Privacy Policy

1. Who we are

Kolo is a private social network with communication circles, a feed, stories, and messaging. The service is available on the web at https://kolo-network.lovable.app and as an Android app (package com.pd_develop.kolo).

For privacy questions or data deletion requests, contact the email listed on the developer’s Google Play listing, or use in-app reporting tools. Account deletion instructions: https://kolo-network.lovable.app/account-deletion

2. Data we collect

Depending on how you use Kolo, we may process the following categories of data:

• Account data: email, password (stored by the authentication provider in hashed form), first and last name.
• Profile: display name, bio, avatar, language/privacy/notification settings; date of birth and phone number only if you provide them.
• User content: posts, stories, comments, reactions, chat messages, and media you upload.
• Device contacts (optional): if you allow contact import, we use phone numbers to find people you know on Kolo. Contact names are handled locally to help with invites.
• Technical data: push notification tokens (FCM), online/last-seen status, and first-party usage analytics events.
• Safety data: reports, blocks, and content-moderation signals.

3. How we use data

We process data to:

• create and operate your account;
• show posts and stories to the circles you choose;
• provide messaging, notifications, and invites;
• help you find friends (search and optional phone matching);
• show a personalized news block based on your interests;
• improve safety (moderation, NSFW image checks, report review);
• generate or edit images with Magic (AI) when you use that feature;
• analyze service performance and fix errors.

4. Sharing with service providers

We do not sell your personal data. Data may be processed by processors needed to run the service:

• Supabase — authentication, database, file storage, realtime;
• Firebase Cloud Messaging / Google Play services — Android push notifications;
• Replicate — Magic AI image generation/editing and NSFW image checks;
• NewsData.io — news content for the news block;
• Dicebear — default avatar generation;
• Lovable — web app hosting and technical error diagnostics.

5. Content and visibility

Kolo is built around communication circles: you choose who can see each post or story. Chat messages are available to participants of that chat. Profile information may be visible to other users according to your privacy settings and search features.

Because users can create content and communicate, the service includes block, report, and moderation tools. We may restrict or remove content that violates safety rules.

6. Device permissions (Android)

The app may request these permissions:

• Internet — to operate the service;
• Contacts — only for optional friend finding;
• Notifications — for push about messages and activity.

7. Storage and security

Data is transmitted over HTTPS. We use service-level access controls (including database access policies). Chats are not end-to-end encrypted in the current app version.

Retention depends on data type: account and content are kept while you use the service; stories are time-limited (typically about 24 hours); technical logs and tokens are kept as needed for operations and security.

8. Your rights and deletion

You can edit your profile and privacy settings in the app, sign out, and limit optional features (for example, by denying contacts access or disabling notifications).

To request account or personal data deletion, use https://kolo-network.lovable.app/account-deletion or email the developer contact listed on Google Play from the email address of your account. We will handle the request within a reasonable time.

9. Children

Kolo is not intended for children under 13. If you believe we collected a child’s data without appropriate consent, contact us and we will take steps to delete it.

10. Changes to this policy

We may update this policy. The current version is always available at https://kolo-network.lovable.app/privacy. Material changes may also be communicated in the service.