Last Updated: October 25, 2026 · Effective Date: December 10, 2025
Contents
1. Introduction
Konectr ("we", "us", "our") operates the Konectr mobile application (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
By using Konectr, you agree to the collection and use of information in accordance with this policy.
2. Data Controller & Company Information
For the purposes of the Malaysian Personal Data Protection Act 2010 ("PDPA"), the data controller (the PDPA "data user") responsible for your personal data is Deepak Porwal (founder of Konectr), operating from Kuala Lumpur, Malaysia, contactable at privacy@konectr.app. Konectr is in the process of incorporation; upon completion, the incorporated entity will become the data controller and this section will be updated.
- Data Controller:
- Deepak Porwal — founder, Konectr (incorporation in progress)
- Contact Address:
- Kuala Lumpur, Federal Territory of Kuala Lumpur 50000, Malaysia
- Data Protection Contact:
- privacy@konectr.app
- Website:
- https://konectr.app
3. Data We Collect
Personal Information
- •Email address (for sign-in and account recovery)
- •Phone number (optional, if you choose to add it)
- •Name (display name for your profile)
- •Date of birth (you must be 18 or over to create an account)
- •Gender (for profile display, and to control access to women-only activities)
- •Profile photo (optional)
- •Bio, interests, and languages spoken
- •Pinned photos (up to three, with optional captions) and answers to profile prompts (optional)
- •What you say you are looking for (optional — it stays until you change or clear it)
- •Photos you send in a plan's chat, and any of those you or another attendee choose to publish to This Week
Location Data
- •Your precise location while the app is open, used on your device to find plans within 5 km of you — plans show a venue, never your position
- •Your city, so we show you the right area
- •A location you choose to share in a chat (visible to that chat for 15 minutes)
- •Your location at the moment you confirm a meetup, used only to verify attendance
Activity Data
- •Venues visited (to suggest similar activities)
- •Activities you started
- •Matches made (to improve matching algorithm)
- •Messages sent (retained while the conversation exists)
- •Alerts you turn on (optional): the hashtag or area you ask us to watch, the full plans you want to hear about if a spot opens, and the days we sent you an alert
Usage Data
- •App interactions (features used, screens viewed)
- •Crash logs (to fix bugs and improve stability)
- •Device information (OS version, app version, device model)
4. How We Use Your Data
We use your information to:
- ✓Match you with other users for in-person activities
- ✓Use your profile gender to control access to women-only activities: only members whose profile gender is Woman can see or join them
- ✓Verify your identity and maintain a safe community
- ✓Improve our Service through analytics
- ✓Comply with legal obligations under PDPA 2010
- ✓Send service-related notifications
- ✓Prevent fraud and abuse
We do NOT:
- ✕Send marketing emails without your explicit consent
- ✕Sell your data to third parties
- ✕Use your data for purposes unrelated to the Service
5. Data Sharing
With Other Users
We share your profile information (name, photo, bio, interests), approximate location, and activity preferences with matched users.
Who sees your profile photo
Your profile and cover photos are shown only to people who share a plan with you (including past plans), people in your Circle, people you've messaged, and anyone you've sent a Circle or join request to. They are never shown to someone you've blocked. Everyone else, including anyone who opens a shared plan link, sees your initials instead. If you choose to appear on the public leaderboard, your profile photo is shown there too.
Who sees your social links
The social links you add to your profile (such as Instagram, TikTok, LinkedIn, X or Facebook) are shown only to people who share a plan with you (including past plans) and people in your Circle. They are never shown to someone you've blocked or who has blocked you. If you hold the Konectr Captain badge, your links are shown to every signed-in Konectr member. You can change or remove them at any time in Edit profile, and they are deleted with your account.
Alerts you ask for
If you ask Konectr to tell you when someone's up for something, or when a spot opens on a full plan, we store that request. Nobody else sees your alerts, and the person whose plan you're watching isn't told. You get at most one alert a day, and never for a women-only plan you can't join, a Circle-only plan you're not part of, or someone you've blocked or who has blocked you. To stop, turn the alert off where you set it, which deletes it, or turn off Reminders in Settings → Notifications to stop the pushes. Your alerts are deleted with your account.
This Week wall (photos you choose to publish)
A photo sent in a plan's group chat can be shared to This Week by anyone who was on that plan. A published photo is visible to every signed-in Konectr member in your city for 14 days, shown only as the venue, the kind of plan and the group size — never a name, a date, or a link to the plan. Any attendee of that plan can take it down at any time, we review every photo before it goes live, location data is stripped from the image, and the file is deleted from our storage when the 14 days end. Only share photos that everyone in them is comfortable with.
Pinned photos and prompts
Your pinned photos and prompt answers are shown to people in your Circle, your matches and anyone who has joined a plan with you, never to someone you have blocked. If you turn on "Show photos & prompts to everyone" in Privacy Settings, every signed-in Konectr member can see them. Location data is stripped from pinned photos. If we hide one after a report, it stays visible to you with a notice. You can remove them at any time, and they are deleted with your account.
