Cloud Klepto ("we," "us," or "our") operates a peer-to-peer item lending platform that helps you track items you lend to and borrow from people you know. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using the app, you agree to the practices described here.

1. Information We Collect

We collect the following categories of information:

• Account information: your name and email address, used to identify you and match you with lending partners.
• Loan records: item names, descriptions, photos, loan and due dates, return photos, condition reports, notes, and status history for items you lend or borrow.
• Payment records: payment amounts, types, methods, and dates (for example late fees or lease payments) that you choose to record for tracking purposes. We do not process, hold, or transfer payments.
• Tracker information: optional tracker type, sharing URLs, and manual location notes you attach to a loaned item. We do not collect precise GPS coordinates from your device.
• Push notification data: an anonymous device subscription token so we can deliver reminders and alerts, only when you opt in.
• Usage & diagnostics data: standard app activity, crash, and performance data to help us improve the service.

For app store transparency, the table below maps our data practices to the categories used by Apple's App Privacy Details and the Google Play Data Safety section.

2. Data Linked to You

The following information is linked to your identity and used to provide the Service:

• Contact Info — Name & Email: to create your account, identify you, and match you with lending partners.
• User Content — Photos & Notes: item and return photos, descriptions, condition reports, and notes you add to a loan, shared with the other party.
• User Content — Ratings & Comments: borrower ratings, condition feedback, and comments you submit.
• Financial Info — Payment Records: payment amounts, methods, and dates you record for tracking. This is record-keeping only; we do not process financial transactions.
• Location — Approximate/Manual: manual location notes you choose to enter for a loaned item. We do not collect device GPS location.

3. Data Not Linked to You

The following is not linked to your identity and is used only to operate and improve the Service:

• Usage Data: aggregated app activity events used for product improvement.
• Diagnostics: crash and performance data used to fix issues and improve stability.
• Other Identifiers: the device push-notification subscription token used solely to deliver notifications.

4. Data Used to Track You

We do not use your data to track you across other companies' apps or websites for advertising, and we do not share data with advertising networks or data brokers. Cloud Klepto contains no third-party advertising SDKs.

5. How We Use Your Information

• To create and manage your loans, requests, and shared trade ledger with the other party.
• To send due-date reminders, overdue alerts, and status updates via email and push notifications.
• To maintain a bilateral record of lending events so both parties stay accountable.
• To provide trust features such as borrower ratings and peer history.
• To secure the platform, prevent fraud, and comply with legal obligations.

6. How We Share Your Information

We do not sell your personal information. We share data only as needed to operate the service:

• With the other party: the lender or borrower in a specific loan can see the relevant loan details, photos, condition, and payment records for that item.
• Service providers: trusted infrastructure and notification providers that help us host data, send email, and deliver push notifications under appropriate agreements.
• Legal compliance: when required by law, court order, or to protect rights, safety, or property.

7. Data Retention

We keep your loan and ledger records for as long as your account is active and as needed to maintain a reliable history of your lending activity. You can request deletion of your account and associated data at any time (see Your Rights below), after which we will remove it within a reasonable period, except where retention is required by law.

8. Security

Data is transmitted over encrypted HTTPS connections and access to records is governed by row-level security rules so users can only access loans and records they are a party to. We use authentication tokens to protect sessions and restrict administrative actions. No method of transmission or storage is fully secure, but we work to protect your information using reasonable safeguards.

9. Push Notifications

Push notifications are optional. If you enable them, we store a device subscription token (not message content) to send reminders and alerts. You can disable notifications in your device settings at any time, and only users with an active loan contract with you can trigger notifications to you.

10. Your Rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate information.
• Request deletion of your account and associated data.
• Opt out of marketing or promotional communications.

To exercise any of these rights, contact us at ucp@syncloudconnect.com. Account deletion can also be initiated from the Profile screen in the app.

11. Children's Privacy

Cloud Klepto is not intended for children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

12. International Users

The service is provided from the United States. If you access it from outside the U.S., your information may be transferred to and processed in the U.S., where data protection laws may differ from those in your country.

13. Encryption in Transit

All personal information transmitted between the app and our servers is encrypted in transit using HTTPS/TLS. Data stored on our servers is protected at rest by our cloud hosting provider. We confirm that user data is encrypted in transit, as required by app store data-safety disclosures.

14. Third-Party Services & SDKs

We rely on a limited set of third-party services to operate the app: cloud hosting, transactional email delivery, Web Push (VAPID) notification delivery, app analytics, and QR-code generation. Optional item trackers (such as Apple AirTag or Tile) link out to their respective providers and are governed by those providers' own terms and privacy policies. Cloud Klepto does not include any advertising SDKs and does not sell data to third parties.

15. Data Deletion & Account Removal

You can request deletion of your account and associated personal data at any time using either of the following methods, both accepted as valid data-deletion requests:

• In the app: Profile → Delete Account, which submits a deletion request to our team.
• By email: ucp@syncloudconnect.com (our designated data-deletion request contact).

Upon a verified request, we delete your account and associated data within 30 days, except where limited retention is required by law. You may also disable push notifications in your device settings at any time, which removes the device subscription token from our records.

16. Data Collected Without an Account

We do not knowingly collect personal information from users who have not created an account, except for anonymous usage and diagnostics data that is not linked to your identity. You may use the app without registering, and no personal lending data is stored until you create an account.

17. Changes to This Policy

We may update this Privacy Policy from time to time. We will revise the "Last updated" date above and notify you of material changes within the app. Continued use after changes take effect means you accept the updated policy.

18. Contact Us

Questions about this Privacy Policy or your data can be sent to ucp@syncloudconnect.com.