Privacy Policy

1. Information We Collect

We collect information in three ways: directly from you, automatically when you use the Service, and from the permissions you grant on your device.

• Information you provide. Account details such as your name, email address, and phone number; your profile information; the routes you create (start and end points, days, and times); content you submit, including messages and connection notes; and any information you send to support.
• Location data. With your permission, we collect your device's location to show you people and routes near you and to power route discovery. You can turn location off at any time in your device settings, though some features will then be limited.
• Device & usage information. Device type, operating system and app version, IP address, push notification token, unique device identifiers, crash logs, and usage events such as features you open and interactions you make.
• Payment information. Credit and debit card details are handled by Apple, Google, or our payment processors — we never see or store your full card number. We receive only transaction confirmations and purchase history needed to grant credits.

2. Location & Device Permissions

Komut is built around everyday journeys, so location is central to the Service. We request location access only while you use the app to power route discovery and nearby results — we do not track your location in the background. If the app requests other device permissions (such as camera or notifications), we use them only for the feature you asked for, and you can decline or revoke them in your device settings at any time.

3. How We Use Information

• Provide, operate, and maintain the Service, including accounts, routes, discovery, and connections.
• Personalize results and improve features, performance, and reliability.
• Detect, prevent, and respond to fraud, abuse, safety incidents, and security threats.
• Send service communications — such as connection requests, notifications, and policy updates — and, with your consent, marketing messages.
• Process credit purchases and prevent payment fraud.
• Comply with applicable laws and enforce our agreements.

4. Legal Bases

Where applicable law requires a legal basis (for example, for users in the European Economic Area), we rely on: performance of a contract (to provide the Service you request); legitimate interests (to keep the Service safe, secure, and improving); consent (for location access and marketing messages, which you may withdraw at any time); and legal obligation (to comply with the law).

5. Sharing & Third Parties

We do not sell your personal information. We share data only with:

• Service providers who process data on our behalf — hosting and infrastructure, analytics and crash reporting, push notification delivery, and payment processing — under contracts that limit their use of your data to providing these services.
• Other users — as described in the Service: your display name, general route direction, and the profile content you choose to share.
• Legal authorities — when required by law, or to protect the rights, safety, and property of the Company, our users, or the public.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy; we will notify you before your data becomes subject to a different policy.

6. Data Retention

We retain your personal data for as long as your account exists, including after deactivation. Komut does not permanently delete account data upon deactivation: your account details, routes, connection history, and requests you have made are kept so we can enforce these Terms, investigate misconduct, and analyze activity that may go against our policies or applicable law.

Deactivation only hides your profile and removes you from discovery — it does not erase your data. Because routes, who you connected with, and the requests you sent or received are important for security purposes, we retain them for as long as needed to keep the platform safe, prevent fraud and abuse, trace violations of our Terms back to the responsible account, resolve disputes, and comply with legal obligations. Logs, analytics, and crash data are kept only as long as needed for security, debugging, and improvement purposes.

7. Security

We use administrative, technical, and organizational measures to protect your personal data, including encryption in transit and access controls that limit who can see your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. International Transfers

Your information may be processed in countries other than your own. Where we transfer personal data from the EEA, UK, or Switzerland, we use appropriate safeguards such as standard contractual clauses or recognized transfer frameworks to ensure your data remains protected.

9. Your Rights & Choices

Depending on where you live, you may have the right to access, correct, or export your personal data; to restrict or object to certain processing; and to withdraw consent at any time. Requests to erase personal data are evaluated in line with our retention practices described in Section 6 — we retain account, route, and connection data for security, enforcement of our Terms, and legal compliance. California residents have additional rights under the CCPA, including the right to know and correct personal information and to opt out of its sale — which we do not engage in.

You can exercise many of these controls directly in the app — by editing your profile, adjusting device permissions, or deactivating your account from Settings (deactivation hides your profile; it does not delete your data). To submit a request, email us at contact@komut.app. We respond within the timeframe required by applicable law, and we will not discriminate against you for exercising your rights.

10. Children's Privacy

The Service is intended for individuals aged 18 and older. We do not knowingly collect personal data from children. If you believe a child has provided us with information, contact us and we will delete it.

11. Changes to this Policy

We may update this Privacy Policy from time to time. We will post the revised version here with an updated "Last updated" date and, for material changes, provide additional notice in the app or by email. Continued use of the Service after an update constitutes acceptance of the revised Policy.