Privacy Policy

KRYARI runs KRYARI at kryari.com and decides how your personal data is used. For questions or requests about your data, write to support@kryari.com. This policy explains what we collect, why, who sees it and what you can do about it. It goes with our Terms of Service.

What you give us:

• Account: your email address, your password (kept only as a secure hash by our sign-in provider), your first, middle and last name, username, city, account type and language. If you sign in with Google, Google gives us your name and email address.
• Profile and business: your profile photo. For a business account, the business name, type, description, city and area, logo and, if you add it, a registration number.
• Listings: titles, descriptions, details, condition and defects, prices, photos, city and pickup area, delivery options, and the private minimum offer you set.
• Deals: offers, orders, proposed and chosen handover times and meeting points, the delivery address if you choose delivery, order updates, cancellations and their reasons, disputes and reviews.
• Other activity: questions and answers, reports you send, favourites and saved searches.
• Listing fees: the amount, the method, the payment reference and, for a wallet transfer, the sender’s name, the phone number it was sent from and the transaction number if you give it. Card payments are handled by Qi Card: we receive the payment status and reference, never your full card number.

What is collected automatically:

• Sign-in cookies that keep you signed in, and the other small files described under “Cookies” below.
• A view count on each listing. We count views; we don’t record who viewed.
• Technical logs kept by our hosting providers, such as IP address, browser type and the pages requested, to run and protect the service.

Photos are re-encoded in your browser before upload, which removes hidden data such as the place where a photo was taken.

• To run KRYARI: your account, listings, search, offers, orders, handovers, reviews and notifications.
• To keep deals safe: checking text for contact details, preventing abuse (offer and rate limits), reviewing reports and disputes, and suspending accounts that break the Terms. The contact-detail check is automatic; decisions to suspend an account are made by people.
• To take listing fees and confirm wallet transfers.
• To send the emails you need: confirmation codes, password resets and important notices about your account. We don’t send marketing emails; other updates appear as notifications on KRYARI.
• To improve KRYARI from combined information, such as what similar items list for (shown only when at least 3 listings are combined) and typical reply times.
• To meet legal obligations and answer lawful requests.

• Everyone: your username, your first and last name, photo, city, account type, when you joined, your ratings and the reviews you received, your number of completed sales and purchases, recent cancellations, your live listings, and your business details if you have a business account. Answered questions on a listing are public, without the name of the person who asked.
• The other side of an order: your username and name, the order details, the handover times and meeting point and, for delivery orders, the address you gave (seller only). The buyer’s handover code is shown only to the buyer.
• Nobody else: your email address, phone number, password, middle name, private minimum offer and payment details are never shown to other users.
• KRYARI staff can see account, order and payment details when they need to, to handle reports, disputes and payments.

We don’t sell personal data and we don’t share it with advertisers. These providers run parts of KRYARI for us and process data on our behalf, under their own security and privacy terms:

• Supabase: our database, sign-in and photo storage (data kept in the EU, in Frankfurt).
• Cloudflare: hosting, network and security.
• Amazon Web Services (Amazon SES): sending our emails (EU, Frankfurt).
• Google: only if you choose “Continue with Google”.
• Qi Card, for card payments of listing fees, and the wallet app you choose for a transfer.

We may also share information when the law requires it, to protect someone’s safety, or as part of a sale or merger of the business, in which case this policy keeps applying.

Our database and files are stored in the European Union (Frankfurt, Germany). Our providers may process data in other countries and protect it with their own security measures and contracts.

• Your account, profile and listings: until you delete them or your account.
• Notifications: deleted after 120 days.
• When you delete your account, we delete your profile, your listings and their photos, your offers, favourites, saved searches, notifications, your business and the reviews written about you. Records the other side of a deal still needs (completed orders, reviews you wrote, questions you asked) and listing fee payments are kept without your name.
• Backups and provider logs are kept for a limited time and then deleted.
• We may keep information longer where the law requires it, or to deal with an open dispute or investigation.

• See and change your details in Settings, and your business details on your business page.
• Delete your account in Settings, once you have no open orders.
• Ask us for a copy of your data, or to correct or delete it, by writing to support@kryari.com. We answer within 30 days and may ask you to confirm that the account is yours.
• Turn alerts for each saved search on or off, and choose your language and theme.

We only use what KRYARI needs to work. There are no advertising or tracking cookies.

• Sign-in cookies: keep you signed in. The staff panel at admin.kryari.com has its own.
• Language cookie: remembers the language you chose.
• Recently viewed: the last listings you opened, to show them on the home page.
• Stored only on your device: your theme and your recent searches. They are never sent to us.

You can clear these in your browser settings; you will then be signed out.

Access rules in our database let each person reach only their own private data. Connections are encrypted (HTTPS), passwords are stored only as hashes, and staff access is limited. No system is perfectly secure: if you think your account is at risk, change your password and write to support@kryari.com.

KRYARI is for people aged 18 and over. We don’t knowingly collect data from children. If you think a child has an account, write to support@kryari.com and we will delete it.

We may update this policy. We will change the date at the top and tell you on KRYARI before an important change applies.

KRYARI: support@kryari.com. If a translation of this policy differs from the English version, the English version applies.