KRGZ (中吉通) Privacy Policy

Last updated: 2026-10-20 | Applies to the KRGZ app (Android package com.krgz.app and iOS) and the website krgz.cc

1. Data we collect

1.1 Data you provide

• Account: email, password (stored only as a salted hash), a randomly assigned or edited nickname, avatar, gender (optional), referral relationships.
• Contact and delivery: phone number, WeChat ID, WhatsApp number, recipient names and addresses (address book).
• Identity verification (KYC): legal name, ID type and number, ID photos. Verification is required before publishing posts, comments, listings or carpool trips.
• Assistance services: passport page photos, IMEI codes, phone numbers and payment receipts submitted for services such as phone IMEI registration.
• Content you post: posts, comments, reviews, photos, second-hand listings, carpool trips, chats with merchants, feedback and support tickets.
• Orders: items, amounts, recipient details, delivery notes and payment screenshots.

1.2 Data collected automatically

• Device and logs: an app-generated device identifier, device model, OS and app version, IP address, pages visited and timestamps, error logs — for statistics, security and troubleshooting.
• Location (optional): only when you turn on “nearby” sorting and grant permission. It is used on your device to calculate distances and is not uploaded to our servers.
• Camera and photos (optional): only when you scan a code, take a photo or choose images to upload; scanning happens on your device.
• Advertising: ads are served by Google AdMob, which may collect the advertising ID (Android Advertising ID / iOS IDFA with your permission), IP address, device information and ad interactions. See How Google uses information from sites or apps that use its services.

2. How we use data

• To create and secure your account (email verification, preventing bulk registration and account takeover);
• To provide the services you request: orders and delivery, parcel tracking and notifications, second-hand trading, carpool matching, document assistance;
• Identity verification to keep trading and the community safe and to prevent one person using multiple accounts in promotions;
• Points, check-in, lucky draw and referral rewards, and preventing abuse;
• Moderation, handling reports and support requests, and complying with legal obligations;
• Showing ads (including rewarded ads you choose to watch) to keep the service free;
• Analytics and product improvement.

We do not sell your personal data.

3. Sharing and public information

• Merchants and couriers: when you order, the recipient name, phone, address and order details are shared with the merchant and delivery staff to fulfil the order.
• Visible to other users: nickname, avatar, and the posts, comments, reviews and photos you publish. Contact details in listings and carpool trips are shown only to logged-in users. ID numbers and ID photos are never public.
• Service providers: Cloudflare (hosting, database, image storage, CDN and content translation); Google AdMob (ads); map and weather data services (coordinates only, no identity data).
• Legal reasons: when required by law or a lawful request from authorities, or to protect the safety and property of users and the public.

4. Storage and security

• Data is stored on Cloudflare infrastructure and transmitted over HTTPS; passwords are stored only as hashes.
• KYC photos are used only for manual review; after review the photos are deleted and only the ID number is kept to prevent duplicate verification. ID and service documents are accessible only to authorised administrators.
• We use reasonable technical and organisational measures, but no method is completely secure.

5. Retention

• Account data and your content: until you delete the content or your account.
• Orders, transactions and service records: up to 3 years after completion for after-sales, accounting and legal obligations, then deleted.
• Access and security logs: up to 12 months.
• Deletion record: the email and deletion time are kept for 30 days to prevent reward abuse through re-registration, then deleted.

6. Your rights

• Access and correction: view and edit your nickname, avatar, phone, WeChat and addresses in the app’s profile section at any time.
• Delete content: delete your posts, comments, listings, carpool trips and saved addresses at any time.
• Delete your account or data: in the app, or without the app at krgz.cc/delete-account, where you can also request deletion of specific data only.
• Withdraw permissions: turn off location, camera, photos and notification permissions in system settings; reset or limit the advertising ID in system settings.
• For data export or other requests, email [email protected]; we respond within 15 business days.

7. Children

The service is intended for users aged 16 and over. We do not knowingly collect data from children under 16 and will delete it if we learn we have.

8. Changes

We may update this policy. Significant changes will be announced in the app or on the website; the date at the top shows the latest version.

9. Contact

Operator: Central Asia Cloud Bridge LLC (中亚云桥科技有限公司)
Email: [email protected]
Website: https://krgz.cc