Privacy Policy

Last updated: August 11, 2026

This policy describes what data Krakn collects, why, where it goes, and how to contact us about it. Krakn is operated by Xepatech LLC ("we", "us"). If you have questions or requests, email support@xepatech.com.

1. What we collect

1.1 Account data

When you sign in, we store:

• A user ID (a random identifier generated at sign-up)
• Whether your account is anonymous or linked to an email
• Your email address, if you've linked one (including via Sign in with Apple or Google)
• Account creation and last-update timestamps

1.2 Your collection data

The portfolios, transactions, projects, favorites, notes, and value overrides you create. This is data you've intentionally entered into the app to manage your own collection, and it syncs to our servers so it's available across your devices.

1.3 Profile data

If you've completed account setup with a username, we store:

• Your @username (public; used in shareable profile URLs)
• Your display name (optional, public)
• Your bio (optional, public)
• Your profile picture (optional, public)

1.4 Social activity

When you use Krakn's social features, we store:

• Follows: who you follow and who follows you. Counts and follower/following lists are public.
• Blocks: the accounts you've blocked. Visible only to you; blocks are mutually invisible.
• Reports you submit about other users (category, optional message, timestamp). Visible only to our moderation team.
• Portfolio visibility: the Public toggle on each portfolio determines whether it appears on your profile. Your starter portfolio is public by default so other collectors can find you; you can make any portfolio private at any time in the app.

1.5 Preferences

Currency selection, display preferences, and your device timezone (used to reset the free-tier daily scan counter at your local midnight).

1.6 Subscription and scan data

To run the free tier and Krakn Pro, we store for every account:

• Whether your account is on the free or Pro tier, and if you subscribe, the subscription's status, expiration date, and the store identifier of the underlying subscription
• A per-day count of your card scans, used to enforce the free tier's daily limit

Payments themselves are handled by Apple (App Store) and Google (Google Play). We never see your card details. Subscription state is delivered to us by our subscription-management provider via signed webhooks.

1.7 Card scanner photos

The scanner is camera-only; Krakn never accesses your photo library. When you scan a card, the capture is cropped on your device to just the framed card, then sent over an encrypted connection to our card-identification provider to identify it. Scan photos are used only to identify the card: we do not store them on our servers, we do not use them to train AI models, and they are never used for advertising.

1.8 Usage and diagnostic data

To understand how the app is used, fix bugs, and prioritize features, we collect data about your in-app activity:

• Which screens you visit and which features you use
• App version, device model, and OS version
• Your approximate location
• Errors and crash reports (error message, stack trace, the screen you were on)
• Your account ID is attached to these events so we can understand returning-user patterns

This data is linked to your account ID; it's pseudonymous, not anonymous. We process it via our analytics provider on infrastructure in the United States. We don't send our analytics provider your email address or the contents of your portfolios and transactions.

1.9 What we never collect

• Your name, postal address, phone number, or any payment card information
• Your photo library, contacts, microphone, or precise location
• Any system data we don't explicitly request a permission for

2. Who processes your data

We use a small number of service providers to run Krakn, each bound by data processing agreements and receiving only what their role requires:

• Hosting and authentication: stores your account and collection data. Processing region: US.
• Usage analytics and error tracking: receives the pseudonymous usage and diagnostic data described in section 1.8. Processing region: US.
• Subscription management: receives your account ID when you view or purchase a paywall, so purchases can be matched to your account. Processing region: US.
• Card identification: receives the cropped scan photo when you use the card scanner, solely to identify the card.
• Apple / Google: payment processing for in-app subscriptions. We never see your payment details.

We do not sell your data, share it for advertising, or use it for any purpose other than running and improving Krakn.

If Krakn is ever involved in a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you before your data becomes subject to a different privacy policy.

3. Retention

• Account, collection, profile, and social data: kept until you delete your account. When you delete your account (Settings → Delete Account), all account-linked data, including your profile, uploaded avatar, follows, blocks, reports, and every portfolio, item, and transaction, is permanently removed within 7 days. Associated analytics data is deleted within 30 days.
• Usage and error data: kept only as long as needed to run and improve the app.

4. Security

Your data is encrypted in transit, and access to it is restricted server-side so that accounts can only read their own private data. No system is completely secure, but we design for least access and monitor for problems. If a breach ever affects your personal data, we will notify you without undue delay.

5. Your rights

You have the right to:

• Access the data we hold about you. Email us and we'll provide it.
• Correct inaccurate data. Most account data is editable directly in Settings; for anything else, email us.
• Delete your data. Use Settings → Delete Account. This removes your account data within 7 days and any associated analytics data within 30 days.
• Opt out of analytics. Email us and we'll exclude your account from analytics processing within 7 days.
• Lodge a complaint with your national data protection authority.

To exercise these rights, email support@xepatech.com.

For users in the EEA and UK: we process your data on the legal bases of performing our contract with you (account and collection data), our legitimate interest in improving and securing the app (usage and diagnostic data), and your consent where required. You may lodge a complaint with your local data protection authority.

For California residents: we do not sell or share your personal information as those terms are defined in the CCPA/CPRA, and we do not use it for cross-context behavioral advertising. You can exercise your access, deletion, and correction rights via the contact above, and we will never discriminate against you for doing so.

6. International data transfers

Krakn's servers are located in the United States: your account and collection data are hosted there, and usage and error data are processed there by our analytics provider. If you use Krakn from outside the United States, your data is transferred to and processed in the United States. For users in the EEA and UK, these transfers are covered by our providers' Data Processing Agreements and Standard Contractual Clauses.

7. Children's privacy

Krakn is not directed at children under 13, and we do not knowingly collect personal data from anyone under 13. If we learn that we have collected data from a child under 13, we will delete it. If you believe a child under 13 has created an account, email us at the address below.

8. This website

get-krakn.com is a static site. It does not use cookies, does not run analytics, and does not collect any personal data. If you email us, we'll only use your email address to reply to you; it never goes on a mailing list.

9. Changes to this policy

If we materially change what we collect or how we process data, we'll show a notice in the app and update the date at the top of this document.

10. Contact

Email: support@xepatech.com