Kakime Privacy Policy

Effective date: 2025-06-30

Last updated: 2026-07-28

Kakime (the “App”, “we”, “us”, “our”) is operated by the Kakime team from Singapore. We respect your privacy and are committed to handling your personal data responsibly and in compliance with Singapore’s Personal Data Protection Act 2012 (PDPA), Apple App Store guidelines, and Google Play Developer policies.

This policy explains what information we collect, why we collect it, how we use it, who we share it with, and your rights in relation to that data.

1. Who We Are & Data Protection Officer (DPO)

In accordance with Singapore's Personal Data Protection Act 2012 (PDPA), our designated Data Protection Officer's details are set out below:

• Service name: Kakime
• Operated by: The Kakime team, Singapore (operator entity to be updated upon formal business registration under ACRA)
• Website: https://kakime.sg
• Data Protection Officer (DPO): Kevin (Founder)
• DPO & privacy contact email: privacy@kakime.sg
• General enquiries: hello@kakime.sg

If you wish to (a) query this Privacy Policy, (b) exercise your data-access or correction rights under PDPA Section 21, (c) withdraw consent for optional data processing, or (d) file a complaint about how we handle your personal data — please email our DPO at privacy@kakime.sg.

We will acknowledge every formal request within 3 business days and provide a substantive response within 30 calendar days, in line with PDPA requirements.

2. What We Collect

We only collect data that we need to make the App work. Categories:

2.1 Account & Profile Data

• Name (display name, mascot or nickname)
• Email address
• Hashed password (never stored in plain text) or Sign in with Apple identifier
• Optional profile photo (uploaded by you, stored as a Cloudinary-hosted URL)
• Date of birth / age range (optional, to enable age-appropriate match suggestions)
• Gender (optional, used only for buddy preferences)
• Home area in Singapore (e.g. North, Central) — used to surface nearby kakis
• Sports list & skill levels you self-declare
• Vibe badges, testimonials, bio text you choose to share publicly

2.2 Content You Create

• Photos & videos (“Highlights”) you post to your feed (Cloudinary-hosted)
• Captions, tags, comments, reactions
• Buddy requests sent / received
• Direct messages (chat history is encrypted in transit and stored only for delivery; we do not analyse your messages)
• Games / sessions you host or join
• Gear listings / showcases

2.3 Device & Technical Data

• Device type & OS version (used for crash diagnostics)
• IP address (used for abuse prevention, regional content)
• Push-notification token (only if you opt in)
• App version & language settings

2.4 Things We Do NOT Collect

• Precise GPS coordinates (we only ask for a Singapore region, never lat/long)
• Health, biometric, or financial data
• Contacts / phone-book
• Background location

3. How We Use Your Data

We do not sell your personal data and we do not use your content to train third-party AI models.

4. Third-Party Services We Rely On

Each vendor is contractually bound to handle data in line with their own privacy policy and the PDPA.

5. Sharing & Disclosure

We share personal data only:

• With the vendors above, on a need-to-know basis;
• With other Kakime users, only the public profile fields you have chosen to display;
• When required by Singapore law, regulatory authority, or valid court order;
• In the event of a corporate transaction (merger, acquisition) — in which case we will notify you in advance.

We never sell, rent or trade your personal data.

6. Data Retention

• Active account data: kept while your account is active.
• Highlights, gear listings, messages: kept until you delete them or close your account.
• Logs & abuse-prevention data: up to 12 months.
• After account deletion: data is permanently purged within 30 days, except where retention is legally required (e.g. fraud investigations, statutory record-keeping).

7. Your Rights

Under the PDPA you may:

• Access — request a copy of the personal data we hold about you.
• Correct — ask us to update inaccurate or outdated data.
• Withdraw consent — for marketing emails, push notifications, or optional features like sports buddy preferences and gender-based matching.
• Delete your account — from inside the App: Profile → Settings → Delete my account. This triggers an immediate, irreversible cascade that removes your data from 15+ collections.
• Port — request a machine-readable export of your data.
• Object / restrict — to specific processing activities.

Write to privacy@kakime.sg to exercise any of the above.

7.1 Withdrawing Consent — Timeline & Impact

You may withdraw consent for optional data processing at any time. Some withdrawals will meaningfully reduce app functionality — here is what to expect:

Withdrawing consent for mandatory processing (e.g. authentication, abuse prevention, legal record-keeping) is not possible without terminating your account — because Kakime cannot function without those.

8. Security

• Passwords are hashed using bcrypt; we never store plaintext.
• HTTPS / TLS 1.2+ on every API endpoint.
• Atlas database access is restricted by IP allow-list and role-based credentials.
• Cloudinary delivers media over signed URLs.
• We undergo regular code review and follow OWASP Mobile Top-10 mitigations.

No system is 100 % secure; if you suspect a breach, email security@kakime.sg immediately.

9. Children

Kakime is not intended for users under 13. If we discover an account belonging to a child under 13, we will delete it. Users aged 13-17 must have parental consent under Singapore law.

10. International Transfers

Kakime stores data in Singapore (primary) and in vendor data centres in the US/EU. We rely on standard contractual clauses and PDPA-equivalent safeguards when transferring data outside Singapore.

11. Updates to this Policy

We will update this policy when our practices change. Material changes will be announced in-app and via email at least 7 days before they take effect.

12. Singapore Law

This policy is governed by the laws of Singapore. Disputes are subject to the exclusive jurisdiction of the Singapore courts.

— end —