Privacy Policy

Introduction

Welcome to Kotan ("we," "our," or "us"). We are committed to protecting your privacy and ensuring you have a positive experience on our university community platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application ("App").

Please read this Privacy Policy carefully. By using Kotan, you agree to the collection and use of information in accordance with this policy.

Important: Kotan is an independent platform and is NOT affiliated with any university. See our Terms of Service for more details.

1. Information We Collect

1.1 Information You Provide

1.2 Content You Create

• Posts: Text content, images, and polls you share
• Comments: Responses to posts (can be anonymous)
• Direct Messages: Private conversations with other users
• Events: Campus events you create or register interest in
• Reports: Content you report for moderation
• Support Tickets: Feedback, bug reports, and feature requests

1.3 Information Collected Automatically

1.4 Anonymous Content

Kotan allows you to post and comment anonymously. When you choose to post anonymously, your identity is hidden from other users and your posts appear as "Anonymous" or "Anonymous #1, #2" etc.

2. How We Use Your Information

2.1 Provide Core Services

• Create and manage your account
• Verify your university email
• Display your profile to other users
• Enable posting, commenting, and messaging
• Show relevant campus events

2.2 Communication

• Send push notifications (if enabled)
• Notify you of comments, mentions, and messages
• Send event reminders
• Deliver important service announcements

2.3 Safety and Moderation

• Investigate reported content
• Enforce community guidelines
• Prevent spam and abuse
• Protect users from harassment
• Identify users who post harmful or illegal content

2.4 Improve Our Service

• Track gamification (points, streaks, badges)
• Understand feature usage via Firebase Analytics (screen views, interactions)
• Fix bugs and improve performance via Firebase Crashlytics
• Monitor app stability and performance

3. Information Sharing

3.1 With Other Users

3.2 With Third-Party Service Providers

We use trusted third-party services to operate Kotan:

These providers are contractually obligated to protect your data and use it only for the services they provide to us.

3.3 We Do NOT:

• Sell your personal information
• Share data with advertisers
• Track you across other apps
• Use your data for targeted advertising
• Share your data with data brokers

3.4 Legal Requirements

We may disclose your information if required by law, court order, or government request, valid legal process (subpoenas, court orders), or the need to protect the safety of our users or the public.

3.5 Disclosure to Authorities

In certain circumstances, we may be required or compelled to share user information with authorities:

Important: If you post defamatory, harassing, or illegal content — even anonymously — your identity may be disclosed pursuant to legal process, and you may be held legally responsible.

4. Data Storage and Security

4.1 Where Your Data is Stored

Your data is stored on secure servers provided by Supabase. Data may be processed in the United States or other countries where our service providers operate.

4.2 Security Measures

We implement industry-standard security measures including:

• Encrypted data transmission (HTTPS/TLS)
• Encrypted data at rest
• Row-level security in our database
• Secure authentication with email verification
• Regular security updates

4.3 Data Retention

5. Your Rights and Choices

5.1 Access and Update

You can access and update your personal information anytime through Profile Settings (edit name, photo, major, year) and Notification Settings (control what notifications you receive).

5.2 Delete Your Data

You have the right to delete your data:

• Delete Posts/Comments: Remove content you've created
• Delete Account: Permanently delete your account and all associated data

To delete your account, go to Profile → Settings → Delete Account.

5.3 Control Notifications

You can manage push notifications through in-app notification settings or your device's notification settings.

5.4 Anonymous Posting

You can choose to post anonymously to protect your identity from other users. However, remember that anonymous posts can still be traced by administrators and may be disclosed pursuant to legal process.

5.5 Block Users

You can block users to prevent them from messaging you.

6. Children's Privacy

Kotan is intended for university students (typically 17 years and older). We do not knowingly collect information from children under 13. If we learn we have collected data from a child under 13, we will delete it promptly.

7. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy in the app
• Updating the "Last Updated" date
• Sending a notification for significant changes

Your continued use of Kotan after changes are posted constitutes your acceptance of the updated policy.

8. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at support@kotan.app or through the in-app Help & Support feature.

9. For Malaysian Users

If you are located in Malaysia, your data is processed in accordance with the Personal Data Protection Act 2010 (PDPA). You have the right to:

• Access your personal data
• Correct inaccurate data
• Withdraw consent for data processing
• Lodge complaints with the relevant authorities

Your use of this platform is also subject to the Communications and Multimedia Act 1998 and the Defamation Act 1957.

10. Summary