Privacy Policy
Effective October 2, 2026
Kongi is a shopping app. We use what you tell us and what you do in the app to run your account, ship your orders, pay you credit, show you products you'll like and keep the program fair. Brands never get your identity from ads, only totals. We don't sell your personal information.
Who we are
This policy covers the Kongi app and kongi.co, operated by NimbleFig LLC ("Kongi", "we", "us"). Kongi is available in the United States and Canada. Questions: privacy@kongi.co.
What we collect
What you give us
- Account: your name, email address, phone number and password. Your password is stored by our sign-in provider as a protected hash; we never see it.
- Addresses: the shipping addresses you save, and a billing address if you add a card.
- Payment: card or digital wallet details are handled by our payment processor. We keep only the card brand and last four digits.
- Contacts: if you allow access, the names and phone numbers in your contacts, to show which of your friends are on Kongi and who you've invited. We never message your contacts; invites are texts you send yourself.
- Support and invites: messages you send us, and who you invite and whether they join.
- Reviews: the rating and words of reviews you write. They're public: shown in the app and on kongi.co with your first name and last initial, and marked as a verified purchase.
What we collect when you use Kongi
- Shopping activity: products you view and for how long, searches, items in your bag, orders, returns, and products you hide or mark not interested.
- Sponsored products: which sponsored products were shown to you, which you opened, and whether a view qualified for credit.
- Credit: the credit you receive, use and get back, and any invites and promo codes you use.
- Device: IP address, device model, operating system, app version, and a token used to send you notifications.
- Settings: your notification choices.
- Usage and session recordings: the pages and screens you view, what you tap and click, errors and crashes, and recordings of your sessions in the app and on kongi.co. In app recordings, what you type into fields is hidden.
- Visiting kongi.co: your IP address, browser and the pages you view, even if you don't have an account.
We don't collect your precise location. When you search for an address, your phone's built-in maps service looks it up on your device.
What we get from others
- Sign-in providers: if you sign in with another account, the name and email you choose to share (which may be a relay email).
- Payment processors: whether a payment succeeded.
- Brands: shipping and delivery updates for your orders.
How we use it
- To run Kongi: create your account, take payments, send orders to brands, handle returns and refunds, and answer support requests.
- To pay credit: measure when you take a real look at a sponsored product, add credit to your balance, and apply it when you choose to at checkout.
- To keep it fair: detect fake accounts, automated or repeated tapping, and other abuse. This uses automated systems that can lower, withhold or reverse credit, or pause an account. You can ask us to review any decision at privacy@kongi.co.
- To personalize: choose your feed, recommendations and which sponsored products you see, based on your activity.
- To show sponsored products: brands pay to place their products in Kongi. They receive only combined numbers, like how many people saw or bought a product, never who you are.
- To improve Kongi: understand how people use Kongi, and find and fix bugs and crashes, including by watching session recordings.
- To contact you: order updates, account and security messages, and, if you opt in, news and offers.
- For safety and the law: protect our users and Kongi, and meet legal, tax and accounting obligations.
Who we share it with
- Brands you buy from: your name, shipping address and the items you ordered, so they can ship them.
- Brands' online stores, before you buy: to show what shipping costs, your ZIP or postal code, state or province and country, and the items in your bag. Not your name or street address.
- Third-party service providers that work for us under contract: for hosting, networking and security, sign-in and verification texts, notifications, payments, email, and analytics and session recording. They may use your information only to provide those services to us.
- The law: when required by law or to protect rights and safety.
- A new owner: if Kongi is merged or sold, your information would move with it under this policy.
We don't sell your personal information, and we don't share it with others for advertising outside Kongi.
How long we keep it
We keep your information for as long as we need it for the purposes described in this policy, and then we delete it or make it anonymous. How long that is depends on the kind of information.
We keep your account information, saved addresses, settings and the reviews you write until you delete your account. If you share your contacts, we replace them each time you open invites and delete them along with your account.
We keep your shopping activity, usage information and sponsored-product activity for up to 24 months. Session recordings are kept for up to 30 days. Support messages are kept for two years after the conversation ends.
We keep records of orders, payments and credit transactions for seven years, because tax and accounting laws require it, even after you delete your account.
Your choices and rights
- See or get a copy: email privacy@kongi.co
- Correct: update your details in Settings > Account.
- Contacts: turn off Kongi's access in your iPhone's Settings; email us and we'll delete the contacts you've shared.
- Delete: Settings > Account > Delete account. We delete your account and personal information, except what we must keep by law (like order records), which we separate from your identity where we can.
- Notifications and email: choose what we send in Settings > Notifications.
US residents. Depending on your state (including California, Colorado, Connecticut, Virginia and others), you can ask to know, access, correct or delete your personal information, and opt out of its sale, sharing for targeted advertising or profiling. We don't sell it or share it for targeted advertising. We won't treat you differently for using these rights. You can use an authorized agent, and if we decline a request you can appeal by replying to our answer.
Canadian residents. You can access and correct your personal information and withdraw consent, subject to legal limits. Residents of Quebec can also ask how an automated decision about them was made and have it reviewed by a person.
Email privacy@kongi.co to make any request. We'll verify it's you, usually with a code sent to your phone, and reply within 30 days (45 where state law allows).
Where your information is stored
We store and process information in the United States. If you're in Canada, your information is transferred to the US and may be accessed there under US law.
Security
We encrypt information in transit, limit who can access it, and use sign-in codes and fraud checks to protect accounts. No system is perfectly secure, so please keep your phone and password safe.
Children
Kongi is for people 13 and older; anyone under 18 needs a parent or guardian's permission. We don't knowingly collect information from children under 13. If you think a child under 13 has an account, contact us and we'll delete it.
Changes
If we change this policy, we'll update the date above and, for important changes, tell you in the app before they take effect.
Contact
privacy@kongi.co · NimbleFig LLC