Privacy Policy

Data we collect and store

• Account & identifiers: We collect account information such as username, nickname and device tokens to be able to send and deliver nudges.
• Contacts: Approved connections between accounts (who you've added/accepted).
• Nudges & Doodles: The nudge types and doodles you send and receive along with limited technical metadata (such as sender, recipient, timestamps and file-related information) in order to deliver and display them to their intended recipients.
• Snaps (Ephemeral Photos): If you use the snap photos feature, we collect and temporarily store the photo content you send, along with limited metadata necessary to deliver the Snap, such as sender and recipient account IDs, sent and viewed timestamps, delivery status, and basic security or abuse-prevention logs. Snap photos are not publicly accessible and are only delivered to the intended recipient(s).
• Reflections (Journal Entries): If you use the Reflections feature, the journal content you write is stored locally on your device and, if enabled, in your personal iCloud account. We do not store or access the text of your journal entries on our servers. Journal entries are automatically deleted from your device and iCloud at the end of the selected Reflection challenge period (for example, after 7 or 14 days). We may store limited metadata (such as completion status, timestamps, and related reward activity) necessary to award Gems, Hearts, XP, or other in-app progress.
• Profile data: We collect and store the account creation date and in-app profile information such as your level, accumulated XP points, virtual pets and virtual items (such as Gems and Hearts). If you choose to upload a profile photo, we store the image and related metadata (such as file size and format) to display it to your approved connections. Profile photos are optional and can be changed or deleted at any time. We store only the currently active profile photo. When you upload a new photo or delete your profile photo, the previously stored image is deleted from our servers as part of normal operation. In limited cases, deletion may be delayed due to technical or operational reasons (such as retries or system maintenance), but we do not intentionally retain prior profile photos beyond what is necessary to operate the Service.
• Usage analytics: Limited in-app interaction data (such as screen views, feature interactions, and paywall engagement) collected for product analytics and improvement. This data is collected in an aggregated or non-identifying form and is not used to identify individual users.
• Subscription status: Information about whether you have an active subscription, the subscription tier, renewal status, and the redemption state of subscription redeem codes (for Couple/Partner subscriptions) which we use to determine access to premium features. We do not collect or store payment card details.

Where data is stored

• Server: Account IDs, usernames/nicknames, contacts, nudge history (type + sender/recipient/time), doodle metadata, snap photo metadata, analytics and device tokens are stored securely on a virtual private server hosted by Linode (Akamai).
• Object Storage: Profile photos, doodle images, and Snap photo content are stored securely using Linode (Akamai) Object Storage. Snap photo content is stored only for the time necessary to deliver the snap photos and in accordance with the retention periods described below. Media is not publicly accessible.
• iCloud: Your nudge history, favorited contacts, groups, pending sends; scoped to your personal Apple ID's private iCloud, if you have iCloud enabled for the app.
• On-device: Local caches and pending items are temporarily stored on device for performance/offline use and general functionality of the app.

How we use data

• Authenticate you (Sign in with Apple).
• Deliver nudge, doodles and notifications (push to phone/watch).
• Maintain contacts, streaks and inbox history.
• Display your profile photo to your approved connections.
• Sync phone ↔ watch and iCloud backups.
• Verify subscription status and enable or restrict access to premium features.

We process stored data only as necessary to provide, maintain, and protect the Service. You can delete your account and all associated data at any time. We may access stored data only as necessary to operate, maintain, and support the Service or to investigate violations of our Terms.

Usage Analytics

We collect limited in-app usage data to understand how features are used and to improve the Service. This may include information such as which screens are viewed and interactions with in-app features (for example, paywall views or plan selection). This data is used only for internal analytics and product improvement. We do not use analytics data for advertising or tracking across apps or websites.

Visibility of Profile Photos in the App

Your profile photo is visible to users with whom you have an approved connection. Profile photos are not publicly visible and are not accessible to users outside your approved contacts/connections.

Subscriptions and Payments

Subscriptions are purchased through the Apple App Store (and, where applicable, Google Play). Payment processing is handled entirely by the platform provider. We do not receive or store your credit card number, billing address, or other payment details.

We receive limited subscription information from the platform (such as whether a subscription is active) solely to provide access to subscription features.

Data Sharing

• We do not sell or share your data with third parties.
• We share data only with service providers necessary to operate and secure the Service.

Service providers: We use third-party service providers to operate and secure the Service, including:

• Linode (Akamai): Provides secure server infrastructure and object storage for account data, media files, and Snap content.
• Apple Push Notification Service (APNs): Delivers push notifications to your device. APNs processes device tokens and notification payload data necessary to deliver notifications.
• Cloudflare: Provides content delivery, security, and network protection services. Cloudflare processes network traffic (such as IP addresses and request metadata) in order to deliver these services.

Data Security

We implement reasonable, industry-standard security measures to protect your data from unauthorized access, loss, misuse, or alteration. These measures include:

• Encryption of data in transit using HTTPS.
• Restricted access to production systems and stored data.
• Limited access controls for our development team.
• Use of reputable cloud infrastructure providers.

However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security of the data we collect and store.

Konda Snap Photos (Ephemeral Photo Messaging)

How Snap photos work: Snap photos are designed to be quick, disappearing photo messages. When you send a Snap photo, it is stored securely on our servers only long enough to deliver it to the intended recipient.

Retention:

• Once a Snap photo is viewed by its recipient, it is automatically deleted from our servers shortly afterward.
• A Snap photo that is not opened is automatically deleted from our servers within 24 hours of being received.
• We may retain limited technical information (such as delivery timestamps and basic logs) for security, fraud prevention, and legal compliance.

Important: Snap photos are designed to disappear after viewing. However, recipients may still capture content using screenshots, screen recordings, or other external methods.

Security: Snap content is transmitted using encrypted connections (HTTPS) and processed only as needed to deliver the Snap.

Retention & deletion

• We retain your account data for as long as your account remains active in order to provide the Service.
• Snap photo content is retained only as described in the Snap photos section above.
• Journal entries created through the Reflections feature are not stored on our servers. They remain on your device (and in your personal iCloud, if enabled) and are automatically deleted when your selected challenge ends.
• If you choose to delete your account, we automaticallydelete associated account data, including profile photos, doodles, and snap photo content stored on our servers, within a reasonable period following the deletion request.
• Certain limited metadata or server logs may be retained for a longer period where necessary for security, fraud prevention, legal compliance, or enforcement of our Terms.

Children

Konda is not intended for children under 13. If you are under 13, please do not use the app.

Your Rights

You have the right to:

• Access your personal data stored in our systems
• Request correction of inaccurate data
• Request deletion of your account and associated data

You may request account deletion directly within the app (if available) or by contacting us using the contact details below. We will respond to privacy-related requests within a reasonable timeframe and in accordance with applicable law.

Changes to Privacy Policy

We may update this Privacy Policy from time to time. Notice of material changes may be provided through the App. The “Last updated” date at the top of this policy indicates when it was last revised.

Contact

For any questions relating to this policy, contact us at: