Kodō Privacy Policy

Last updated: August 13, 2026

This Privacy Policy describes how Kodō (“we”, “us”) collects, uses, shares, stores, and deletes personal information when you use the Kodō mobile application on iOS and iPadOS, the website at kodo.onl, and related services (together, the “Services”).

By creating an account or using Kodō, you agree to this policy. If you do not agree, do not use the Services. Questions and data requests: support@kodo.dev.

Who we are

Kodō is the operator of the Kodō app and kodo.onl. Contact: support@kodo.dev · kodo.onl/support.

What this policy covers (App Store)

Consistent with Apple App Store Review Guideline 5.1.1, this policy:

Identifies what data we collect, how we collect it, and all uses of that data
Confirms that any third party with whom we share user data to operate Kodō will provide the same or equal protection of user data as stated in this policy and required by Apple’s App Store Review Guidelines
Explains our retention and deletion practices, and how you can revoke consent or request deletion of your data, including in-app account deletion

What we do not do

We do not sell personal information
We do not use personal information for targeted or cross-app advertising
We do not track you across other companies’ apps or websites for advertising
We do not use Apple’s App Tracking Transparency APIs, because we do not track
We do not collect precise GPS / device location
We do not collect advertising identifiers (IDFA), browsing history, health, fitness, financial, or payment card data

Information we collect, how we collect it, and how we use it

We collect only what is needed to run Kodō’s core features: accounts, profiles, trips, friends, messaging, and event discovery.

1. Information you provide

Account information (email address, password, name, phone number). Collected when you sign up or edit your profile. Used to create and authenticate your account, reset your password, and let friends find you. Passwords are stored by our authentication provider in hashed form; we do not store plaintext passwords.
Profile information (display name, hometown as a city name, profile photo). Collected when you add or edit them. Used to display your profile to people you connect with and, if you set a hometown, to show relevant friend-trip activity around that city. Hometown is a city name you type or select — not device GPS.
User content (trip title, destination, dates, description, cover and highlight photos, trip privacy setting, chat messages, friend requests, groups, and event RSVPs or trip-linked events). Collected when you create or send them. Used to provide trip planning, messaging, and friend activity in the app.
Support messages you send to support@kodo.dev. Used to respond to you.

2. Information from Sign in with Apple

If you choose Continue with Apple, Apple may provide us with an Apple user identifier, an email address (which may be your real email or Apple’s Hide My Email relay), and your name if you share it. We use this only to create and authenticate your Kodō account. You can stop using Sign in with Apple in iOS Settings → [your name] → Sign in with Apple.

3. Information from your device (optional permissions)

These permissions are optional. Kodō still works if you decline them. You can revoke them at any time in iOS Settings → Kodō. We do not require notifications, camera, photos, or contacts to create an account or use core trip features.

Contacts. If you use Find Friends, the app reads names, phone numbers, and emails from your address book (with permission) and sends phone numbers and emails to our servers solely to match existing Kodō accounts. Matching results are returned to you. We do not retain your full address book as an uploaded contact database, and we do not use Contacts data to build a marketing list, contact people without your action, or sell/distribute contact information.
Photos. If you choose a profile picture or trip photos, only the images you explicitly select are uploaded to our cloud storage for display in Kodō. We do not scan your photo library.
Camera. If you scan a friend QR code, the camera is used on-device to read the code. We use the Kodō user ID in that code to send a friend request. We do not save camera frames, video, or a scan history.
Notifications. If you allow push notifications, we store a device push token to deliver messages, friend requests, and trip activity. You can disable notifications in iOS Settings or in the Kodō Profile settings.

4. Information collected automatically

Account identifiers generated when you sign up, used to link your profile, trips, chats, friends, and notifications.
Push tokens and notification delivery records used to deliver and de-duplicate notifications.
On-device preferences (for example notification toggles, default trip privacy, haptics), stored locally on your device and, where needed, on your account so settings persist.
Limited security and operational logs such as authentication timestamps and technical metadata needed to run the service, prevent abuse, and debug failures. We do not use this for advertising.

5. Search queries sent to feature providers

City / place search. When you search for a destination or hometown, the search text is sent to Google Places to return city suggestions, coordinates for the in-app map, and place photos. We do not send your contacts or messages to Google.
Public events. When you browse events, city and date filters are sent to Ticketmaster’s Discovery API to return public listings. We do not send your Kodō account profile to Ticketmaster.
Maps. Trip destinations may be shown on an in-app map (Apple Maps on iOS). The map uses the destination you entered, not your live device location.

