Privacy Policy - KreativeStores

1. Information we collect and why

Account and profile information: names, email address, phone number, profile picture, and authentication information to create and secure your account, display your profile, and provide support.
Store and creator content: store name and address, settings, uploaded files and images, product listings, event details, community descriptions, and session availability to operate your creator business.
Customer and business records: customer contact information, orders, bookings, community membership records, transaction references, balances, and withdrawal account details to provide business management features. The mobile app does not collect payments; records from connected storefront services may be displayed in it.
Support communications: information you send us when asking for help or exercising your privacy rights.
Technical information: request logs, IP address, browser or device information, and service errors to operate, secure, and troubleshoot our services. The landing website uses Vercel Analytics and Speed Insights to understand website usage and performance.

We use information to provide requested services, protect accounts, meet applicable obligations, and improve reliability. Public storefront information and published content are visible to visitors; account credentials and private business records are not intended for public display.

2. Google API Services Data Disclosure

The KreativeStores client app uses Google APIs when you use your Google account to sign in or add a calendar to KreativeStores one on one sessions booking feature.

KreativeStores's use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

The KreativeStores app doesn’t transfer information received from Google APIs to any other app.

The Calendar connection is optional. When you connect it, we request Calendar event access to schedule booked sessions and Google Meet meetings. The authorization code is sent to our backend, which stores connection credentials to maintain the integration. We do not use Google API data for advertising.

You can disconnect Calendar in the booking settings and revoke KreativeStores access in your Google account permissions. Disconnecting the integration removes the stored connection from KreativeStores; existing events in Google Calendar are managed in Google Calendar.

3. How information is shared

We share information only as needed to provide services, follow your instructions, comply with law, or protect against fraud and abuse. This includes hosting and file storage providers, email and support services, Google for the optional Calendar integration, and providers involved in connected storefront transactions. Those providers may process information in other countries and have their own privacy policies.

Booking details and relevant contact information may be shared with the creator and customer involved in a session. Community platforms such as WhatsApp and Telegram handle information under their own policies when you use those services.

We do not sell personal information. We do not publish private account information for promotion without permission. If the service changes ownership, personal information may be transferred subject to applicable privacy obligations.

4. Storage and security

The mobile app stores authentication and selected account or store information locally to maintain your session. Website storage and cookies may be used for account sessions and preferences. You can manage website storage through your browser and remove local app data through your device settings; doing so does not delete your account on our servers.

We use HTTPS for app-to-server communication and restrict access to personal information to people and service providers who need it for their work. No storage or transmission method is completely secure.

5. Retention and account deletion

We retain account information while it is needed to operate your account and provide services. You can request account deletion from Profile → Delete Account in the mobile app, or visit our account deletion page and email support@kreativestores.com.

We aim to complete account deletion within 30 days after verifying account ownership. If a legal obligation or an unresolved issue affects the request, we will explain what must be retained, why, and the expected next steps. You do not need to reinstall the app to request deletion.

Deletion removes your login credentials, profile, and Google Calendar connection credentials from our active systems. We also delete or anonymize associated store settings, uploaded content, and customer, community, booking, and order information that we no longer have a lawful reason to retain. Information belonging to other account holders is assessed separately so that their records and rights are protected.

Limited retention after deletion
Records	Period and purpose
Required accounting and tax records	Five years from the end of the relevant reporting period, where Kenyan tax record requirements apply. Only necessary transaction, invoice, and withdrawal details are retained.
Deletion audit record	Up to 12 months after completion, limited to the account identifier, request and verification dates, outcome, and any retention reason, to demonstrate that the request was handled.
Backup copies	Our target is expiry or removal within 90 days after deletion from active systems. Backups are restricted to recovery, and completed deletions must be reapplied if a backup is restored.
Records subject to a legal hold	Only for as long as necessary to meet a legal requirement or resolve a specific investigation or dispute; reviewed and deleted when that reason ends.

Retained records are restricted to their stated purpose and are not used to keep your account active. Copies downloaded by customers, messages or memberships on external community platforms, and Google Calendar events already created in Google accounts are managed separately by their respective owners or providers.

6. Your choices and rights

You can edit supported profile fields in the app, disconnect Google Calendar, and request access, correction, or deletion of personal information by contacting support. You may also object to certain uses or withdraw consent where applicable. We may need to verify account ownership before acting on a request.

Creators are responsible for handling customer information they access through their stores lawfully and only for appropriate business purposes. Customers can contact us about platform-held information and contact the relevant creator about information the creator holds separately.

7. Age eligibility

KreativeStores creator and business management accounts are intended for people aged 18 or older. We do not knowingly register children for these accounts. If you believe a child has created one or supplied personal information without an appropriate basis, contact support so we can investigate and take appropriate action.

8. Changes and contact

We update this policy when our services or practices change and show the latest revision date above. Material changes will be communicated through an appropriate service channel.

For privacy questions or requests, email support@kreativestores.com or call +254768793923.