Privacy Policy

Effective August 28, 2026

This Privacy Policy describes what information Kavanaka actually collects, how it's used, and the choices you have. It describes Kavanaka's current practices as implemented in the product — not aspirational or generic claims.

Information We Collect

Account information. Kavanaka uses Google Sign-In as its only way to create an account. We receive the basic profile information Google provides (such as your name, email address, and profile photo) to set up your account.

Profile information you provide. Your display name, an optional bio, and an optional avatar and background image. Your display name and any profile photo/bio you add are visible to other users.

Content you create. Posts (titles, captions, tags, photos, videos, or text), comments and replies, and direct messages you send. Posts and comments are public by default; direct messages are visible only to you and the other participant.

Location information. See “Location Information” below — this is entirely under your control.

Usage and recommendation signals. If you're signed in, we record search queries you submit and which posts or map markers you interact with, to personalize what Explore shows you. We also keep a simple counter of how many times other people have opened your posts.

Information stored only on your device. Kavanaka does not use cookies. Kavanaka uses browser storage for certain local features, such as saving an in-progress post draft and temporary application or session state. This storage is not used for advertising.

How We Use Information

  • To operate core features: posting, commenting, messaging, following, and search.
  • To personalize your own Explore feed, based only on your own activity.
  • To let you and other users find and interact with each other's public content.
  • To review reports and moderate content that violates our standards.
  • To keep the service secure and functioning as intended.

Kavanaka does not currently sell personal information or use third-party advertising trackers. If these practices change, we will update this Policy accordingly.

User-Generated Content and Public Visibility

Posts, comments, and replies you publish are visible to other users and, unless removed by moderation, to anyone visiting Kavanaka. Your display name, avatar, and bio are public. Direct messages are private between participants. If another user blocks you, or you block them, your posts and comments become hidden from each other — see “Blocking” below.

Location Information

Kavanaka does not continuously or in the background track your location. Device geolocation is requested only within the post-location workflow — while you're creating a post and have explicitly chosen to attach a location to it — and only when you take an explicit action, such as tapping “Use current location.” You may instead manually select a location on the map yourself. Outside of that specific workflow, Kavanaka never requests or reads your device's location.

When you view a map inside Kavanaka, map tile images are loaded directly from OpenStreetMap's servers, which may receive standard technical request information (such as your IP address), the same way loading any web content does. This is separate from, and unrelated to, any location you choose to attach to a post — OpenStreetMap does not receive your account information or your posts.

Authentication

Kavanaka never sees or stores your Google password. Sign-in is handled entirely by Google and Supabase Auth (our authentication provider); Kavanaka receives only a verified identity token.

Service Providers

The following providers process data on Kavanaka's behalf, based on how the service is built:

  • Supabase — authentication, database, and file storage.
  • Google — sign-in only.
  • Vercel — hosts the Kavanaka web application.
  • OpenStreetMap — supplies map tile images.

Kavanaka does not currently use any analytics, advertising, or tracking SDKs.

Data Sharing

Kavanaka does not sell your personal information. We do not share your information with third parties except the service providers listed above, each of which processes data only as needed to help operate Kavanaka, or when required by law.

Data Retention and Account Deletion

You can delete your own posts and comments at any time. You can permanently delete your account from Me → Edit Profile → Delete Account. Deleting your account removes your profile, posts and their photos/videos, comments, likes, saves, follows, messages, and reports you've filed, and cannot be undone.

Content Moderation and Reports

You can report a post or comment that violates our standards. Reports are reviewed, and violating content may be removed. We keep a record of report outcomes to maintain a fair moderation history.

Blocking

You can block another user from their profile. Blocking is mutual in effect: once either of you blocks the other, neither of you can see each other's posts or comments, follow or message each other, or interact with each other's content, until the block is removed by whoever created it.

Security

Kavanaka uses industry-standard access controls at the database level, so your data is only reachable by you or, where relevant, the other participant (e.g., a direct message). No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Children's Privacy

Kavanaka does not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13, we will take steps to delete it.

Changes to This Policy

We may update this Policy as Kavanaka changes. We'll update the effective date above when we do.

Contact

Questions about this Policy: timlyw007@gmail.com