Privacy Policy

Koligly is a real-time communications and ecosystem platform — messaging, voice and video calling, Koligly-Talkie walkie-talkie and LoRa mesh radio, live broadcasting, Moments, a business directory, and the Koligly Personal Safety System. Koligly is operated by ProActa High Performance Management Limited ("ProActa", "we", "us"). This policy explains what information we collect when you use Koligly, why we collect it, and the choices and rights you have over it.

We collect only what each feature needs to work:

• Identifiers — phone number, email address, display name, username, profile photo and bio.
• Messages & media — the text, voice notes, photos, video and files you send, and large uploads (up to 4GB) stored in your personal or shared media vault.
• Contacts you choose to check — Koliglydoes not read your address book in the background. If you import a contact file or pick contacts to find who is already on Koligly, only the phone numbers you choose are sent to us, solely to match them against registered accounts. On Android, when you choose to add people from your contacts, the app first explains this and asks for Android's contacts permission, then lists your contacts on your own phone so you can choose. Contacts you do not choose never leave your phone.
• Location — precise location, only while you use a feature that needs it, such as sharing a location in a chat or the Personal Safety System (see section 5). Some safety features keep working in the background while you have them switched on.
• Reports — if you report a message or person, we store the report, the reason, your note and, only if you choose to include it, the text of that message, so our moderators can review it.
• Device & usage data — device type, app version, push-notification tokens, and basic diagnostic logs used to keep the service reliable. We do not use advertising or third-party analytics trackers. On the website only, never in the Android or iPhone apps, we count how many people look at and start paying for a paid plan or pack, by country, in our own database. These counts are not linked to your account or to any other person.
• Orders & memberships — when you tip, buy a ticket, join a channel or buy a product from a creator: your name, email, and for a product your phone number and delivery address. A product order's details are shared with that seller so they can deliver it. A membership is identified by your email, and a secret access key is kept in your browser to unlock members-only shows.
• Payment metadata — for paid plans, the plan, billing cycle and transaction status. Card and mobile-money details are handled directly by our payment processor; Koligly does not store them.

• To deliver messages, calls, broadcasts and notifications to the right people.
• To operate discovery features you opt into, such as the people directory.
• To secure your account, prevent abuse, and enforce our Terms of Service.
• To provide customer support when you contact us.
• To process payments for optional paid plans.

We do not sell your personal information.

Voice and video calls and live broadcasts are routed through Cloudflare's real-time edge network. Call and broadcast media streams are ephemeral — Koligly does not record or store them unless a broadcast host explicitly enables recording for that session. Koligly-Talkie push-to-talk audio is transmitted the same way. Where a device pairs with a LoRa mesh radio for off-grid messaging, mesh text, location and SOS packets travel over the paired hardware's own radio link and are not routed through Koligly's servers.

Koligly's Personal Safety System — Guardian Mode, Journey Mode, the Panic Button and Trusted Contacts — only accesses live location and device battery/telemetry when you actively enable one of these features. That data is used solely to power the safety feature you turned on (for example, sharing your live position with a trusted contact, or dispatching an emergency alert), and is retained only as long as needed for that purpose or as you configure in Settings.

Email safety contacts. You may add an email address for someone who is not on Koligly. We send that address one request asking whether they agree, and nothing else until they say yes. If they confirm, a panic, missed check-in or possible-crash alert from you is emailed to them with the time and your last shared location, and each email has a link to stop. If they decline, they cannot be added again. Koligly does not contact emergency services.

Trusted contacts and alerts. Someone on Koligly must accept before they become your trusted contact, and can leave at any time. While an alert is active, your changing location is updated for the contacts you chose, who can confirm they are on it so you can see who is responding. Your cancel and duress codes are kept only on your phone as salted hashes and are never sent to us. Alerts and their locations are kept only as long as needed to show them to you and your contacts and for safety review.

Koligly Voice. When you tap to dictate, your device turns your speech into text while you can see that it is listening. We do not store the audio. If you choose "Email this to me", only the text you reviewed is sent, to the email address on your own account.

We rely on a small number of specialist infrastructure providers, each bound to process data only to deliver their specific service to Koligly:

• Supabase — database, authentication and file storage.
• Cloudflare — real-time SFU media routing for calls and broadcasts, and delivery of live shows and replays to large audiences.
• Payment providers — secure payment processing for paid plans, tips, tickets, memberships (including automatic monthly renewal, if you choose it) and purchases.
• Twilio and Firebase — SMS verification and push notifications.
• AI providers (OpenAI and Lovable's AI gateway) — when you tap a feature such as Translate, or use AI card writing or group summaries, the text you chose is sent to the provider to produce the result. It is not used to build advertising profiles, and we do not store it beyond showing you the result.
• Google — optional Google sign-in, and web fonts served from Google Fonts, which means Google can see your IP address when fonts load.

We do not share your data with advertisers or data brokers.

We keep your data only as long as your account is active or as needed to provide the service, comply with legal obligations, resolve disputes and enforce our agreements. We use industry-standard technical and organizational safeguards — encryption in transit, access controls and least-privilege database policies — to protect your information.

Opening quickly. To open instantly, Koligly keeps a copy of your recent chat list and the latest messages of your most recent chats on your own device. That copy is encrypted with a key that is created on the device and cannot be exported from it, is never sent anywhere, expires after seven days, and is erased when you sign out.

Live Talk. Words typed in a Live Talk room travel directly between the phones and are not saved on our servers. Two things can outlast a room: a line is only kept, on each phone, if both people choose to keep it; and the Official room posts each line to your chat as a normal message. A knock that nobody answers leaves one line in the chat saying so. Voice and video in a room travel directly between the phones too; the microphone and camera are only on while you have switched them on and are released when you leave.

Live peek. In a one-to-one chat you can switch on Live peek. Only while you and the other person have both switched it on and both have the chat open, each of you sees the other's words as they type them, before they are sent. What is typed travels encrypted and is not saved: only a message you actually send is stored, as usual. Either of you can switch it off at any time.

Depending on where you live, you have rights over your personal data under applicable data protection law, including the Nigeria Data Protection Act 2023 ("NDPA"). These include the right to access, correct, export (port) and delete your data, and to withdraw consent at any time. You can exercise most of these rights directly from Settings → Account, including permanently deleting your account and associated data, or by following the steps at koligly.com/delete-account. That page also lists what we keep after deletion and why. For anything Settings can't do, contact us using the details below and we'll act on your request within a reasonable time.

Koligly is not directed at children under 13, and we do not knowingly collect personal information from them. We ask everyone for a date of birth once. It is private, is not shown to anyone, and cannot be changed afterwards. If it shows someone is under 13 the app stops and offers to delete the account. If you believe a child under 13 has created an account, contact us and we'll remove it.

People aged 13 to 17 have extra protections: they are not listed in search, people they have not approved cannot message, call or knock on them, and they can report anything to us. A parent or guardian may link with a young person only if the young person accepts. The adult sees who the young person talks to and when that began, never messages, calls or location, and the young person can end the link at any time. Reports about a child in danger are reviewed first.

We may update this policy as Koligly evolves. We'll update the "Last updated" date above, and where a change is material we'll let you know in the app.

Questions about this policy or your data: privacy@koligly.com. Legal correspondence: legal@koligly.com.