Privacy & Security

Kollo is operated by Edvin Magnus Lindén under the name “Kollo Memories.”
Contact: edvin.lapinski@gmail.com
Website: kollo.app

Kollo may collect and process:

• Account data: account identifier, sign-in provider, authentication records, and email address if provided through the sign-in service.

• Profile data: username, display name, biography, profile photo, profile cover image, and friend count.

• Social and collection data: friendships, requests, invitations, approvals, collection ownership and membership, blocked users, and related timestamps.

• Photos and videos: media you select or that qualifies for an enabled collection, plus thumbnails, file type, size, uploader, collection ID, upload status, and capture date/time used to match collection windows.

• Notifications: notification preferences, notification records, and device push tokens.

• Safety and support data: reports, report details, blocked-user records, support emails, and information needed to investigate abuse.

• Technical data: app version, device and operating-system information, IP address, error logs, security events, and service-performance information.

• Advertising data: Google AdMob may process device or advertising identifiers, approximate location, app context, ad interactions, frequency-capping information, and fraud-prevention data. Kollo currently requests non-personalized ads. Where required, a consent message is shown before ads are requested. Meta (Facebook) may receive limited install-attribution data via Apple's SKAdNetwork to measure app install performance. Kollo does not use Facebook Login and does not send Meta any custom in-app event data.

Kollo accesses your photo library only after you grant Apple’s permission. Automatic sync is optional. Kollo uses collection dates and times to identify eligible media, but you remain responsible for reviewing what you share. You can exclude specific time windows from automatic sync for any collection ("private gaps"), and you can turn automatic sync off entirely at any time.

Where supported by your device, Kollo is designed to keep saved or downloaded images from other apps out of Automatic Sync when they can be identified as imported or re-encoded media.

This filtering uses conservative technical signals and cannot identify every case with certainty.

When Apple's on-device Sensitive Content Analysis feature is available and enabled, Kollo also uses it to screen Auto-Sync candidates on your device before upload; media it flags is held locally for your review and is not uploaded unless you approve it.

This analysis happens entirely on your device, is not always available depending on your system settings, and is not guaranteed to detect all sensitive content.

Kollo uses personal data to:

• create and secure accounts;

• provide profiles, friendships, invitations, collections, uploads, synchronization, downloads, notifications, blocking, reporting, and account deletion;

• show collection content to authorized participants;

• prevent fraud, abuse, unauthorized access, and technical failures;

• respond to support requests and enforce the Terms and Community Guidelines;

• comply with legal obligations;

• display and measure advertising where permitted.

The main legal bases are:

• Contract: to provide the Kollo service you request.

• Consent: for device permissions and advertising-related processing where consent is legally required.

• Legitimate interests: to secure, maintain, improve, and protect Kollo and its users.

• Legal obligation: where records or disclosures are required by law.

• Vital interests: in rare emergencies involving serious threats to life or safety.

You may withdraw consent through the relevant device, app, or consent settings. Withdrawal does not affect earlier lawful processing.

Kollo shares data only as needed:

• Collection participants can see media and information shared within collections they can access.

• Service providers may process data for hosting, authentication, database, storage, notifications, security, and advertising. These currently include Firebase/Google services, Apple services, and Google AdMob.

• Authorities or other parties may receive information where required by law or reasonably necessary to protect users, rights, security, or public safety.

• Data may also be transferred if Kollo is lawfully reorganized or sold, subject to applicable privacy law.

Kollo does not sell your personal information. Kollo does not use your photos or videos as advertising content without separate permission.

Some providers may process data outside Sweden or the EEA. Where required, Kollo and its providers rely on approved safeguards, such as adequacy decisions or standard contractual clauses.

Account and collection data is generally kept while your account or the relevant collection remains active. When you delete your account, Kollo begins deleting account data and content according to the app’s deletion process.

Some information may be retained longer where necessary for:

• security, fraud prevention, and abuse investigations;

• unresolved safety reports or legal claims;

• compliance with legal obligations;

• short technical backup and deletion cycles.

Kollo keeps data only for as long as reasonably necessary for these purposes.

Depending on the law that applies to you, you may have rights to:

• access your personal data;

• correct inaccurate data;

• delete data;

• restrict or object to processing;

• receive certain data in a portable format;

• withdraw consent;

• complain to a data-protection authority.

In Sweden, the supervisory authority is the Swedish Authority for Privacy Protection (IMY).

If you are in the UK, you may also contact the Information Commissioner's Office (ICO).

You can edit profile information, manage permissions and notifications, block or unblock users, and delete your account through Kollo. For other requests, email edvin.lapinski@gmail.com. We may need to verify your identity.

You must be at least 13 years old to use Kollo. If the law where you live requires a higher age or parental permission, you must meet that requirement.

Kollo is not intended for children under 13, and we do not knowingly collect personal data from children under 13. Contact edvin.lapinski@gmail.com if you believe a child under 13 has provided personal data.

Kollo uses access controls, authenticated connections, restricted storage rules, and other technical and organizational measures designed to protect data. No online service can guarantee absolute security, so keep your account and device secure and report suspected problems promptly.

This policy may be updated when Kollo, its providers, or applicable laws change. The current version will be posted at https://kollo.app/privacy-policy with its effective date. Material changes will be communicated where required.

Edvin Magnus Lindén, operating under the name “Kollo Memories”  

edvin.lapinski@gmail.com