Privacy policy

For the Kistly app · Last updated 19 October 2026

This policy explains what information the Kistly app handles and how. Kistly is published by Spikewave Pty Ltd (spikewave.tech).

Summary

Your data is used only to run the app’s features. It is never sold, never used for advertising and we run no analytics of our own.

Information the app collects

Where it is stored

Everything Kistly stores — your sites, boxes, items, photos and backups — stays in the app's private storage on your phone. Your location, photos and files are used there and never transmitted, so Kistly does not collect them. There is no account and no Spikewave server. Backups and exports leave the phone only when you share them yourself. Map tiles for placing a site are loaded from OpenStreetMap over HTTPS, which sees the map area being shown, never your inventory. If you type a site's address to find it, that address is passed to Android's built-in geocoder — on most phones provided by Google — to turn it into a map position; placing the pin by hand or using your current position skips this.

Device permissions

Kistly requests the following permissions, and only for the reasons given:

• Location (all the time) — To prompt you when you arrive at or leave a storage site you set up, even with the app closed. Optional — manual check-in and check-out do the same job.
• Camera — To photograph items and boxes, and to scan QR labels.
• Microphone — For speaking an item's name instead of typing it. Your phone turns speech into text; the audio is never stored.
• Notifications — For arrival and departure prompts and your reminders.

Service providers

These third parties process data on our behalf, only to make the app work:

• Google Play Billing — Processes the optional one-time unlock, only once it is available and only if you buy it. Kistly never sees your payment details — Google tells the app only whether the purchase was made. Nothing can be bought during the free launch. Privacy policy
• OpenStreetMap — Supplies the map tiles when you place a storage site; it receives tile requests, not your inventory. Privacy policy
• Google ML Kit — Reads QR labels on your phone; the camera image never leaves it, but ML Kit sends Google technical diagnostics (device and app details, performance, an installation identifier). Privacy policy
• Your phone's geocoder (usually Google) — Turns an address you type for a storage site into a map position; it receives that address only, and only when you look one up. Privacy policy

Advertising and analytics

We do not share your data with advertisers and the app contains no advertising SDKs. It contains no crash-reporting or analytics software of its own, and we run no analytics. Google ML Kit, which reads QR labels, sends Google technical diagnostics and usage analytics when you scan one — see the service providers above.

Security

All data sent between the app and our services is encrypted in transit using HTTPS/TLS.

Deleting your data

Delete sites, boxes or items in the app; uninstalling removes everything, because none of it exists anywhere but your phone (and any backup files you saved yourself).

You can also email kistly@spikewave.tech and we will delete it for you.

Your rights

Under the Protection of Personal Information Act (POPIA) in South Africa — and under the GDPR if you are in the EU or UK — you may ask us to confirm what personal information we hold about you, correct it, or delete it. Write to kistly@spikewave.tech and we will respond within 30 days.

Children

Kistly is not directed at children and we do not knowingly collect information from anyone under 13 (or the relevant age of digital consent in your region).

Changes to this policy

We update this page whenever what the app collects changes, and note the revision date at the top.

Contact

Spikewave Pty Ltd
Registration number 2026/658861/07
Johannesburg, Gauteng, 2090
South Africa
kistly@spikewave.tech