1. Introduction
Kuraz ("we," "our," or "us") operates the Kuraz mobile application (the "App"), a community marketplace connecting the Ethiopian diaspora in the Washington DC, Maryland, and Virginia (DMV) area. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App.
Please read this policy carefully. By using the App, you agree to the practices described here. If you do not agree, please discontinue use of the App.
2. Information We Collect
2.1 Information You Provide Directly
| Data | Purpose |
|---|---|
| Phone number | Account creation and authentication |
| Display name | Identifying you on your profile |
| Listing content | Title, description, price, location, category, and photos you submit |
| Contact phone number | Shown on your listings so interested parties can reach you |
2.2 Information Collected Automatically
When you use the App, we may automatically collect:
- Device information — device model, operating system version, unique device identifiers
- Usage data — screens viewed, features used, crash reports, and diagnostic logs
- Location area — the general area you select (Maryland, Virginia, or DC). We do not collect precise GPS location.
2.3 Information We Do Not Collect
- Precise GPS or real-time location data
- Payment or financial information
- Biometric data
- Information from minors under 13 years of age (see Section 9)
3. How We Use Your Information
We use the information we collect to:
- Provide the App — create and manage your account, display your listings, and enable other users to contact you
- Authenticate you — verify your identity via phone number sign-in
- Improve the App — analyse usage patterns, diagnose bugs, and develop new features
- Communicate with you — send service-related notices
- Ensure safety — detect and prevent fraud, abuse, and policy violations
- Comply with law — meet applicable legal obligations
We do not sell your personal information. We do not use your information for targeted advertising.
4. How We Share Your Information
4.1 Public Information
The following information is visible to all users of the App by design:
- Listing title, description, price, area, photos, and category
- Contact phone number you provide on a listing
Do not include sensitive personal information in listing content that you do not wish to be publicly visible.
4.2 Service Providers
| Provider | Service | Data Shared | Privacy Policy |
|---|---|---|---|
| Supabase | Database and authentication | Phone number, profile, listings | supabase.com/privacy |
| Cloudinary | Image storage and delivery | Listing photos you upload | cloudinary.com/privacy |
| Expo | App infrastructure and updates | App usage diagnostics | expo.dev/privacy |
4.3 Legal Disclosures
We may disclose your information if required by law, court order, or governmental authority, or if we believe in good faith that disclosure is necessary to protect our rights or the safety of others.
4.4 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.
4.5 No Sale of Data
We do not sell, rent, or trade your personal information to third parties for their commercial purposes.
5. Data Retention
| Data Type | Retention Period |
|---|---|
| Account and profile data | Until you delete your account |
| Listings | Until you delete the listing or your account |
| Uploaded images | Until the associated listing is deleted |
| Authentication logs | 90 days |
| Crash and diagnostic logs | 30 days |
When you delete your account, we will delete or anonymise your personal data within 30 days, except where retention is required by law.
6. Data Security
We implement industry-standard technical and organisational measures to protect your information, including:
- Encryption in transit — all data is transmitted over HTTPS/TLS
- Row Level Security (RLS) — database-level controls ensure users can only modify their own data
- File type validation — image uploads are restricted by type and folder at the service level
- Authentication — phone-based OTP authentication
No method of transmission or storage is 100% secure. In the event of a data breach that affects your rights and freedoms, we will notify affected users as required by applicable law.
7. Your Rights and Choices
7.1 All Users
- Access — request a copy of the personal data we hold about you
- Correction — update inaccurate profile information directly in the App
- Deletion — delete your listings or your entire account through the App
- Withdrawal of consent — stop using the App at any time
7.2 California Residents (CCPA/CPRA)
California residents have the right to know what personal information is collected, delete it, opt out of the sale of personal information (we do not sell data), and receive non-discriminatory treatment for exercising privacy rights.
7.3 EEA, UK, and Switzerland Residents (GDPR)
Our legal basis for processing your data is contract (to provide the service), legitimate interests (security and improvement), and legal obligation. You have the right to lodge a complaint with your local supervisory authority.
8. International Data Transfers
The App is operated from the United States. If you access the App from outside the United States, your data may be transferred to and processed in the United States. By using the App, you consent to this transfer.
9. Children's Privacy
The App is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has submitted information to us, please contact us and we will delete it promptly.
10. Third-Party Links and Services
Listings may include phone numbers that connect you with third parties outside our App. We are not responsible for the privacy practices of those parties.
11. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
Kuraz
Email: kurazapp@gmail.com
We will respond to verifiable requests within 30 days.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last Updated" date at the top of this policy and, where appropriate, by displaying a notice in the App. Your continued use of the App after changes are posted constitutes your acceptance of the updated policy.