Last updated: · Kachop! (com.kachop.app)
What we collect
- Account info — when you sign in (Google or email), your identity provider (Clerk) shares your name and email with us. We use them to show your display name and to attribute your copies and quota to you.
- Stamped copies and their metadata — the stamped image you choose to send, plus the purpose, recipient, document type and timestamp. These are stored on our backend (Convex) so your history syncs across devices.
- Billing records — plan, pack size, and transaction history. Payment details are handled entirely by the app store (Apple / Google); we never see your card.
- Crash reports — we may use Sentry to receive anonymised crash and error reports to keep the app stable. You can opt out by disabling crash reporting in your device settings.
What we never collect
- Your unstamped original. The raw camera capture or imported photo exists only on your device and is never uploaded. The scanner runs on-device.
- Your photo library. We only access a photo you explicitly pick, and only to stamp it.
- Your ID number as searchable data — it appears only inside the stamped image you deliberately send, as you reviewed it.
Why we process data (legal basis)
We process your data to provide the service you asked for (contract performance): storing your stamped copies, enforcing your quota and plan, and supporting account deletion. We do not sell, rent, or trade your data, and we do not use it for advertising.
Retention & deletion
Stamped copies and metadata are kept until you delete them. You can:
- Delete an individual copy — remove it from your history (coming soon in-app).
- Delete your account — from Settings → Delete account in the app, or via our delete-account page. This erases your profile, stamped copies, recipients and transaction history.
Backups may retain data briefly after deletion; we purge them on a regular cycle.
Where data lives
Our backend (Convex, plus Clerk for authentication) is hosted on cloud infrastructure. Your stamped copies may be processed in regions outside your country; we rely on standard contractual safeguards.
Children
Kachop! is not directed at children under 13, and we do not knowingly collect their data.
Your rights
Depending on your jurisdiction (including PDPA in Malaysia and GDPR in the EU/UK), you may have rights to access, correct, export, or delete your data, and to object to or restrict processing. Email hello@kachop.app and we’ll respond within 30 days.
Changes
If we change this policy materially, we’ll update this page and, where required, notify you in the app.
Contact: hello@kachop.app · Kachop!, Malaysia