentication, cloud infrastructure, and email delivery

These providers act as data processors and are contractually bound to protect your data and use it only as instructed.

1.6 Age Requirement

Krolik is intended for users aged 18 and over. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us so we can delete it.

1.7 Deleting Your Account

We retain your account data for as long as your account is active or as necessary to provide the service. You can permanently delete your account and everything attached to it at any time directly within the app, from Settings, and this takes effect immediately. You can also contact us to request deletion. We may retain certain data for longer periods where required by law.

Part 2: This Website

This part covers krolik.app, the website you are reading right now, including our pre-launch waitlist. It doesn’t apply if you have only used the Krolik app.

2.1 Data We Collect

• Waitlist email: if you sign up for updates on our landing page before ever creating an account, we store the email address you give us
• Analytics data: aggregate page-visit data through Google Analytics, only if you accept it on the cookie banner. See our Cookies Policy for the full detail

2.2 How We Use It

• To notify you when Krolik launches near you, if you joined our waitlist
• To understand site traffic and spot errors, in aggregate, if you accepted analytics

2.3 Who We Share It With

We do not sell your personal data. If you accepted analytics cookies, page-visit data is shared with Google Analytics, as described in our Cookies Policy. Our hosting infrastructure may also keep standard server access logs for security and reliability purposes.

2.4 Removing Your Email From the Waitlist

If you only signed up for our pre-launch waitlist and want your email removed, contact us at legal@iacom.dev.

Applies to Both

The rest of this policy applies whether Part 1 or Part 2 is the one that concerns you.

Lawful Basis for Processing

• Performance of a contract: processing necessary to provide the Krolik service to you (account creation, authentication, publishing content)
• Legitimate interests: improving the service, preventing fraud and abuse, ensuring security
• Legal obligation: complying with applicable laws and regulations
• Consent: where required (e.g. precise location access, analytics cookies, or marketing communications), we will ask for your explicit consent

International Transfers

Some of our service providers may be located outside the European Economic Area (EEA). Where personal data is transferred outside the EEA, we ensure appropriate safeguards are in place in accordance with applicable data protection law (such as standard contractual clauses).

Security

We use industry-standard encryption and security practices to protect your data. All connections to Krolik are encrypted via HTTPS/TLS. We regularly review our security measures to protect against unauthorised access, disclosure, or loss of your data.

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you
• Rectification: request correction of inaccurate or incomplete data
• Erasure: request deletion of your personal data ("right to be forgotten")
• Restriction: request that we limit how we use your data
• Portability: receive your data in a structured, machine-readable format
• Objection: object to processing based on legitimate interests
• Withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting prior processing

To exercise any of these rights, contact us at legal@iacom.dev. If you are in the EU/EEA, you also have the right to lodge a complaint with your local data protection authority. If you are a California resident, you have similar rights under the CCPA, including the right to know what personal information we collect and to request its deletion; we do not sell your personal information.

Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes through the app or by email. The date at the top of this page indicates when the policy was last revised.