Privacy Policy

toolKUDU ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you use the toolKUDU mobile application.

1. Information We Collect

• Username (public identifier)
• Email address (private, used for authentication only)
• Full name
• Profile photo
• Push notification token
• Tool and toolbox data you create
• Lending and borrowing history
• Buddy connections

2. How We Use Your Information

• Account creation and authentication
• Displaying your profile to other users (username and name only)
• Enabling tool sharing and lending features
• Sending push notifications about buddy requests and tool loans
• Improving app functionality and user experience

3. Data Storage

Your data is stored securely using Supabase (cloud-hosted PostgreSQL database). Session tokens are stored locally on your device using AsyncStorage. We do not store sensitive authentication tokens in unencrypted local storage beyond what is required for session management.

4. Third-Party Services

We use the following third-party services to operate the app:

• Supabase — database hosting and authentication
• Google — OAuth sign-in (we only receive your name and email)
• Apple — Sign in with Apple (we only receive your name and email)
• Expo — push notification delivery
• Stripe — payment processing for Pro subscriptions on web (US only). Stripe may collect payment card information directly; we do not store card details.
• RevenueCat — in-app purchase management for iOS subscriptions via Apple App Store
• Sentry — crash reporting and error diagnostics. Crash reports may include device type, OS version, and app state at the time of the crash. No personally identifiable information is intentionally included.
• PostHog — anonymous usage analytics. We collect feature usage data (e.g. which screens are visited) to improve the app. This data is not linked to your identity.
• Google Cloud Vision — images you upload are scanned for inappropriate content before being stored. Images are not retained by Google beyond this check.

5. Paid Rentals

toolKUDU allows tool owners to list tools for paid rental. Payment for such rentals is coordinated directly between the owner and borrower — toolKUDU does not process or hold funds for peer-to-peer rental transactions. Any payment details exchanged between users are outside the scope of this Privacy Policy.

6. Data Sharing

We do not sell, rent, or share your personal information with third parties for marketing purposes. Your email address is never shown to other users. Only your username, name, and avatar are publicly visible to other users.

7. Your Rights

You have the right to:

• Edit your profile information at any time
• Delete your account and all associated data
• Control the visibility of your tools (private, friends-only, or public)

To delete your account, go to Settings > Delete Account. This action is permanent and cannot be undone.

8. California Residents (CCPA)

If you are a California resident, you have the right to know what personal information we collect, request deletion of your data, and opt out of the sale of personal information. We do not sell personal information. To exercise your rights, use the in-app account deletion feature or contact us.

9. Children's Privacy

toolKUDU is not intended for children under 13. We do not knowingly collect personal information from children under 13.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app.

11. Contact Us

If you have questions about this Privacy Policy or your data, please contact us at info@toolkudu.com.