Privacy Policy

Last updated: 19 March 2026

KilrWhale ("we", "our", "the app") is an auction marketplace for physical goods in New Zealand. This policy explains what data we collect, why, and how we protect it.

1. Data We Collect

We collect the following information when you use KilrWhale:

• Account information — your name, email address, and authentication credentials (via Apple Sign-In, Google Sign-In, or email).
• User content — listing photos, titles, descriptions, and bids you create.
• Purchase history — records of in-app purchases (subscriptions and consumable packs) processed through Apple.
• Usage data — feature usage counts (Smart Fill uses, AI searches, listing counts) to enforce plan limits.
• User ID — a unique identifier for your account.

2. How We Use Your Data

All data is used solely for app functionality:

• To create and manage your account
• To display your listings and bids to other users
• To process in-app purchases and manage subscription status
• To enforce usage limits on free and paid plans
• To send notifications about auctions, bids, and account activity

We do not use your data for advertising, tracking across other apps, or sale to third parties.

3. Data Storage & Security

Your data is stored securely using Supabase (hosted on AWS) with row-level security policies. Photos are stored in cloud storage with access controls. All data is transmitted over HTTPS.

4. Third-Party Services

• Supabase — authentication and database hosting
• Apple — Sign-In with Apple and in-app purchase processing
• Google Cloud — backend API hosting and photo storage

These services have their own privacy policies and process data on our behalf.

5. Data Retention

Your account data is retained while your account is active. Listing photos for expired and completed auctions are automatically deleted after a cooldown period. You can request deletion of your account and associated data at any time by contacting us.

6. Your Rights

You can:

• Access your data through the app (profile, listings, bids)
• Update your display name and profile information
• Delete your account by contacting us at the email below
• If you signed in with Apple, you can stop sharing your email via Apple's privacy relay at any time

7. Children's Privacy

KilrWhale is not intended for users under 17. We do not knowingly collect data from children.

8. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated date.

9. Contact

For privacy questions or data deletion requests, email: privacy@kilrwhale.com