1. Introduction

Konectr ("we", "us", "our") operates the Konectr mobile application (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using Konectr, you agree to the collection and use of information in accordance with this policy.

2. Data Controller & Company Information

For the purposes of the Malaysian Personal Data Protection Act 2010 ("PDPA"), the data controller (the PDPA "data user") responsible for your personal data is Deepak Porwal (founder of Konectr), operating from Kuala Lumpur, Malaysia, contactable at privacy@konectr.app. Konectr is in the process of incorporation; upon completion, the incorporated entity will become the data controller and this section will be updated.

Data Controller:: Deepak Porwal — founder, Konectr (incorporation in progress)
Contact Address:: Kuala Lumpur, Federal Territory of Kuala Lumpur 50000, Malaysia
Data Protection Contact:: privacy@konectr.app
Website:: https://konectr.app

3. Data We Collect

👤

Personal Information

•Email address (for sign-in and account recovery)
•Phone number (optional, if you choose to add it)
•Name (display name for your profile)
•Age (to verify you are 18+)
•Gender (for profile display)
•Profile photo (optional)
•Bio, interests, and languages spoken

📍

Location Data

•Approximate location (within 50km radius, fuzzy only)
•City and neighborhood (never exact address)
•Venue check-ins (when you create or join activities)

🎯

Activity Data

•Venues visited (to suggest similar activities)
•Activities created (hosting history)
•Matches made (to improve matching algorithm)
•Messages sent (retained while the conversation exists)

📊

Usage Data

•App interactions (features used, screens viewed)
•Crash logs (to fix bugs and improve stability)
•Device information (OS version, app version, device model)

4. How We Use Your Data

We use your information to:

✓Match you with other users for in-person activities
✓Verify your identity and maintain a safe community
✓Improve our Service through analytics
✓Comply with legal obligations under PDPA 2010
✓Send service-related notifications
✓Prevent fraud and abuse

We do NOT:

✕Send marketing emails without your explicit consent
✕Sell your data to third parties
✕Use your data for purposes unrelated to the Service

5. Data Sharing

With Other Users

We share your profile information (name, photo, bio, interests), approximate location, and activity preferences with matched users.

We NEVER Share

✕Your phone number
✕Your exact location
✕Your private messages with others
✕Your personal contact information

Service Providers

We work with trusted third-party providers: Supabase (data hosting in Singapore), Firebase Cloud Messaging (push notifications), and Sentry (crash reporting). All providers are bound by strict data protection agreements.

6. Your Rights Under PDPA 2010

Right to Access

Request a copy of your personal data in JSON format.

Right to Correction

Update or correct inaccurate information in your profile.

Right to Deletion

Delete your account and all associated data within 30 days.

Right to Data Portability

Export your data in a structured, machine-readable format.

Right to Withdraw Consent

Stop us from processing your data at any time.

Right to Complaint

File a complaint with the Personal Data Protection Commissioner.

To exercise these rights, contact: privacy@konectr.app

7. Location Data Specifics

🚫NEVER tracked in background — only when the app is active

🔵Stored as approximate area (fuzzy location, not exact coordinates)

🗑️Auto-deleted after 30 days of inactivity

⚙️You can disable location permissions in device settings anytime

8. Children’s Privacy

Konectr is strictly 18+ only. Age verification is required during signup. We do not knowingly collect data from minors under 18. Underage users are immediately blocked and reported if discovered.

If we learn we have collected personal data from anyone under 18, we will delete that information immediately. Parents should contact privacy@konectr.app if they discover their child is using Konectr.

9. Data Security

Technical Safeguards

•End-to-end encryption for private messages
•Encrypted data storage via Singapore data center
•Secure HTTPS transmission for all data transfers
•Two-factor authentication for admin access

Organizational Safeguards

•Regular security audits
•Limited employee access on need-to-know basis
•Security training for all team members
•Incident response plan for data breaches

10. Data Retention

Data Type	Retention Period
Active accounts	Retained while your account is open
Deleted accounts	Hidden immediately, 30 days to change your mind, then permanently erased
Messages	Retained while the conversation exists. If you delete your account, your messages stay in other people's conversations but are no longer linked to you
Activity and availability history	Retained while your account is open
Location data	Approximate only; retained while your account is open
Crash logs	Retained for 90 days by our crash reporting provider
Safety reports	Retained after account deletion, so that deleting an account cannot erase a report

11. International Data Transfers

Your data is stored in Singapore (via Supabase Asia region). We comply with PDPA (Personal Data Protection Act 2010, Malaysia) and GDPR (General Data Protection Regulation, European Union).

When transferring data internationally, we ensure adequate safeguards including standard contractual clauses, data processing agreements, and compliance with local data protection laws.

12. Cookies and Tracking

The Konectr mobile app does not use advertising cookies or cross-app tracking. In-app analytics are minimal (crash reporting, feature usage, performance) and you can opt out in Settings > Privacy > Analytics.

Our website (konectr.app) uses: PostHog product analytics in cookieless mode (no cookies or device storage); Contentsquare session analytics to understand how visitors use the site; and — only if you accept the cookie banner — Meta and Google advertising pixels that measure whether our ads brought you here. Declining or ignoring the banner keeps all advertising pixels off. Full details: konectr.app/cookies.

We do NOT sell your personal data to advertisers, build advertising profiles of you, or track you across other apps.

13. Changes to Privacy Policy

We may update this policy periodically. You will be notified via in-app notification. Continued use after changes constitutes acceptance. Major changes require explicit re-consent.

14. Contact & Complaints

If you are not satisfied with our response, you may escalate to the Personal Data Protection Department, Ministry of Communications and Digital, Level 5, MCMC Tower 1, Jalan Impact, Cyberjaya, 63000 Selangor, Malaysia (pdpa@pdp.gov.my).

Privacy Questions:: privacy@konectr.app
General Support:: support@konectr.app
Legal Matters:: legal@konectr.app
Response Time:: Within 48–72 hours

15. Consent & Data Breach Notification (PDPA 2010)

By creating a Konectr account and using the Service, you give your explicit consent to the collection, use, and disclosure of your personal data as described in this Policy, including processing by our service providers located outside Malaysia (for example, data hosting in Singapore). Where we rely on your consent, you may withdraw it at any time by contacting privacy@konectr.app or by deleting your account. Withdrawal does not affect processing carried out before withdrawal, or processing we are required by law to perform.

Data breach notification: if a personal data breach occurs that is likely to cause significant harm, we will notify the Personal Data Protection Commissioner as soon as practicable (and within 72 hours where required) and will inform affected users without unnecessary delay and, in any case, no later than 7 days after we notify the Commissioner. We maintain an incident-response process to contain, assess, and remediate breaches.