Privacy

What Krets collects, and when

Signing in.

Your email address, and a six-digit code sent to it, which is kept hashed for 15 minutes. If you sign in with Google instead, Google gives Krets your name, email address and a link to your profile picture; Krets uses the name and email to make your account and asks Google for nothing else — never your contacts, calendar, files or mail. If you sign in with Apple, Apple gives Krets your name and your email address, or a private relay address if you choose Hide My Email; Krets asks Apple for nothing else.

Your account.

Your name, and your mobile number once you confirm it with a code before your first pickup, so the other side can call you on the day. A buyer also sets where they collect from, how far they go, what they usually pay and a line about themselves.

A pickup.

The address, flat or unit, how to find the door, the suburb, its position on the map, how many containers, when they can be picked up, the price, and a photo of them if you take one.

What happens next.

Who claimed, when they set off, when it was picked up or cancelled, the messages you send each other, the ratings each of you gives the other, anyone you block, and anything you report to Krets about a pickup or a person.

Notifications.

Whether you want texts and push notifications, and the token your phone gives Krets for push.

Your session.

The browser or app you signed in from, with the session. Krets does not store your IP address: it is used in memory for about a minute to stop automated abuse, then forgotten.

Krets has no advertising, no analytics service and no tracking of you across other apps or sites. A pickup you start drafting is kept on your own device until you post it.

Who sees what

Before a pickup is claimed.

Buyers near you see the suburb, a rough position a few hundred metres across, the quantity, the window and the price. Not the street, not your name, not the photo.

Once a buyer holds it.

The buyer sees the address, how to find the door, the photo and your name; you see theirs. Each of you can see the other’s mobile number from the claim until 1 hour after the window, and not after that. A buyer who cancels, or never comes, keeps none of it.

A buyer’s profile.

Sellers see a buyer’s first name and initial, their line about themselves, what they pay, their ratings and record, and where they collect from rounded to about a kilometre — never their own address or how far they go.

Ratings.

What you say about each other is shown once both of you have rated, or 7 days after the pickup, so neither rating is written in reply to the other.

Messages.

Before a message, a door note, a unit number or the line on your buyer card reaches anyone else, words on a list of offensive words are replaced with ***. After that, Krets doesn’t edit or remove them. A message is kept until the account that sent it is deleted; when you delete your account, the messages you sent are deleted with it, and Krets’s backups hold them for at most 6 hours more. A copy emailed to the other person stays in their inbox. If a conversation is reported, Krets staff may read it to deal with the report.

Reports.

A problem you report after a pickup goes to Krets alone: the buyer is not told, and only Krets reads your note. If you close a pickup because nobody came, the buyer is told that.

Krets does not sell personal information, and does not share it for advertising.

Where it is kept, and who handles it

Krets runs on Google Cloud in Sydney and keeps its records in a Neon database in Sydney. A few services outside Australia do one job each with the least they need:

Mapbox (United States).

Finds the address you type on the map, and draws the maps. The address you type is sent to Mapbox to look it up.

Twilio (United States).

Sends the code that confirms your mobile number, and the texts about your pickups, to your number.

Resend (United States, sending from Japan).

Sends Krets’s emails: your sign-in code and the emails about your pickups, with your name, email address and the suburb, and a copy of a message sent to you when no push notification reaches you. Resend keeps each email for 30 days.

Apple and Google.

Deliver push notifications to your phone through its push service, and, if you choose it, sign you in with Google or Apple.

So some of your information goes to the United States and Japan. Each of these companies handles it under its own privacy policy and only to do the job above.

How long Krets keeps it

Your account.

For as long as you have one. Delete it and your name, email, mobile number, saved addresses, notification settings, sign-in and the messages you sent go with it at once.

Pickups.

An open pickup nobody claimed expires when its window closes. Completed and cancelled pickups stay as the record both sides can look back on; once you delete your account they no longer name you.

Codes and sessions.

A sign-in code lasts 15 minutes. A session lasts until you sign out or it expires.

Reports.

Kept by Krets to keep the service safe, and read only by Krets.

Suspended accounts.

If a suspended account is deleted, Krets keeps a fingerprint of its email address, not the address itself, and nothing else, so the same address can’t be used to sign up again.

Your choices

See and change.

Your name, mobile number, saved addresses and notification settings are all on your Account page; a buyer’s area, price and line about themselves are under Area & rate.

Notifications.

Turn texts and push notifications off on Account › Notifications, or reply STOP to any text. New-pickup alerts are off until you turn them on.

Location.

Krets reads your location only when you ask it to, to fill in an address or check which buyers cover where you are, and works without it: type the address instead.

Delete your account.

In the Krets app and on the website, open Account › Delete account. A 6-digit code to your email confirms it, and it happens at once: your name, email, mobile, addresses, settings, sign-in and the messages you sent go. If the account is suspended, Krets keeps a fingerprint of its email so it can’t be used to sign up again. Pickups you completed or cancelled stay on the other person’s record without your name, so their history stays whole. You can also email hello@krets.com.au from the address you sign in with.

Questions and complaints

Write to hello@krets.com.au to ask what Krets holds about you, to correct it, or to complain about how it was handled. Krets answers within 30 days. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

When this page changes, the date at the top changes with it. For how a pickup works, see How it works.