We NEVER Share
- ✕Your phone number
- ✕Your exact location
- ✕Your private messages with others
- ✕Your personal contact information
Service Providers
We work with these service providers, each of which processes data only to perform its function for us: Supabase (database, authentication and file storage, hosted in Singapore); Firebase Cloud Messaging and Firebase Crashlytics (push delivery and crash reports); PostHog (first-party product analytics and masked session recordings, hosted in the United States); Brevo (transactional and lifecycle email); Mapbox (map display and reverse geocoding — the map SDK on your device may send anonymised usage telemetry to Mapbox); Google Places (venue search and venue photos); and Google ML Kit (on-device translation model downloads). None of them may use your data for their own purposes.
6. Your Rights Under PDPA 2010
Right to Access
Request a copy of your personal data in JSON format.
Right to Correction
Update or correct inaccurate information in your profile.
Right to Deletion
Delete your account. Personal data is erased within 30 days; see Section 10 for what is anonymised or retained and why.
Right to Data Portability
Export your data in a structured, machine-readable format.
Right to Withdraw Consent
Stop us from processing your data at any time.
Right to Complaint
File a complaint with the Personal Data Protection Commissioner.
To exercise these rights, contact: privacy@konectr.app
7. Location Data Specifics
8. Children’s Privacy
Konectr is strictly 18+ only. You must enter a date of birth showing you are 18 or over to create an account; we do not verify identity documents. We do not knowingly collect data from anyone under 18. Accounts found to belong to minors are removed.
If we learn we have collected personal data from anyone under 18, we will delete that information immediately. Parents should contact privacy@konectr.app if they discover their child is using Konectr.
9. Data Security
Technical Safeguards
- •Messages are encrypted in transit and at rest; they are not end-to-end encrypted, so we can act on safety reports
- •Encrypted data storage via Singapore data center
- •Secure HTTPS transmission for all data transfers
- •Row-level security: each account can read only the data it is allowed to see
Organizational Safeguards
- •Access to production data is limited to the founder
- •Security review of every change that touches personal data
- •Data breaches are reported to affected users and the Commissioner as PDPA requires
10. Data Retention
| Data Type | Retention Period |
|---|---|
| Active accounts | Retained while your account is open |
| Deleted accounts | Hidden immediately, 30 days to change your mind, then permanently erased |
| Messages | Retained while the conversation exists. If you delete your account, your messages stay in other people's conversations but are no longer linked to you |
| Activity and availability history | Retained while your account is open |
| Location data | Chat location shares expire after 15 minutes. Meetup-confirmation coordinates are kept while your account is open and erased on deletion |
| Alerts you turn on | Kept until you turn the alert off, which deletes it. The record of days we sent you an alert is kept while your account is open. Both are erased with your account |
| Crash logs | Retained for 90 days by Firebase Crashlytics |
| Safety reports | Retained after account deletion, so that deleting an account cannot erase a report |
| Women-only ban list (web RSVPs) | If a starter removes you from a women-only activity you joined on the web, we keep your email address and a one-way hash of your phone number for 12 months after the ban ends, then delete them |
11. International Data Transfers
Your data is stored in Singapore (via Supabase Asia region). We are building Konectr to the standards set by Malaysia's PDPA 2010 and the EU GDPR — the rights described in this policy, including access, correction, download, and deletion, are honoured today. Our formal compliance review is still in progress, and we will say so here when it is complete.
When transferring data internationally, we ensure adequate safeguards including standard contractual clauses, data processing agreements, and compliance with local data protection laws.
13. Changes to Privacy Policy
We may update this policy periodically. You will be notified via in-app notification. Continued use after changes constitutes acceptance. Major changes require explicit re-consent.
14. Contact & Complaints
If you are not satisfied with our response, you may escalate to the Personal Data Protection Department, Ministry of Communications and Digital, Level 5, MCMC Tower 1, Jalan Impact, Cyberjaya, 63000 Selangor, Malaysia (pdpa@pdp.gov.my).
- Privacy Questions:
- privacy@konectr.app
- General Support:
- support@konectr.app
- Legal Matters:
- legal@konectr.app
- Response Time:
- Within 48–72 hours
15. Consent & Data Breach Notification (PDPA 2010)
By creating a Konectr account and using the Service, you give your explicit consent to the collection, use, and disclosure of your personal data as described in this Policy, including processing by our service providers located outside Malaysia (for example, data hosting in Singapore). Where we rely on your consent, you may withdraw it at any time by contacting privacy@konectr.app or by deleting your account. Withdrawal does not affect processing carried out before withdrawal, or processing we are required by law to perform.
Data breach notification: if a personal data breach occurs that is likely to cause significant harm, we will notify the Personal Data Protection Commissioner as soon as practicable (and within 72 hours where required) and will inform affected users without unnecessary delay and, in any case, no later than 7 days after we notify the Commissioner. We maintain an incident-response process to contain, assess, and remediate breaches.
This Privacy Policy is governed by the laws of Malaysia. Any disputes shall be resolved in the courts of Kuala Lumpur.
Questions? Contact us at privacy@konectr.app · Also read our Terms of Service