Privacy Policy

1. Information we collect and how we collect it

Information you provide

• Account and contact information such as your name, email address, phone number and login information.
• Your neighbourhood and, when you grant permission, precise or approximate device location.
• Book listings, ISBN, condition, exchange terms and photographs you choose to upload.
• Messages, discussion posts, reports, support requests and other content you submit.
• Your wishlist, reading activity, exchange details and preferences.

Information collected automatically

• Device and technical information such as device type, browser, operating system, app version, IP address, app identifiers, language and notification token.
• Usage information such as screens viewed, features used, searches, interactions and timestamps.
• Diagnostic information such as crash reports, performance data and error logs.
• Cookie and similar-technology data from the website, including Koottar's first-party visitor identifier.

Information accessed with your permission

The app may request access to location, camera, photos or notifications for a feature you choose—for example, finding nearby books, scanning an ISBN, uploading a book image or receiving an exchange reminder. You can decline or withdraw these permissions in iOS Settings, although the related feature may then be unavailable.

2. How we use information

• Create, authenticate and manage accounts and provide Koottar.
• Show relevant books, readers, Spaces, bookstores and events near your selected area.
• Facilitate listings, exchanges, chat, contact sharing, safety reports and return reminders.
• Send requested service messages and notifications.
• Personalise recommendations and, where permitted, send Koottar marketing.
• Measure usage, diagnose problems, prevent fraud, maintain security and improve Koottar.
• Comply with law, enforce our terms and protect users and others.

3. Sharing information

• Other users: profile information, general neighbourhood, listings and content you publish may be visible to relevant users. Contact details are shared only to support a confirmed exchange.
• Service providers and app technologies: providers supporting hosting, authentication, analytics, diagnostics, messaging, email, notifications, maps, media storage, support and security may process information for Koottar. The website currently uses Google Analytics and LinkedIn Insight Tag for analytics and measurement.
• Affiliates: entities under common ownership or control may process information to operate and improve Koottar.
• Spaces and bookstores: we may provide aggregated or de-identified insights, but not identifiable data for independent marketing without consent.
• Legal, safety and corporate events: we may disclose information to comply with law, protect rights and safety, investigate abuse, or complete a corporate transaction subject to safeguards.

We require service providers, analytics providers, third-party SDK providers, affiliates and other recipients to provide the same or equivalent protection stated in this policy and required by applicable law and platform policies. They may process data only for authorised purposes under appropriate contractual, confidentiality and security obligations.

We do not sell personal data. If the iOS app tracks activity across apps or websites owned by other companies, Koottar will first request permission through Apple's App Tracking Transparency framework.

4. Exchanges and contact sharing

After users confirm an exchange, Koottar may share the name and phone number provided at registration with the other party when needed to confirm details, arrange a meetup or manage a return. Koottar may send both parties automated reminders as a return date approaches.

5. Retention and deletion

We retain personal data while an account is active and as reasonably necessary to provide Koottar, complete exchanges, maintain security, resolve disputes and meet legal obligations. Retention varies by data type and purpose.

After account deletion, we delete or de-identify associated personal data within 90 days unless retention is required or permitted by law. Shared content may remain where necessary to preserve transactions, safety records or discussions, but will be deleted or de-identified where reasonably possible. Residual backup copies remain only until overwritten.

6. Your choices and rights

Subject to applicable law, you may request access, correction or deletion and may object to or restrict certain processing.

• Account deletion: initiate deletion from account or privacy settings inside the iOS app, or contact us.
• Permissions: withdraw location, camera, photo, notification or tracking permission in iOS Settings.
• Marketing and personalisation: use available app controls, unsubscribe, or contact us to withdraw consent.
• Website technologies: browser settings can block or delete cookies, although this may affect functionality.

Use in-app privacy controls or email hello@koottar.com. We may verify your identity. Withdrawing consent does not affect earlier lawful processing.

7. Security and international processing

We use reasonable administrative, technical and organisational safeguards, including encrypted connections, access controls and secure storage. Providers may process information outside the UAE; where required, we use appropriate transfer safeguards.

8. Children

Koottar is not directed to children under 13 and does not knowingly collect their personal data without appropriate parent or guardian authorisation. Contact us if you believe a child provided data improperly.

9. Changes

We may update this policy as Koottar, its app technologies or legal requirements change. We will update the date above, give additional notice of material changes where appropriate and request new consent when required.

10. Contact us