Privacy policy
Last updated 26 September 2026
This explains what Ketta collects, why, and what you can do about it.
What we collect
- Account: your name, phone number, birth year, and the Apple, Google or Facebook account you sign in with.
- Location: where you are when you drop, collect, or look for drops nearby. We keep the position of each drop and collection, and only your latest position otherwise, to prevent location spoofing.
- What you drop: photos, videos, links and captions. Photos and videos are stripped of their metadata (including GPS) on your phone and again on our servers.
- Contacts: if you let the app read your contacts, their phone numbers are sent to us to check which are on Ketta. We don't store them. Numbers you leave private drops for are kept as a keyed hash until that person joins. Hashing phone numbers isn't strong protection on its own, so we also limit how often numbers can be checked.
- Device: a notification token, if you allow notifications.
Who sees what
Anyone can see roughly where a public drop is (within about 20 m) and who left it, but not its content until they collect it by walking there. Private drops are only visible to the people you choose. Blocking someone hides your drops from each other.
Services we use
Amazon Web Services (hosting, storage and image moderation), Twilio (phone verification codes), Apple (notifications), Google (maps and link safety checks). We don't sell your data or show ads.
Your rights
Download everything we hold about you (Settings → Export my data), and delete your account and everything in it (Settings → Delete account). Deletion is immediate and permanent. Under UK and EU law you can also ask us to correct your data or object to how we use it.
Legal basis
We process your data to provide the service you signed up for (contract), and to keep people safe and prevent abuse (legitimate interests).