Privacy Policy

Effective 8 October 2026 · Version 1.6

This policy explains how KKAT Limited uses personal information in Taggg’s website, iOS app and supporting services. KKAT Limited is the operator responsible for this processing.

Information we use

• Account information: your sign-in provider’s identifier, email address (including an Apple relay address), name, handle, biography and profile picture. We do not receive your Apple or Google password.
• Your guide: places you save, links you submit, lists, cover choices, selected and imported pictures, legacy uploaded photos, captions and other information you choose to provide.
• Connections and requests: when you connect Instagram messaging, we process the identifiers and messages needed to link your account and handle place submissions. We also process support correspondence and content reports.
• Technical information: requests to our services can include an IP address, browser or device information, error information and authentication records. Optional website analytics runs only if you allow it through our privacy controls. The iOS app collects basic app-use events and an app-instance identifier through Google Analytics for Firebase.
• Location and media: saved venues have coordinates. Map providers receive the requests needed to show a map. Any device location you choose to share through a feature is used for that feature. Photos and submitted links can contain personal information; avoid including private information you do not want processed.

Why we use it

We use account and guide information to provide sign-in, saving, discovery, lists and sharing; process links and pictures; respond to requests; protect the service; and address abuse. We use iOS app analytics to understand app use and improve Taggg. Where applicable, our legal bases are performing our agreement with you, legitimate interests in operating and securing Taggg, complying with legal obligations, and consent for optional website analytics or processing that requires consent. You can withdraw consent without affecting processing already carried out lawfully.

Who can see your content

A list is public only while your profile is: making a list public makes your profile public too, and making your profile private makes all your lists private. A public profile can show your saved-place feed. Keeping a starter list private does not hide those places from a public profile. Check both settings before sharing.

You can upload or change your profile photo. Profile photos are saved without prior moderation and follow your profile visibility settings. They are not sent to an AI moderation service. Taggg no longer accepts personal uploads to place galleries. Existing uploaded pictures retain their removal controls. Existing personal pictures follow the visibility of their creator profile or public custom list without prior moderation, using the creator’s selected cover and order. Pictures you select through Find pictures are published directly to the shared place gallery with source attribution, without prior administrator approval. This is a public contribution even if your profile or lists are private. Administrator and imported third-party pictures follow their respective visibility rules. Public material may be viewed or copied by others and indexed by search engines. Do not publish another person’s private information.

Service providers and AI

We use Railway for hosting, data and media storage; Apple and Google for the sign-in methods offered; Google for map services; Serper and SerpAPI for place and picture search; HikerAPI for retrieving public Instagram information; ShortPixel for picture optimization and Bunny.net for AVIF conversion and image delivery; Anthropic (Claude) for extracting and summarizing place information; and Zernio for supported Instagram messaging and publishing functions. PostHog and Google Analytics provide optional website analytics. The iOS app uses Google Analytics for Firebase and PostHog to measure how the app is used: first opens and sessions, which screens are viewed, and which features are used, such as imports, saves and lists, and whether they succeed. App analytics does not include your name, email address, searches, links or captions, and PostHog keeps no profile of you. Google Analytics assigns an app-instance identifier and derives general location from masked IP addresses; PostHog assigns its own anonymous identifier and derives general location from your IP address. The iOS SDKs do not include advertising-identifier collection. You can turn app analytics off in the app under Settings, Share usage analytics. The providers used depend on the feature you use.

For example, a submitted Instagram link may result in captions, tagged locations and relevant images being sent to retrieval or AI services to identify a venue. Review text may be processed to generate place summaries. AI output can be inaccurate: check addresses, hours and other important details with the venue. These features involve server processing; they do not run entirely on your device.

Providers receive the information necessary for their tasks. Sign-in providers and linked third-party services also process information under their own policies. We may disclose information where required by law or necessary to protect rights and safety. We do not sell your personal information.

Taggg uses AI and search providers with public information only: public Instagram posts and their captions and pictures, Google Maps and other public listings, and places’ own websites. They identify the place in a link you add, find pictures and write place descriptions and stories. This is part of how Taggg works for every account, so there is no separate setting. Your name, email address and account details are not sent to them. Picture search and imported media may also use conversion services.

International processing

KKAT Limited is based in Hong Kong. Hosting and other providers may process information in other countries. Where applicable law requires safeguards for international transfers, those safeguards must apply to the relevant processing. Contact us for information about the providers and transfer arrangements relevant to your data.

Retention and deletion

We retain account and saved-guide information while it is needed to provide your account. You can edit your profile, remove saves and lists, and remove previously uploaded pictures through the available controls. Removing a save does not necessarily delete independently sourced information about the venue or other people’s saves.

You can permanently delete your account at Delete account, with no recovery window. Live account records are removed when you confirm; stored-file cleanup and Apple revocation are retried automatically if necessary. During cleanup, we retain only the identifiers, encrypted provider credentials and file keys needed to finish it. Once complete, the cleanup identifiers and credentials are removed. A keyed deletion receipt is retained to reject stale sessions and prevent accidental restoration; it contains no profile, lists, photos or other recoverable account contents. Information needed to resolve a request, protect the service or meet a legal obligation may need to be retained for that purpose. Backups, security logs and provider records have separate retention arrangements; removing something from the live service does not necessarily remove every backup or external copy at the same moment. Contact us for the applicable retention details for a specific record.

Your choices and rights

Use Privacy choices to change website analytics consent and find account controls. App analytics can be turned off in the app’s Settings. You can contact [email protected] to request access, correction, deletion or a copy of your information, or to object to or restrict processing where those rights apply. We may verify your identity before acting. You may also complain to your local data protection authority; in Hong Kong this is the Privacy Commissioner for Personal Data.

Children and policy updates

Taggg is a general-audience place-saving service and is not directed at children. If you believe a child has provided information without the authorization required by applicable law, contact us. We will publish material policy changes here with an updated effective date and provide additional notice when required.