Privacy Policy

Summary

Kredo uses email-and-password accounts for a friends-recommendations app. People post recommendations to groups, save recommendations to try, and rate recommendations Hit or Miss.

Group content is limited to group members. Profiles are different: any signed-in Kredo user can read a profile's username, photo, Cred, tallies, and first and last name. The full visibility rules are in Who can see your content.

Kredo does not sell, rent, or broker personal data. The app has no ads, advertising SDK, advertising identifier, or tracking.

Also read the Terms of Use. Account-deletion instructions are available at Delete Your Account.

Who we are and how to reach us

Kredo is operated by Bryant Almanza. This policy covers the Kredo app and the website at joinkredo.com.

For privacy questions, rights requests, or anything else, email support@joinkredo.com.

What you give us

When you sign up, you provide an email address, a password, a lowercase username, and your first and last name. The username must be 3 to 20 characters and may contain only lowercase letters, numbers, and underscores. Firebase Authentication holds the password as a hash.

A profile photo is optional and can be skipped. If you choose one, the app uses the photo library for that avatar. The app does not capture anything with the camera or microphone.

You can create recommendations with a title, one of seven categories, an optional note, an optional place from Google Places, and an optional pasted link with a server-generated preview. A title can be up to 80 characters and a note can be up to 280 characters.

You can also create Hit or Miss ratings, saved recommendations, groups with a name and six-character invite code, and invitations. Kredo has no comments, direct messages, public feed, or reactions beyond Hit or Miss.

What's collected automatically

Firebase Analytics in the app records six events: sign_up, group_create, group_join, rec_post, rec_save, and rec_rate. Recommendation posts and saves include the category. Ratings include the category and Hit or Miss value. No email, username, user ID, name, or coordinates are attached to those events.

Firebase Crashlytics receives crash reports. The only identifier attached is the Firebase user ID, never the email address, username, or name.

A device push token is stored only after you grant notification permission. Kredo does not collect contacts, a phone number, an advertising identifier, stored location, or social sign-in data.

Location

Kredo asks for location only when you open place search while composing a recommendation. After an in-app prompt that you can decline, it requests a one-time, foreground, approximate location.

The coordinates stay in memory for that search. Kredo sends them to Google Places as a 50-kilometer bias circle so nearby results rank higher. Google Places also receives the text you type, but never your user ID, username, or email address.

Coordinates are never written to Firestore or Cloud Storage and are never logged. Kredo has no background location and no location history. If you decline, place search still works; only nearby ranking changes.

How we use it

• Email, password, and profile details create and authenticate your account.
• The username reservation checks handle availability. Username search lets people find an account for an invitation.
• Group, recommendation, rating, and saved-recommendation data provide those features. Ratings create aggregate tallies and affect the recommendation author's Cred.
• Place-search text and an optional approximate location return and rank Google Places results.
• A push token delivers invitation notifications after permission is granted.
• Firebase Analytics records the six app events listed above, and Firebase Crashlytics receives crash reports.

Who can see your content

Recommendations, aggregate rating tallies, group names, member lists, and invite codes are visible only to members of that group. Non-members and signed-out visitors cannot see them.

Your individual Hit or Miss rating is private to you. Other group members see only the aggregate Hit and Miss tallies and the rating's effect on the recommendation author's Cred.

A profile document is not limited to group-mates. Any signed-in Kredo user can read its username, profile photo, Cred, tallies, and first and last name. No current screen displays another person's real name, but the data is readable by any signed-in user because username search is used for invitations.

A username-to-user-ID lookup record is readable by anyone, including signed-out clients, so sign-up can check whether a handle is available. Bulk enumeration of usernames is blocked. Avatar files are readable by any signed-in Kredo user.

Reports and blocks

When you report a recommendation or a person in the app, Kredo stores who reported it, what was reported, the reason you chose, any details you typed (up to 500 characters), and the time. When you report a profile, the current profile photo is captured as evidence so a later photo change does not hide it. Reports can be read only by the operator and designated moderators through the moderation queue. The person you report is not shown the report or who filed it.

When you block a person, a block record is stored on your account and mirrored on theirs so the backend can enforce it. Blocks hide recommendations and profiles between the two accounts and stop invitations and new interactions. Blocking does not send the other person a notification. Your blocked list is visible only to you in Settings.

Moderation actions, such as dismissing a report, removing content, or suspending an account, are recorded in a backend-only audit log that includes the action, the reason, and the moderator who took it.

How we share it

Kredo shares information through the group and profile visibility rules above and with the service providers listed below. Kredo does not sell, rent, or broker personal data. There are no ads, advertising SDKs, IDFA, or third-party analytics beyond Firebase.

