Privacy Policy

1. Who we are

SiMPLE IT, s. r. o. ("we", "us", "our") operates Kamamky, a mobile application that helps parents connect, chat, and discover family-friendly places and events. We are the data controller responsible for your personal data.

If you have any questions about this policy or how we handle your data, contact us at info@kamamky.app.

2. What personal data we collect

Account information

• Your email address and a securely hashed password, if you sign up directly; or
• your name, email address, and profile picture, if you sign up with Google. In that case we also store the tokens Google issues so that your account stays linked.
• While you are signed in we keep a session record containing your IP address and the identifier of the app or browser you signed in from, so we can keep the session secure and detect misuse.

Profile and onboarding information

When you complete onboarding, we collect: your name, date of birth, gender, city, a short bio, your interests, what you're looking for on the app (e.g. finding fellow parents or friends), lifestyle preferences (including your diet and whether you smoke), spoken languages, personal values, vaccination status, parenting style, preferred mobility, your occupation, social media handles you choose to add, and up to 6 profile photos. From your date of birth we derive your age and your zodiac sign; both are shown on your profile to other users.

Information about your children

Adding at least one child is required in order to use the App. For each child we collect their first name, gender, and birth year. This information is provided by you, the parent, and is used to show other users context about your family — your children are not app users and do not interact with the App directly. Other signed-in users can see your children's approximate ages on your profile, and can filter the discovery grid by children's age range.

Location information

• City: the city you enter during onboarding is used to show you other parents nearby and is visible to other users.
• We do not collect or use your device's precise location. The App does not request location permission and does not track where you are.

Messages and posts

Messages you send in a one-to-one chat are stored to enable the chat feature and are visible to the participants of that conversation. Messages in a meetup chat are visible to the organiser and to everyone attending that meetup. Posts you write in a group are visible to the members of that group.

Photos

Photos you upload — your profile photos and a group's header photo — are stored with our cloud storage provider (see "Who we share your data with" below) and are used to display your profile and that content to other users.

Relationship and safety information

If you send or receive friend requests, or block or report another user, we process the relevant user IDs, the status of that action, and — for reports — the reason you select. If you add another parent to your favourites, we store the two user IDs; favourites are private and one-sided, so the person you favourite is never notified and cannot see it.

Push notifications

If you enable notifications, we collect a device push token and the language set on that device, used solely to deliver notifications to you (e.g. new messages, friend requests, event invitations). To deliver a notification, the token and its content are passed to Expo, and from there to Apple's or Google's push service.

Technical, analytics, and crash data

We use analytics and crash-reporting tools to understand how the App is used and to identify and fix technical issues. This includes screen views — recorded on every screen change from the moment the App starts — event names you generate by using app features, and, when an error occurs, diagnostic information linked to your account's internal identifier. On the server side we keep application logs, a short-lived cache of your session, and a record of the IP addresses that requests come from, so that we can apply rate limits and block abuse.

Communications with us

If you contact us through the App — the support form, the safety form, a bug report, or a feature suggestion — we process the content of your message together with your account details so that we can respond. These messages reach us by email at info@kamamky.app.

Information stored on your device

Some information stays on your device and is not sent to us: your sign-in session, your chosen language, and whether you enabled biometric sign-in, all held in the device's secure storage; plus a cache of the images the App has displayed. If you turn on biometric sign-in, your face or fingerprint is checked by your device — we never receive biometric data.

3. Legal bases for processing

We process your personal data on the following legal bases under Article 6 of the GDPR:

• Performance of a contract — to create and maintain your account, show your profile to other users, and provide the core features of the App (discovery, friends, chat, meetups, groups, notifications).
• Consent — for push notifications, which you can withdraw at any time in your device settings; and for the special category information you choose to disclose on your profile (see below).
• Legitimate interests — to keep the App and your account safe (handling reports and blocks, applying rate limits, detecting misuse), to find and fix technical faults through crash reporting, to understand how the App is used through analytics, and to respond to your enquiries.
• Legal obligation — where we must retain or disclose information to comply with the law.

