1 Data Controller
The data controller responsible for your personal data is:
Komando SAS
France
Email: support@komando.app
Website: komando.app
2 What Data We Collect
Depending on how you use Komando, we may collect the following personal data:
| Data Type | Purpose | Legal Basis |
|---|---|---|
| Email address | Account creation, login, notifications | Contract performance |
| Full name | Profile identification | Contract performance |
| Profile photo | Displayed on your public profile | Consent |
| Phone number (optional) | Account contact | Contract performance |
| City | Creator profile, including the directory shown to businesses | Contract performance |
| Instagram / TikTok handle | Verifying creator identity and reach, and showing the directory profile | Contract performance |
| Instagram connection (optional): user id, encrypted access token, posts, and statistics of a post you attach | Letting you attach a post to a collaboration and showing that post to the business | Consent |
| Device location while the map is open | Centering the map. Processed on the device and not stored on our servers | Consent |
| Free or paid content choices, starting price, and a fee agreed in a conversation | Direct collaboration requests from businesses. Komando does not collect the fee | Contract performance |
| Messages, ratings, and reviews | Coordinating and closing a collaboration | Contract performance |
| Product-activity log (screens opened, and the fact of a screenshot or screen recording, without the image) | Operating the service, support, and abuse prevention | Legitimate interest |
| Device identifier (push token) | Sending push notifications | Consent |
| Content posted (photos, text) | Collaboration deliverables | Contract performance |
| Usage events and crash reports (a crash report may include your account identifier) | App stability. Not used for advertising | Legitimate interest |
3 How We Use Your Data
We use your personal data solely for the following purposes:
- Creating and managing your account
- Facilitating collaborations between influencers and businesses
- Sending relevant in-app and push notifications
- Displaying your profile to a business when you apply, and a short directory profile when you accept direct requests
- Improving app features and fixing technical issues
- Responding to support requests
We do not sell your personal data. We do not use it for advertising. The fuller description of each category is in our Privacy Policy.
4 Data Sharing
Your data may be shared with the following trusted third-party services, strictly for operational purposes:
- Firebase (Google LLC) — Authentication, database, storage, push notifications, analytics, and crash reports. Data may be processed in the United States. Google is certified under the EU-US Data Privacy Framework.
- Apple Inc. — Push notification delivery via APNs.
- Meta Platforms (Instagram) — Only if you connect Instagram, to obtain your access token and read the profile and media described in the Privacy Policy.
- Resend (Resend Inc.) — Transactional email. Data is processed in the United States under standard contractual clauses.
- Vercel Inc. — Hosts komando.app and measures anonymised page views on that website. Not linked to your app account.
A business sees your profile when you apply to its offer, and a short directory profile if you accept direct requests. Our team can access account data for support, moderation, and enforcement of the Terms.
5 Data Retention
We retain your personal data for as long as your account is active. If you delete your account:
- Your profile data (name, photo, handles) is permanently deleted within 30 days.
- Your email address is removed from our authentication system immediately.
- Collaboration records may be retained for up to 12 months for legal and dispute resolution purposes, then permanently deleted.
6 Your Rights Under GDPR
If you are located in the European Union or EEA, you have the following rights regarding your personal data:
- Right of access — You can request a copy of the personal data we hold about you.
- Right to rectification — You can request correction of inaccurate data.
- Right to erasure ("right to be forgotten") — You can request deletion of your account and personal data.
- Right to restriction — You can request that we limit the processing of your data in certain circumstances.
- Right to data portability — You can request your data in a structured, machine-readable format.
- Right to object — You can object to processing based on legitimate interest.
- Right to withdraw consent — Where processing is based on consent, you can withdraw it at any time (e.g., disabling location or push notifications in your device settings).
To exercise any of these rights, contact us at support@komando.app. We will respond within 30 days.
7 Cookies & Tracking
The Komando mobile application does not use cookies or cross-app tracking. We do not share data with advertising networks or data brokers.
Firebase Analytics records product events. Crash reports may include your account identifier so we can investigate a crash on your account. The product-activity log described above is also linked to your account. None of this is used for advertising.
The public website komando.app uses Vercel Web Analytics to measure anonymised traffic (page views, country, device, referrer). This does not use advertising cookies and is not linked to your app account.
8 Data Security
We implement appropriate technical and organisational measures to protect your data against unauthorised access, alteration, disclosure, or destruction, including:
- Encrypted data transmission (HTTPS / TLS)
- Firebase Security Rules to restrict data access
- Authentication tokens managed by Firebase Auth
- Limited internal access to personal data on a need-to-know basis
9 Minors
Komando is not intended for users under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us immediately at support@komando.app so we can delete it.
10 Changes to This Policy
We may update this Data Protection notice from time to time. When we do, we will update the "Last updated" date at the top of this page and, where appropriate, notify you via the app. Continued use of Komando after any changes constitutes acceptance of the updated notice.
11 Contact & Complaints
For any data protection questions or to exercise your rights:
Email: support@komando.app
Website: komando.app
If you believe your data has been processed unlawfully, you have the right to lodge a complaint with your national supervisory authority. In France, this is the CNIL (Commission Nationale de l'Informatique et des Libertés).