Privacy Policy

KaratKaddy ("we", "our", or "us") is committed to protecting your personal information. This policy explains what we collect, how we use it, and your rights — in plain language.

What We Collect

Account information
When you sign in with Google or create an email account, we store your name, email address, and a secure identifier. If you use email sign-in, your password is stored as a one-way hash — we cannot read it.

Your collection data
Everything you add to KaratKaddy — piece names, categories, weights, purities, purchase prices, dates, notes, and photos — is stored on our servers so your collection is available across devices and protected from data loss.

Usage data
We do not track analytics, advertising identifiers, or behavioural data. We have no ad partners.

How We Use Your Data

• To provide, maintain, and improve the KaratKaddy service.
• To send you a temporary password when you request a password reset.
• For nothing else. We do not sell, rent, or share your data with third parties for marketing.

Third-Party Services

Service	Purpose
Google Sign-In	Authenticate your account
Cloudflare R2	Store your piece photos

These providers process data solely to deliver the service. They are bound by their own privacy policies and data processing agreements.

Data Retention

Your data is retained for as long as your account is active. When you delete your account, all your pieces, photos, and notes are permanently erased from our systems within 30 days. Some data may be retained in backups for a short period before being overwritten.

Your Rights

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your account and all associated data at any time (Settings → Account → Delete account).
• Withdraw consent for data processing.

To exercise any of these rights, contact us via the feedback link in the app.

Security

• All data in transit is encrypted with TLS.
• Your JWT session token is stored in encrypted device storage and is never written to the database.
• Your PIN (if App Lock is enabled) is stored only on your device and is never sent to our servers.

Children

KaratKaddy is not directed at children under 13. We do not knowingly collect data from children.

Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes through the app. Continued use of the service after changes are posted constitutes acceptance.

Contact

Questions about this policy? Reach us via Settings → Support → Bugs & feedback in the app.