The K✦Gem

Privacy Policy

Version 2026-07 · Effective July 21, 2026

Controller: LiaVia, LLC, a Delaware limited liability company · Legal notice address: c/o our registered agent in Delaware · Contact: support@thekgem.com

This policy describes what we actually collect and how we use it. We do not collect data "just in case," and we will update this policy before materially changing our practices.

1. Information We Collect

You provide: nickname; email; phone number (for verification); profile photo (optional); social handles you choose to link (optional); reviews, recommendations, requests, and event submissions; photos you upload; saved places and visit check-ins; support communications; reports you file.

Collected automatically: device type and OS; app version; IP address; approximate location (your region selection or IP-based); on-device storage of your login/session and preferences; crash and performance data; security signals used to prevent fraud and fake accounts.

Precise location (sensitive): collected only when you initiate a visit check-in or use nearby features, with your device permission. For check-ins we store a location snapshot (coordinates and timestamp) to verify the visit. You can use the Service without granting precise location; visits will simply be recorded as unverified.

Photos: we remove embedded GPS metadata (EXIF) from uploaded photos before storage.

Business customers: business contact and verification details. Payments are processed by Stripe — we do not store full card numbers.

We do not: collect advertising identifiers for ad targeting, serve third-party ads, or sell your personal information.

2. How We Use Information

To operate the Service (accounts, content, check-ins, credits, moderation — including automated screening); to verify visits and reviewer qualifications; to prevent fraud, spam, and fake accounts; to provide support; to send service communications; to analyze aggregate usage to improve the Service; and to comply with law.

3. How We Share Information

Service providers: Supabase (hosting/database), Google (Maps/Places and geocoding), Stripe (business payments), our SMS verification provider, and crash/analytics tooling — each bound to process data only for our purposes.
AI processing (Anthropic): to keep the community safe and to power in-app support, content you submit — such as reviews, photos, submissions, and support-chat messages — may be processed by Anthropic (Claude) solely to screen for policy violations and to answer support questions. This content is not used to train the provider's models and is not used for advertising.
Public by design: your nickname, tier badges, reviews, photos, recommendations, and public counts are visible to other users.
Event organizers receive only aggregate RSVP counts and public nicknames — never your email or phone number. Information you submit through an organizer's external registration link goes directly to that organizer under their policies.
Businesses can see your public profile content, not your contact details.
Legal: we may disclose information to comply with law, enforce our Terms, or protect rights, safety, and the integrity of the Service.
We do not sell your personal information and do not share it for cross-context behavioral advertising.

4. Retention & Deletion

Account data is retained while your account is active.
You may delete your account in-app (Profile → Delete Account). We remove or de-identify personal information within 30 days, except: (a) reviews may persist in anonymized form; (b) records kept for legal, security, or fraud-prevention purposes for up to 24 months; (c) backups purged on rotation within 35 days.
Check-in location snapshots are retained up to 24 months for integrity auditing, then deleted or aggregated.

5. Your Privacy Rights

We extend the following rights to all users, wherever you live: access a copy of your data, correct inaccuracies, delete your data, and portability.

California residents (CCPA/CPRA): you also have the right to opt out of sale or sharing (we do neither), to limit use of sensitive personal information (we use precise location only for the verification purposes described above), and to be free from discrimination for exercising your rights. We honor Global Privacy Control (GPC) signals where required.
Maryland residents (MODPA): you have access, correction, deletion, portability, and opt-out rights; we practice data minimization and do not sell sensitive data.
How to exercise: in-app or email support@thekgem.com. We verify requests through your account and respond within 45 days (extendable where the law allows).
Appeals: if we deny a request, reply to our decision with "Appeal" and a different reviewer will respond within 45 days. Maryland residents may also contact the Maryland Attorney General.

6. Children

The Service is not directed to children under 13, and we do not knowingly collect their information. If you believe a child under 13 has an account, contact us and we will delete it.

7. Security

We use encryption in transit, access controls, phone verification, and moderation and fraud-prevention systems. No system is perfectly secure; we will notify affected users of breaches as required by law.

8. International

The Service is operated from the United States, and data is processed in the United States.

9. Changes

We will post updates here and, for material changes, provide in-app or email notice before they take effect.