Privacy policy
This policy explains how Kerbish handles your personal information. We follow the Australian Privacy Principles (APPs) in the Privacy Act 1988 (Cth). In short: we collect only what the app needs, we don't track you and we don't show ads.
What we collect, and why
- Precise location. Only while you're using the app, to show what's near you and to place your posts and alert areas on the map. There is no background location and no location history. We store exact coordinates only for your posts and alert centres.
- Photos. Photos you post show the stuff on the kerb. If you pick a photo from your library instead of using the camera, we also read when and where it was taken, to check it's a recent photo of a nearby kerb. Faces, text and numbers are blurred on your phone before upload. Each photo is also checked automatically for offensive content and prohibited items.
- Email address and name. Used to sign you in with Apple, Google or an emailed link, and to contact you about your account or a moderation action. If you use Sign in with Apple, we keep the name you share with us (Apple may hide your email address).
- Push notification token. Used to send the alerts and reminders you've asked for.
- Usage analytics. A minimal set of events (such as opening the map, or viewing or posting a find), tied to a random ID on your phone and never to your name or email. No location, notes or photos are included. IP addresses are anonymised. You can turn this off in Me, then Settings, with Share anonymous usage data.
- Crash reports. Technical details when the app crashes, with no personal information, so we can fix bugs.
- Posts, votes and reports. What you post, your status votes, and reports you make, so the community and moderation features work.
Street names shown on posts never include a house number. Piles never show who posted them.
No tracking and no ads
We don't sell your information, share it for advertising, or track you across other apps and websites. Kerbish has no advertising SDKs.
Where your information is stored and who handles it
- Supabase hosts our database, sign-in and photo storage.
- Anthropic (Claude API) checks uploaded photos for offensive content and prohibited items.
- Sentry receives crash reports.
- PostHog receives minimal analytics events.
- Apple and Google deliver push notifications and handle any Kerbish Plus payments. We don't see your card details.
These providers may process information on servers outside Australia. We share only what each one needs to do its job, and we take reasonable steps to make sure they protect it to a standard comparable to the APPs (APP 8).
How long we keep it
- Photos are deleted 30 days after a post expires, is marked gone or is removed.
- If you delete your account, we remove everything linked to it, including your posts, photos, alerts and email address. Nightly backups of our database are kept for up to 30 days, so deleted data can remain in them until they roll off.
- Crash reports and analytics are kept only as long as needed to fix bugs and improve the app.
Access and correction
You can ask for a copy of the personal information we hold about you, or ask us to correct it, at any time. Email support@kerbish.app and we'll respond within a reasonable time, usually 30 days. You can also delete your account in the app.
Security
We use encrypted connections and access controls, and we limit who can see personal information. No system is perfectly secure, but we take reasonable steps to protect yours (APP 11).
Children
Kerbish is rated 12+. We don't knowingly collect information from children under 12.
Complaints
If you think we've breached the APPs, contact us at support@kerbish.app and we'll investigate and reply. If you're not satisfied, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
Changes to this policy
If we change this policy, we'll update the date at the top. For significant changes, we'll let you know in the app.