When you paste a link, Kredo's server fetches that page to make a preview. The page sees a Google Cloud IP address rather than your IP address. When a preview image or avatar is displayed, the viewer's device loads it directly from the host that serves the image.

Third parties we use

• Google and Firebase provide Authentication, Firestore, Cloud Storage, Cloud Functions, Analytics, Crashlytics, Cloud Messaging, and App Check.
• Google Places receives typed place-search text and, when you permit location access, an approximate location as a 50-kilometer bias circle. It does not receive your user ID, username, or email address from Kredo.
• Apple Push Notification service delivers invitation notifications.

Push notifications

Kredo stores a device push token only after you grant iOS notification permission. The token is used only to deliver invitation notifications. An invitation notification contains the inviter's username and the group name. Push tokens are deleted when the account is deleted or when a token goes stale.

Retention

Location coordinates are not retained. They stay in memory only for the place search that requested them.

Push tokens are deleted when the account is deleted or when they go stale. Account deletion removes the account records listed below. Recommendations, ratings, and groups follow the different retention rules in the deletion section.

Reports and moderation records are kept as an enforcement history. If you delete your account, reports you filed are kept with your identity removed from them, your block records are deleted from both accounts, and reports filed about you are kept.

Deleting your account

Start deletion in the app at Settings → Delete account. You must type your username and complete a second confirmation. Detailed instructions are also at Delete Your Account.

Deletion removes, in order: your group memberships and their membership mirrors; saved recommendations; block records on your account and their mirrors; the profile document, including username, first and last name, photo URL, Cred, and tallies; the username reservation, which frees the handle for reuse; the avatar file; and the Firebase Authentication record, including the email address, password hash, and ability to sign in.

Some group history remains after account deletion:

Your recommendations and ratings remain with your frozen username so group history still makes sense.

That includes recommendations and Hit or Miss ratings in the groups where you posted them. Groups you created also remain for their other members.

Your rights and how to exercise them

Depending on where you live, you may have rights to ask for access to, correction of, deletion of, or a copy of your personal data. You may also have rights to restrict or object to some processing.

You can delete your account in the app at Settings → Delete account. For any other privacy request, or if you can no longer sign in, email support@joinkredo.com. A deletion request remains subject to the group-history facts explained in Deleting your account.

California residents

If California privacy law applies, California residents may have rights to know what personal information is collected, used, and disclosed; request access, correction, or deletion; limit certain uses of sensitive personal information; and not be discriminated against for exercising a privacy right.

Kredo does not sell, rent, or broker personal data and does not share personal data for cross-context behavioral advertising. Use the method in Your rights and how to exercise them to make a request.

Other U.S. state residents

Privacy laws in some U.S. states may provide rights to access, correct, delete, or receive a copy of personal data, and to opt out of certain sales, targeted advertising, or profiling. Kredo does not sell, rent, or broker personal data and has no advertising or ad tracking. Use the method in Your rights and how to exercise them to make a request.

EEA and UK users

Bryant Almanza is the controller of the personal data Kredo handles.

Kredo relies on performance of these Terms to create and run accounts, groups, recommendations, ratings, saves, and invitations. It relies on consent for this website's analytics and for optional location and notification permissions. It relies on legitimate interests to protect and operate Kredo, including Firestore security rules, App Check, app analytics, and crash reporting.

Using Google, Firebase, and Apple services can involve transferring personal data to and processing it in the United States. Their privacy information is linked in Third parties we use.

You may ask to access, correct, erase, restrict, or receive your personal data, and you may object to processing in circumstances provided by law. You may also complain to the data-protection supervisory authority where you live. Use the contact method in Your rights and how to exercise them.

Children and minimum age

You must be at least 13 to use Kredo. If you are in the EEA or UK, you must be at least 16 or the minimum digital age of consent in your country, if that age is lower.

Security

Kredo uses TLS for data in transit and encryption at rest through Firebase services. Firestore security rules enforce the group and profile access described in this policy. Firebase App Check protects requests to the backend.

This website

This website uses Google Analytics to count visits. Before you make a choice, nothing goes to Google, nothing is stored on your device, no cookie is set, and no third-party resource loads.

If you accept, the site loads the Google and Firebase Analytics SDK from gstatic.com and records page views. Google sets analytics cookies at that point.

If you decline, that choice is stored permanently and is honored before any third-party resource loads. You can change either choice at any time with the “Cookie choices” control in the footer.

The website has no forms or other embeds. Hostinger keeps standard web-server access logs.

Changes

If this policy changes, the effective date at the top of this page will be updated.

Contact

For privacy questions, rights requests, and everything else, email support@joinkredo.com. It is a monitored address and it reaches the operator directly.

See the Terms of Use or Delete Your Account.