Privacy Policy

1. Who we are

Kego ("we", "us") is a skill-exchange app for technical outdoor sports, operated by Luke Leffler in Australia. Contact: support@kegoapp.com.

2. Information we collect

• Account information: your email address, used to sign you in with a link we email you or with a password. If you choose a password, our authentication provider (Supabase) stores it only in scrambled (hashed) form; we never see it or store it ourselves.
• Profile information you choose to provide: your name, photos, bio, an optional age you choose to show, and the skills you can teach or want to learn, including levels, notes and certifications (the certification, and optionally the agency and the date).
• Your area: ONE home place you choose from a list of towns and suburbs (never an address, and never your phone's GPS). We store the place's name (for example "Katoomba, New South Wales, Australia"), a point for it rounded to a coarse grid of roughly 5 km, and when you last changed it. This is kept in a private part of our database that members cannot read directly.
• Content you create in the app: messages to other members, endorsements you give or receive, blocks you set, profiles you save, profiles you move to the bottom of your own Discover list (private to you), and reports you make about other members (or that are made about you).
• Records we keep to run the app: your confirmation that you are 18 or over, your acceptance of the waiver (with its date and version), and notifications and read markers used to show what you have seen.
• Usage records: a record of some actions you take in the app (for example signing up, adding a skill, or starting a conversation), kept with your account so we can see how Kego is used and keep it safe. We do not send this to any analytics or advertising service.
• Technical information: basic device, browser and log data needed to run and secure the app. When you use the sign-in, sign-up or password forms, Cloudflare's bot check (Turnstile) also receives your IP address and browser and device details, as described in section 9.

3. How we use your information

To provide and run Kego, let members find and contact each other (including showing you members who live near you, and showing you to them), keep the app safe (including responding to reports and blocks), fix problems, and improve the app. We do not sell your personal information.

4. What other members can see

Your profile (name, photos, bio, skills, certifications and endorsements) is visible to other members of Kego.

Your area: members who live near each other can see each other and their profiles in Discover. On your profile they see only a rough distance band (such as "10-25 km away"). They never see your coordinates or an exact distance. You can change your area at any time in Settings under Your area (up to five changes a day).

Certification details may be visible to other signed-in members. Profile photos are stored privately and shown only to signed-in members who are allowed to see your profile, through links that stop working after a short time. A member who can see a photo can still save or share it. Messages are visible only to you and the people you message. Please do not put information in your profile that you do not want other members to see. We are not able to control what other members do with information you share with them.

5. Who we share information with

We use service providers to run the app, including Supabase (database, authentication and file storage), Vercel (hosting), Resend (sending the sign-in and password-reset emails, which means they handle your email address) and Cloudflare (which sits in front of our stored photos and delivers them to you faster, and may keep temporary copies of photos on its network, and which also runs the bot check on the sign-in forms: see section 9). They handle your information only to provide their services to us. We may also disclose information if required by law or to protect the safety of members.

6. Where your information is stored

Your information may be stored and processed outside Australia, including in Japan (Tokyo) and the United States and other countries where our providers operate.

7. Security and retention

We take reasonable steps to protect your information, but no online service is completely secure. We keep your information while your account is active and for as long afterwards as needed to run the app, resolve disputes or meet legal obligations.

To prevent abuse we keep short-lived records of actions such as messages sent and reports filed (the time and the kind of action, not the content). They are deleted with your account.

[TO CONFIRM, pending solicitor review] You can delete your account in the app under Settings. Deletion happens immediately and cannot be undone. We permanently delete your profile, photos, skills, certifications, your area (the place you chose), endorsements you gave and received, blocks, saved profiles, profiles you moved to the bottom of your list, notifications and sign-in details. Messages you sent stay in the conversation for the person you sent them to, shown as from a "Deleted member"; your name and profile are removed, but a message's text may still identify you if you included identifying details in it. Reports made about you or by you, and any strikes, are kept with your account details removed so we can keep the community safe; a report's written description may still contain information written by the reporter. Our service providers may keep copies in backups and logs for a limited time. [TO CONFIRM: how long.]

8. Your choices and rights

You can view and edit your profile in the app. You can ask us to access or correct your information by emailing support@kegoapp.com.

You can delete your account yourself in the app under Settings (Delete account), or, if you can't sign in, by emailing support@kegoapp.com.

Depending on where you live, you may have additional rights under local privacy law. If you have a complaint, you can make it to us at support@kegoapp.com. Depending on where you live, you may also be able to complain to a privacy regulator.

9. Cookies and similar technologies

We use cookies or similar storage that are necessary to keep you signed in and make the app work: a sign-in session cookie, a short-lived password-reset cookie that exists only while you reset a password, a cookie that keeps your Discover list in the same order for a few hours, and, in your browser only, unsent message drafts and the Discover pages you have already loaded. We do not use analytics or advertising trackers, and Kego loads no third-party fonts.

The one third-party script Kego loads is Cloudflare Turnstile, a bot check on the sign-in, sign-up and password forms. It runs only on those forms, and only to tell people from automated bots. To do that it may receive your IP address, your browser and device details (such as browser type, screen and language settings) and how the check is completed in your browser, and it may set or read a small security cookie from Cloudflare. Cloudflare handles this under its own Turnstile privacy terms, as a provider that helps us block bots; we use the result only to let you in or ask you to try again. [TO CONFIRM: the exact cookies and retention period Cloudflare applies to Turnstile.]

The full list of what Kego stores is on the Storage page (kegoapp.com/cookies).

Place suggestions: when you choose your area, we use the approximate location that our hosting provider (Vercel) works out from your internet connection, only on our server, only to list nearby places first in the search. We do not store it, log it, or send it to anyone. It can be wrong (for example on a VPN or mobile data), which is why you always choose the place yourself. We do not use your phone's GPS. [TO CONFIRM: whether Vercel keeps the approximate location it works out in its own logs.]

Place list: place names and locations come from GeoNames (https://www.geonames.org), licensed under Creative Commons Attribution 4.0 (https://creativecommons.org/licenses/by/4.0/). The list was filtered and reformatted for Kego, and is searched on our own servers, so no outside service receives what you type.

10. Age

Kego is for people aged 18 or over. We do not knowingly collect information from anyone younger.

11. Changes

We may update this policy from time to time. The "Last updated" date shows when it last changed.

12. Contact

Questions or requests: support@kegoapp.com.