Legal

Privacy Policy

Effective June 2026

This Privacy Policy explains how Koleksi (“Koleksi”, “we”, “us”) collects, uses and protects your information when you use the Koleksi mobile app and related services (the “Service”). By using Koleksi you agree to the practices described here.

1. Information we collect

Information you provide

  • Account details — your email, username, display name, and optional profile information (bio, location, avatar).
  • Collection data — the items you add, their photos, conditions, purchase prices, notes, and the collections you organise them into.
  • Posts & activity — content you publish to the Feed, comments, offers, and messages tied to offers.

Information collected automatically

  • Device & usage — app version, device model, operating system, and in-app interactions used to operate and improve the Service.
  • Diagnostics — crash and performance logs (you can opt out of optional diagnostics in Settings).

2. How we use your information

  • To provide core features — your vault, collections, the Feed, offers and insights.
  • To identify items and estimate market value (see below).
  • To send notifications you've enabled, such as price alerts and offer updates.
  • To maintain security, prevent abuse, and comply with legal obligations.
  • To improve the Service through aggregated, de-identified analytics.

3. Item recognition & market data

When you capture an item, its photo is processed to identify the item and pre-fill its details. To estimate market value, Koleksi cross-checks public listing and sales data from third-party marketplaces. We do not sell your collection data, and your private collection is never shared with these marketplaces.

4. Sharing & disclosure

We do not sell your personal information. We share data only:

  • At your direction — content you choose to make public on your profile or in the Feed.
  • With service providers — vendors who host infrastructure, process payments, or deliver notifications on our behalf, under confidentiality obligations.
  • For legal reasons — when required by law or to protect the rights, safety and property of Koleksi and its users.

5. Data retention

We keep your information while your account is active. When you delete your account, we remove your personal data and collection content as described on our Account Deletion page, subject to limited retention required for legal, security or fraud-prevention purposes.

Subscription transaction records are retained for the seven-year period required by Australian taxation law (anonymised where possible). Database backups containing your data are retained for up to thirty (30) days, after which the backup rotation completes the deletion.

6. Your rights & choices

  • Access & export — request a copy of your data from Settings → Account.
  • Correction — edit your profile and collection data at any time.
  • Deletion — delete your account and associated data via the app or our deletion request page.
  • Notifications — control which notifications you receive in Settings.
  • Privacy controls — set your profile and collection value visibility in Settings → Privacy.
  • EU/UK residents: GDPR rights of access, rectification, erasure, restriction, portability, and objection.
  • California residents: CCPA rights to know, delete, correct, and opt out of sale or sharing. Koleksi does not sell your personal information.
  • Lodge a complaint with the Office of the Australian Information Commissioner at oaic.gov.au if you believe we have mishandled your personal information.

7. Security

All data is encrypted in transit using TLS 1.2 or higher. Application data is encrypted at rest using managed keys. Access to production systems is limited to Koleksi staff with multi-factor authentication enabled. We follow Australian Privacy Principle 11 (Security of personal information) and notify the Office of the Australian Information Commissioner and affected users of any eligible data breach under the Notifiable Data Breaches scheme.

8. Where your data is stored

Koleksi stores and processes data in the United States. When you use Koleksi, you consent to the transfer of your personal information to the United States for processing. We take reasonable steps to ensure overseas recipients handle your data consistently with the Australian Privacy Principles.

9. Children's privacy

Koleksi is not directed to children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect data from children. If you believe a child has provided us information, contact us and we will remove it.

10. Cookies & similar

This website uses no third-party tracking cookies. The mobile app uses local device storage to keep you signed in.

11. Changes to this policy

We may update this policy from time to time. Material changes will be announced in the app or by email, and the effective date above will change. Continued use of the Service after an update means you accept the revised policy.

12. Contact

Privacy questions, access requests, correction requests, or complaints:

  • Email: [email protected]
  • Response time: within 30 days.
  • Jurisdiction: New South Wales, Australia.