TAGGG · HELP & INFORMATION

Privacy Policy

Effective 14 September 2026 · Version 1.1

This policy explains how KKAT Limited uses personal information in Taggg’s website, iOS app and supporting services. KKAT Limited is the operator responsible for this processing.

Information we use

• Account information: your sign-in provider’s identifier, email address (including an Apple relay address), name, handle, biography and profile picture. We do not receive your Apple or Google password.
• Your guide: places you save, links you submit, lists, cover choices, uploaded photos, captions and other information you choose to provide.
• Connections and requests: when you connect Instagram messaging, we process the identifiers and messages needed to link your account and handle place submissions. We also process support correspondence and content reports.
• Technical information: requests to our services can include an IP address, browser or device information, error information and authentication records. Optional website analytics runs only if you allow it through our privacy controls.
• Location and media: saved venues have coordinates. Map providers receive the requests needed to show a map. Any device location you choose to share through a feature is used for that feature. Photos and submitted links can contain personal information; avoid including private information you do not want processed.

Why we use it

We use account and guide information to provide sign-in, saving, discovery, lists and sharing; process links and pictures; respond to requests; protect the service; and address abuse. Where applicable, our legal bases are performing our agreement with you, legitimate interests in operating and securing Taggg, complying with legal obligations, and consent for optional analytics or processing that requires consent. You can withdraw consent without affecting processing already carried out lawfully.

Who can see your content

Your profile visibility and each list’s visibility are separate. A public profile can show your saved-place feed. Keeping a starter list private does not hide those places from a public profile. Public custom lists can remain visible even when your profile is private. Check both settings before sharing.

Personal uploads are private unless their publication conditions apply, including when the saved place belongs to one of your public custom lists. Shared community, administrator and third-party pictures follow different visibility rules. Public material may be viewed or copied by others and indexed by search engines. Do not publish another person’s private information.

Service providers and AI

We use Cloudflare for hosting, data and media storage; Apple, Google and ChatGPT for the sign-in methods offered; Google for map services; Serper and SerpAPI for place and picture search; HikerAPI for retrieving public Instagram information; ConvertAPI for media conversion; OpenAI for extracting and summarizing place information; and Zernio for supported Instagram messaging and publishing functions. PostHog and Google Analytics provide optional website analytics. The providers used depend on the feature you use.

For example, a submitted Instagram link may result in captions, tagged locations and relevant images being sent to retrieval or AI services to identify a venue. Review text may be processed to generate place summaries. AI output can be inaccurate: check addresses, hours and other important details with the venue. These features involve server processing; they do not run entirely on your device.

Providers receive the information necessary for their tasks. Sign-in providers and linked third-party services also process information under their own policies. We may disclose information where required by law or necessary to protect rights and safety. We do not sell your personal information.

International processing

KKAT Limited is based in Hong Kong. Hosting and other providers may process information in other countries. Where applicable law requires safeguards for international transfers, those safeguards must apply to the relevant processing. Contact us for information about the providers and transfer arrangements relevant to your data.

Retention and deletion

We retain account and saved-guide information while it is needed to provide your account. You can edit your profile, remove saves and lists, and manage your own uploads through the available controls. Removing a save does not necessarily delete independently sourced information about the venue or other people’s saves.

You can permanently delete your account at Delete account, with no recovery window. Live account records are removed when you confirm; stored-file cleanup and Apple revocation are retried automatically if necessary. During cleanup, we retain only the identifiers, encrypted provider credentials and file keys needed to finish it. Once complete, the cleanup identifiers and credentials are removed. A keyed deletion receipt is retained to reject stale sessions and prevent accidental restoration; it contains no profile, lists, photos or other recoverable account contents. Information needed to resolve a request, protect the service or meet a legal obligation may need to be retained for that purpose. Backups, security logs and provider records have separate retention arrangements; removing something from the live service does not necessarily remove every backup or external copy at the same moment. Contact us for the applicable retention details for a specific record.

Your choices and rights

Use Privacy choices to change website analytics consent and find account controls. You can contact emrah@kkat.org to request access, correction, deletion or a copy of your information, or to object to or restrict processing where those rights apply. We may verify your identity before acting. You may also complain to your local data protection authority; in Hong Kong this is the Privacy Commissioner for Personal Data.

Children and policy updates

Taggg is a general-audience place-saving service and is not directed at children. If you believe a child has provided information without the authorization required by applicable law, contact us. We will publish material policy changes here with an updated effective date and provide additional notice when required.