Privacy Policy

Last updated: January 2025

1. Introduction

Kotan ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website (collectively, "Services").

By using our Services, you consent to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

  • Account Information: When you register, we collect your university email address, username, display name, and profile information.
  • Profile Data: Information you add to your profile, including your bio, profile picture, and university details.
  • Content: Posts, comments, messages, and other content you create or share on the platform.
  • Communications: Information from your communications with us, including support requests and feedback.

2.2 Information Collected Automatically

  • Device Information: Device type, operating system, unique device identifiers, and mobile network information.
  • Usage Data: How you interact with our Services, including features used, content viewed, and time spent.
  • Log Data: IP address, browser type, access times, and referring URLs.
  • Location Data: General location based on IP address (we do not collect precise GPS location without consent).

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our Services
  • Verify your university student status
  • Process username reservations and account registrations
  • Enable social features and community interactions
  • Send notifications about your account and app updates
  • Respond to your inquiries and provide customer support
  • Enforce our Terms of Service and community guidelines
  • Detect and prevent fraud, abuse, and security threats
  • Analyze usage patterns to improve user experience
  • Comply with legal obligations

4. Information Sharing

We may share your information in the following circumstances:

  • With Other Users: Your public profile, posts, and comments are visible to other users based on your privacy settings.
  • Service Providers: We may share information with third-party vendors who provide services on our behalf (e.g., hosting, analytics).
  • Legal Requirements: We may disclose information when required by law or to protect our rights, safety, or property.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred.

We do not sell your personal information to third parties.

5. Anonymous Content

When you post anonymously:

  • Your identity is hidden from other users
  • We retain internal records linking anonymous posts to accounts for moderation and legal compliance
  • Anonymous content is still subject to our community guidelines
  • We may reveal identity to law enforcement when legally required

6. Data Retention

We retain your information for as long as your account is active or as needed to provide services. After account deletion:

  • Profile information is deleted within 30 days
  • Posts and comments may be retained in anonymized form
  • Some information may be retained for legal compliance or legitimate business purposes
  • Backup copies may persist for up to 90 days

7. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

  • Encryption of data in transit and at rest
  • Secure authentication mechanisms
  • Regular security assessments
  • Access controls limiting who can access your data

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

8. Your Rights and Choices

You have the following rights regarding your information:

  • Access: Request a copy of your personal data
  • Correction: Update or correct inaccurate information
  • Deletion: Request deletion of your account and data
  • Portability: Request your data in a portable format
  • Opt-out: Unsubscribe from promotional communications

To exercise these rights, contact us at privacy@kotan.app.

9. Third-Party Services

Our Services may integrate with third-party services such as:

  • Firebase (authentication and analytics)
  • Supabase (database and storage)
  • Cloud hosting providers

These services have their own privacy policies, and we encourage you to review them.

10. Children's Privacy

Our Services are not intended for users under 18 years of age. We do not knowingly collect information from children. If we learn that we have collected information from a child, we will delete it promptly.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own. By using our Services, you consent to such transfers. We ensure appropriate safeguards are in place for international data transfers.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by:

  • Posting the updated policy on our website
  • Sending a notification through the app
  • Emailing registered users

Your continued use of our Services after changes indicates acceptance of the updated policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

Email: privacy@kotan.app
General Support: support@kotan.app