4. Special category data

Some of the profile information the App collects falls under Article 9 of the GDPR, which covers particularly sensitive categories of personal data. We process it only with your explicit consent, and only to display it on your profile as information you have chosen to share.

• Vaccination status is health data, and it concerns both you and your children. Choosing an option is a required step of onboarding, but one of the options — "I will keep it for myself" — discloses nothing. By choosing any of the other options, you explicitly consent to that status being shown on your profile.
• Values — options such as LGBTQI+ support, or liberal / conservative / progressive — may reveal your political opinions or beliefs, or say something about sexual orientation.
• Lifestyle — in particular whether you smoke and how you eat — is health-related information.

Each of these appears on your profile only because you chose it, other users can filter on it, and you can change or clear any of them at any time by editing your profile.

5. Who we share your data with

We share personal data with the following categories of recipients, strictly as needed to operate the App:

• Other users of the App — your profile information (except your account credentials) is visible to other signed-in users as part of the App's core functionality.
• Google — for Google Sign-In, for Firebase Crashlytics and Firebase Analytics (crash reports and usage analytics), and for delivering the emails our service sends you.
• Expo, Apple and Google — to deliver push notifications to your device through Apple's and Google's push infrastructure.
• Supabase — to store and deliver one-to-one chat messages in real time.
• Oracle Cloud Infrastructure — to store the photos you upload.
• Our hosting and database providers — to store your account, profile and activity data, including a short-lived session cache.

The App's editorial content — partner venues, deals, this policy — is delivered by our content management system, which receives no personal data. We do not sell your personal data to third parties.

6. International data transfers

Your account, profile, message and photo data is stored on servers within the European Union. Some of the providers listed above process data in the United States: crash reporting and analytics (Google), push notification delivery (Expo, Apple and Google), and the delivery of our account emails (Google). Where personal data is transferred outside the EU/EEA, we rely on the EU-US Data Privacy Framework and, where it does not apply, on the European Commission's Standard Contractual Clauses.

7. How long we keep your data

• Your account and profile data is kept for as long as your account is active.
• Session records expire after 30 days; email-verification and password-reset tokens expire within hours of being issued.
• Your messages, group posts, meetups and photos are kept for as long as your account is active.
• Correspondence you send us through the App is kept for as long as we need it to deal with your request and any follow-up.

If you ask us to delete your account, we delete or anonymise your personal data within 30 days, across our main database, the chat database, and our photo storage. Deletion requests are handled by hand today — see "Your rights" below. We may keep specific records for longer where the law requires it, for example while an open safety report is being resolved.

8. Your rights

Under the GDPR, you have the right to:

• Access the personal data we hold about you;
• Rectify inaccurate or incomplete data (you can also do this directly by editing your profile);
• Erase your data ("right to be forgotten");
• Restrict or object to certain processing;
• Data portability — receive your data in a structured, machine-readable format;
• Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, contact us at info@kamamky.app. There is currently no delete-account button in the App — account deletion is requested by email and we action it by hand, without undue delay and within one month, as required by law.

You also have the right to lodge a complaint with the Slovak data protection authority: Úrad na ochranu osobných údajov Slovenskej republiky, Hraničná 12, 820 07 Bratislava 27, Slovak Republic — www.dataprotection.gov.sk.

9. Children and minors

The App is intended for adult parents and guardians and is not directed at children. We do not knowingly allow children to create their own accounts. Anything you add about your child — their first name, gender, and the year they were born — is visible to other signed-in users on your profile, and other users can filter by children's age range. Please keep that in mind when deciding what to fill in. Information about your children is provided by you, the account holder, under your own responsibility as parent or legal guardian.

10. Security

We use appropriate technical and organisational measures — including encryption in transit, access controls, hashed passwords, and rate limiting on sign-in and other sensitive operations — to protect your personal data against unauthorised access, loss, or misuse. One limitation is worth stating plainly: uploaded photos are served from web addresses that are not published or guessable, but that are not individually access-controlled, so anyone who has the address of an image can open it. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the App. The "Last updated" date at the top of this page reflects the latest revision.

12. Contact us