How we use information (all purposes)

Create, authenticate, and manage accounts, including password reset
Display profiles, trips, and friend activity you choose to share
Match contacts to help you find friends already on Kodō
Provide messaging, trip planning, join/leave, and event discovery
Show destination maps and city suggestions
Deliver push notifications you have enabled
Maintain security, prevent abuse, and comply with law
Respond to support and privacy requests

We do not use your data for a different purpose without additional consent, except where required or permitted by law.

How information is shared

Other Kodō users

Kodō is a social app. Information you share is visible to other users according to your choices:

Your name, photo, hometown, and public trips can be seen by friends and, where the product allows, people you interact with on Kodō
Private trips are limited to people you invite or who can otherwise access that trip
Chat messages are visible to participants in that chat
If you share a trip or profile link, that link may open in the app or on kodo.onl (for example kodo.onl/t/… or kodo.onl/u/…)

Service providers (processors)

We use companies that process data on our behalf solely to operate Kodō. We do not share personal information with advertising networks or third-party analytics products for advertising. Current processors include:

Supabase — authentication, database, file storage, and realtime messaging (hosted in the United States)
Apple — Sign in with Apple, push notifications (APNs), Maps, and on-device Contacts / Photos / Camera access you grant
Expo — app runtime and push-notification delivery
Google Places — city suggestions, geocoding, and place photos for destinations you search
Ticketmaster Discovery API — public event listings for cities and dates you browse
Vercel — hosting for kodo.onl (trip/profile link pages and this policy)

Third-party protection (required by Apple): Any third party with whom we share user data to operate Kodō — including the service providers listed above, and any parent, subsidiary, or related entity that may have access to that data — will provide the same or equal protection of user data as stated in this Privacy Policy and required by the App Store Review Guidelines. We do not authorize these parties to use your Kodō personal information for their own advertising or to track you across other companies’ apps or websites.

These providers have their own privacy policies for their platforms. We do not send your Kodō account content (messages, contacts, photos, or profile) to generative AI providers. Venue lineup information shown in the app comes from public third-party sources, not from your personal account data.

Legal and safety

We may disclose information if required by law, legal process, or to protect the rights, safety, or security of Kodō, our users, or the public.

Permissions and withdrawing consent

Contacts, Photos, Camera, Notifications — grant or revoke in iOS Settings → Kodō
Push notification types — manage in Kodō Profile settings
Profile fields — edit or clear in Profile
Sign in with Apple — stop in iOS Settings → Sign in with Apple
Account and personal data — delete in the app under Profile → Delete Account

Declining optional permissions may disable that feature (for example Find Friends from contacts, QR scanning, or push alerts) but does not block the rest of the app.

Data storage, security, and international transfers

Data is transmitted over HTTPS and stored with access controls (including row-level security) so users can generally only access data they own or that has been shared with them. Account and content data are hosted in the United States. If you use Kodō from another country, your information is transferred to and processed in the United States.

No method of transmission or storage is 100% secure. We take reasonable measures appropriate to the nature of the data, but we cannot guarantee absolute security.

Retention and deletion

We keep account and content data while your account is active. If you delete your account in the app (Profile → Delete Account), we delete your Kodō account and associated personal data, including profile information, uploaded photos we can identify as yours, and related records, except where we must retain limited information to comply with law, resolve disputes, prevent abuse, or enforce our terms.

Account deletion is available inside the Kodō app and does not require emailing us. You may also email support@kodo.dev or use Privacy Choices.

On-device preferences are removed if you delete the app from your device. Backups or cached copies may persist for a short period until they are overwritten.

Your choices and rights

Depending on where you live (for example under GDPR, UK GDPR, or CCPA/CPRA), you may have the right to access, correct, delete, or export personal information, to object to or restrict certain processing, and to appeal a denial. California residents: we do not sell personal information and we do not share it for cross-context behavioral advertising. To exercise rights, email support@kodo.dev or visit Privacy Choices. We will respond as required by applicable law and may need to verify the account.

Children

Kodō is not directed to children under 13 (or the minimum digital-consent age in your country), and we do not knowingly collect personal information from them. You must be at least 13 to create an account. If you believe a child has provided personal information, contact support@kodo.dev and we will delete it.

Do Not Track and cookies

The Kodō app does not use third-party advertising cookies or cross-site tracking. kodo.onl is a simple website for support, legal pages, and opening shared trip or profile links. It does not run advertising or cross-site tracking pixels.

Changes

We may update this Privacy Policy. When we do, we will revise the “Last updated” date above. If changes are material, we will provide additional notice as appropriate (for example in the app or by email). Continued use of Kodō after an update means you accept the revised policy.

Contact

Kodō — privacy questions and data requests:
Email: support@kodo.dev
Support: https://kodo.onl/support
Privacy Choices: https://kodo.onl/privacy-choices