Privacy Policy

1What we collect

If you create an account:

• Name, email address, handle (your public link name) and a password, which we store only as a salted one-way hash.
• Optional profile details you choose to add: birthday (day and month, no year), spoiler-free setting, a Telegram username for gift delivery, and with Kachkachi Plus a short bio and a PO box or pickup point label.
• Your lists and gifts: titles, occasion, dates, links, photos linked from shops, prices, notes and visibility settings.

If you open someone's list as a guest:

• We set a random device identifier in a cookie and store only a hash of it, so you can see and cancel your own reservations. There's no guest account.
• If you reserve a gift, we store which gift you reserved and, if you type one, your name. The list owner never sees who reserved.
• If you chip in (Plus lists), we store the amount you pledged and an optional display name. That name is shown only to other people who chipped in on the same gift, never to the owner.
• We count list views per day as a single number. We don't record who viewed.

If you subscribe to Kachkachi Plus: Paddle, our Merchant of Record, collects your payment details. We receive and keep only what we need to manage your plan: your Paddle customer ID, billing email, subscription status, plan, billing interval and renewal date. We never see or store your full card number.

Automatically: our hosting provider processes technical data such as IP address, browser type and request logs to deliver and secure the Service. We use a session cookie to keep you signed in and a cookie to remember your language (see the Cookie Policy). We don't use analytics or advertising cookies on the website.

2Shop links and gift photos

• When you add a link, our servers fetch that page to read its title, photo and price. The shop sees a request from our servers, not from you. With Plus price-drop alerts, we re-check saved links about once a day.
• Gift photos are loaded directly from the shop's own servers when you or a guest view a list, so those shops may receive the viewer's IP address and browser information under their own privacy policies.
• If a list owner adds a Telegram username, a guest can open a Telegram chat with them. That conversation happens on Telegram, not Kachkachi.

3How we use it, and our legal bases

We don't use your data to make automated decisions that have legal or similarly significant effects on you, and we don't build advertising profiles.

4Who we share it with

We don't sell or rent your personal data. We share it only with:

• People you share with: anyone with your list link sees the list, its gifts and whether each is taken. Your name and handle appear on your lists and on your profile at kachkachi.com/<handle>. Lists you choose to show on your profile can be seen by anyone and indexed by search engines.
• Paddle (Paddle.com Market Ltd), our reseller and Merchant of Record, for subscription payments, invoicing and tax. See Paddle's Privacy Notice.
• PostHog (EU), our processor for anonymous usage analytics in the mobile app, hosted in the EU. We send a short fixed list of events (for example, that a list was created or shared, and which screen was opened), tied to the app's random account ID. Device model, operating system, app version, language and the IP address (not used for location) also reach PostHog. We never send gift titles, links, notes, prices, list names, your name, email or handle, or who reserved a gift. You can switch this off any time in the app under Me, "Share anonymous usage data".
• Hosting and database providers who run our infrastructure on our behalf, under contracts that require them to protect your data and use it only on our instructions.
• Authorities or others when the law requires it, or to protect the rights, safety and property of our users, the public or us.
• A successor if we're involved in a merger, acquisition or sale of assets. We'll tell you before your data becomes subject to a different privacy policy.

5How long we keep it

• Account data and lists: while your account exists. When you ask us to delete your account, we delete it and its lists within 30 days, except where the law requires us to keep something.
• Reservations and pledges: until the gift, list or account they belong to is deleted. Guests can cancel their own reservation at any time.
• Sign-in sessions expire after 30 days, and are removed when you log out.
• Billing records: as long as tax and accounting law requires.
• Server logs: kept by our hosting provider for a short period for security and debugging.

6Your choices and rights

You can view and edit most of your data in Kachkachi at any time, and delete lists and gifts yourself. You can also ask us to:

• give you a copy of your data (access and portability);
• correct it;
• delete your account and data;
• restrict or object to certain processing;
• withdraw consent where we rely on it.

Email support@kachkachi.com from the address on your account. We'll reply within 30 days and may need to confirm it's you. You won't be treated differently for using these rights.

EEA and UK: you may also complain to your local data protection authority. California: you have the right to know, delete and correct your personal information. We don't sell or share personal information for cross-context behavioural advertising.

7Security

We use HTTPS everywhere, hash passwords and session tokens, store only hashes of guest device identifiers, and limit who on our side can access production data. No service is perfectly secure. If a breach affects your personal data, we'll notify you and the authorities as the law requires.

8International transfers

DaySync LLC is based in the United States, and our providers may process data in the US and other countries. Where we transfer personal data out of the EEA or UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

9Children

Kachkachi accounts are for people aged 16 and over. We don't knowingly collect personal data from children under 16 for accounts. If you believe a child has given us personal data, contact support@kachkachi.com and we'll delete it.

10Changes to this policy

We may update this policy. If a change is material, we'll tell you by email or in the Service before it takes effect, and we'll always show the date of the latest version at the top.

11Contact

• Email: support@kachkachi.com
• Company: DaySync LLC (Wyoming Filing ID 2026-001938982)
• Address: 30 N Gould St, STE R, Sheridan, WY 82801, USA