Privacy policy

Effective 31 October 2026. Kiribati Connect is operated by Taimware (Taimwe Romita). Contact: romitat924@gmail.com.

Information we use

We collect your email, display name, password hash, session identifiers, listings, images, links, comments, blocks and safety reports to run your account and community features. Your selected island is supplied by you; we do not request GPS location, contacts, microphone or camera access. Images are selected by you and resized before upload.

Public content

Your display name, listings, uploaded listing images, links and comments are public. Do not post private identity, financial or contact information you do not want public. Blocking affects signed-in views; public content remains accessible to others and may have been cached.

Payments

PayPal processes website payments. The Android app uses Google Play Billing. We store transaction references, purchase tokens and entitlement status to verify payments, prevent replay and provide paid access. We do not receive your full payment card details. Listing payments and Kiri membership are separate.

Kiri and AI

Kiri messages, recent conversation context and a limited public listing sample are processed by Cloudflare Workers AI. Automated safety checks also process messages and responses. Regular chat content stays in page memory and is not saved by this app or used by this app to train a model. If you report a Kiri response, that response and your report details are saved for review. Do not send sensitive information. Cloudflare processes data under its own service terms and retention policies.

Service providers and security

Cloudflare hosts the app, database, images and AI. Google processes Android purchases and Play distribution. PayPal processes website purchases. Data may be processed outside Kiribati and Australia. Connections use HTTPS; passwords are salted and hashed. Operational logs, IP-based rate limits and payment records support reliability and fraud prevention. No advertising or analytics SDK is included.

Retention and deletion

Use Account → Delete account or the deletion page to permanently remove your login identity, listing content, images and comments from the active service. A minimal anonymous account marker and payment transaction references may be retained for accounting, fraud and dispute handling for up to seven years. Safety reports are retained for up to 90 days; necessary investigations or legal retention may last longer. Provider backups and operational records can persist until their retention expires. Saved copies on other devices are removed only when those devices reconnect or clear their cache.

Your choices

You can edit, archive or delete listings; remove your comments; block members; report content; and delete your account. Account deletion does not automatically refund completed payments. Contact us for privacy, refund or access requests. Accounts are intended for people aged 16 and above.