Last updated: 2026-08-06.
What we collect
| Data | Source |
|---|---|
| Display name | You provide it, or we auto-generate one on first launch. |
| Profile photo | Optional. You choose whether to add it. |
| Anonymous device-bound identifier | Generated on first launch and stored in your device's secure storage. We use it as your account ID. We do not collect a phone number. |
| Sign-in identity (optional) | If you sign in with Google or Apple, we receive and store the email address and identity token from that provider so your account can be recovered on any device. Signing in is required only for community writes (listings, reviews, backing) — match scoring works without it. |
| Match history and pench events | Generated as you create, join, score, and complete matches. |
| Community directory content | Listings you publish (business name, city, links, logo, description), reviews and ratings you post, and listings you back. Published listings and reviews are public to all app users. |
| Purchase records | If you buy a listing slot, we store the store transaction identifier, product identifier, and purchase state, linked to your account. Payment itself is processed by Apple or Google — your card or banking details never reach Kaata. |
| Device context | Your device platform (iOS or Android), app version, and last-active time, saved to your profile when you open the app so we can support the builds people actually use. |
| Optional match venue / maidan text | Added by a host when they want invitees to know where to come. |
Permissions you may grant
| Permission | What we do with it | Sent off-device? |
|---|---|---|
| Location | If granted for the wind feature, latitude and longitude are sent to fetch a wind forecast. Primary provider: open-meteo.com. Fallback providers: api.met.no and wttr.in when the primary is unavailable. A coarse snapshot (city name plus coordinates rounded to roughly 1 km) is saved to your profile to understand where Kaata is used; it respects the usage-events opt-out and is erased when you delete your account. | Yes, to weather providers. Kaata servers store only the coarse (~1 km) snapshot, never raw coordinates. |
We do not collect advertising IDs, biometrics, or data from third-party brokers, and we never see your card or banking details — payments are handled entirely by Apple's App Store or Google Play. We do not sell your data, profile you for ads, or show third-party advertising in the current app.
Match privacy
Every match you create or join is invite/request based. Match codes and share cards are meant to be shared with people you want to invite, but the host must approve every join. There is no public match listing or instant open-join mode in the current app.
People who receive a match code or shared image may see limited match context such as the title, code, teams, scores, player names, or final result. If the host adds a venue / maidan, that text can also appear in the invite, join screen, and result card.
Who we share with
| Processor | Purpose | Where |
|---|---|---|
| Convex | Stores match and app data. | United States |
| Clerk | Authentication when you choose to sign in with Google or Apple. | United States |
| RevenueCat | Validates in-app purchases and links them to your account ID. Receives your account identifier and store transaction data, never card details. | United States |
| Telegram (operator alerts) | Community moderation alerts sent to the Kaata operator can include your display name alongside the listing or review involved, so reports are reviewed promptly. | Global |
| open-meteo.com | Primary wind forecast endpoint. | Outside India |
| api.met.no | Wind forecast fallback when the primary endpoint fails. | Norway / EU |
| wttr.in | Last-resort wind forecast fallback. | External host |
| Apple and Google | Distribute the app. | Globally |
| Native share targets you choose | Receive match codes or result images when you tap share. | Depends on the app you select. |
Your rights
- Access: Settings to Privacy and Data to Export My Data gives you a JSON snapshot of your data.
- Correction: Edit your display name and photo in the app.
- Erasure: Settings to Privacy and Data to Delete My Account tombstones your account, removes public ranking and badges, removes your photo, and preserves co-owned match history in pseudonymized form so opponents' scorecards do not break. Purchase records may be retained where required for accounting and refund handling.
Cross-border data transfer
Match data is processed by Convex in the United States. Wind-feature requests may reach open-meteo.com, api.met.no, or wttr.in, which are outside India.
Children and families
Kaata is a general-audience app for real-world kite-fighting scoring. It is not specifically directed to children. If local law requires parent or guardian consent for a younger user to use online services, the app should be used with that consent. If you believe a child's data was provided without appropriate consent, contact us and we will review or delete it as required.
Contact
For privacy and data-rights questions, email kaata.247@gmail.com.