Last updated: 2 August 2026
Want to delete your account and data? See how to delete your KerbNab account — you can do it yourself in the app, or request it by email.
This Privacy Policy explains how KerbNab ("KerbNab", "we", "us" or "our") collects, uses, stores and discloses your personal information when you use the KerbNab mobile application (the "App"). KerbNab is operated by Billy, an independent sole developer based in Australia (not a company). We are committed to handling your personal information in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).
By using the App, you agree to the collection and use of your information as described in this policy.
1. Information we collect
We only collect information that's needed to run the App and provide its features. This includes:
| Information | Why we collect it |
|---|---|
| Account & identity | Most people sign in with a username and password. You can also use Sign in with Apple or Sign in with Google, which give us a unique identifier and basic profile details — your name and email address (or, with Sign in with Apple, an Apple private-relay email if you choose to hide yours). We store your email address, the username you choose, an optional profile photo, and your password in a securely hashed form — we never see or store your password as readable text. If you forget it, we email a one-time reset code to your email address. |
| Location | To show kerbside items and collection days near you on the map, to measure how far away an item is, and to attach a drop location to finds you post. The location you attach to a post is stored and shown publicly so other people can find the item. If you subscribe to KerbNab Pro and turn on nearby-find alerts, we also save the alert location you choose to your profile, so we can tell you when something is posted near it. You can change it whenever you like, and turning the alerts off erases it. We do not track your location in the background — only when you use a location feature. You control location access through your device settings. |
| Photos | Photos you choose to upload when posting a find, sending a photo in a chat, or setting a profile picture. |
| Device & push tokens | A push notification token and basic device/platform details (for example, whether you're on iPhone or Android), used to deliver notifications such as new messages or nearby-find alerts. |
| Content you create | Posts (photos, title, description, category and condition), comments and replies, private messages to other users, saved items, likes, who you follow, and the status signals or claims you make on items. |
| Preferences | Your onboarding answers (what you're interested in and how far you'll travel) and your notification settings. |
| Technical & usage data | Standard server logs (such as request times and errors) needed to operate, secure and improve the service. These logs record which page or feature was requested, but not the coordinates behind it. |
We do not collect or store your payment card details. Subscription payments are processed by Apple through the App Store on iPhone and iPad, and by Google through Google Play on Android (see "Third-party services" below).
2. How we use your information
- To create and manage your account and sign you in.
- To show you relevant kerbside finds, collection schedules and map results near you.
- To let you post finds, comment, save items, like posts, follow other members, signal item status, and message other users.
- To send notifications you've enabled (such as messages, item activity, and Pro nearby alerts).
- To operate KerbNab Pro subscriptions and unlock Pro features for subscribers.
- To keep the community safe — including handling blocks, reports and removing prohibited content.
- To maintain, troubleshoot and improve the App.
We do not sell your personal information, and we do not use it for third-party advertising.
3. What is shown publicly
Other users of the App can see your username, your profile photo, the items you post — including their photos, titles, descriptions and locations — the comments you leave, the posts you like, and the status signals on items. Your email address is never shown to other users.
Where an item is being given away from a home address rather than left on the kerb, the map shows only an approximate, suburb-level position — not your exact address. The precise spot is only shared if you choose to share it in chat when arranging pickup.
The text of private messages is visible only to you and the person you're messaging. Please note that photos sent in a chat are stored with a public web address: they aren't listed or searchable anywhere, but anyone who has the link to an image can open it. Treat photos you send in chat as you would anything else you share online.
4. Third-party services
KerbNab relies on a small number of trusted service providers to operate. Each handles your information only as needed to provide its part of the service, and under its own privacy policy:
| Provider | Purpose |
|---|---|
| Supabase | Database, account authentication (including your hashed password), and secure storage of uploaded photos. |
| Railway | Hosting for the KerbNab server that the App talks to. |
| Apple | Sign in with Apple; subscription payments through the App Store; and the Apple Push Notification service, which delivers notifications to iPhones. |
| Sign in with Google; subscription payments through Google Play; Google Maps, which draws the map inside the App; and Firebase Cloud Messaging, which delivers notifications to Android devices. | |
| RevenueCat | Management of KerbNab Pro subscriptions and entitlements. We give RevenueCat your account identifier and your email address, so a subscription can be matched to the right account across devices and so we can help you if something goes wrong with a purchase. |
| Expo | Delivery of push notifications to your device. The text of a notification — for example, the first line of a new message and the sender's username — passes through Expo's service and Apple's or Google's push network on its way to your phone. |
| Photon / OpenStreetMap | Address lookup. When you type an address while posting a find, the text you type is sent to Photon — a free public address-search service run by Komoot GmbH in Germany, using OpenStreetMap data — to fetch matching suggestions. We deliberately send only the text: your location is never included in that request, and nothing in it identifies you or your account. |
We share with these providers only the information necessary for them to perform their function — for example, a subscription event and your email address to RevenueCat, or a push token and the notification text to Expo. With the exception of Photon (a free public service, which we use precisely because we can send it nothing that identifies you), these providers act on our instructions and are not permitted to use your information for their own purposes. We do not sell your personal information, and we do not use it for third-party advertising. We may also disclose information if required by law. We encourage you to review their privacy policies for details on how they handle data.
5. How your information is stored and protected
Your information is stored in secure, access-controlled databases and storage operated by our service providers. Connections to our backend are encrypted in transit, and our database is locked down so it can only be accessed through our application's controlled interface. While no method of storage or transmission is completely secure, we take reasonable steps to protect your personal information from misuse, loss, and unauthorised access.
6. Where your information is held
Some of our service providers may store or process information on servers located outside Australia. Where this occurs, we take reasonable steps to ensure your information continues to be handled consistently with this policy and the Australian Privacy Principles.
7. Data retention
We keep your personal information for as long as your account is active or as needed to provide the App. When you delete your account, we delete your associated personal data as described below. We may retain limited information where required to comply with legal obligations or to resolve disputes.
8. Your rights and choices
- Delete your account and data: You can permanently delete your account, and the personal data associated with it, at any time from within the App (Profile → Delete account). This removes your profile, posts, uploaded photos, saved items, preferences and push tokens. Some content may be retained in an anonymised form (for example, a past chat may show "Deleted user") so that other users' conversation history remains intact.
- Access and correction: You can view and update your profile details in the App. You may also contact us to request access to, or correction of, the personal information we hold about you.
- Location and notifications: You can turn location access and push notifications on or off at any time through your device settings. If you've turned on Pro nearby-find alerts, you can change the saved alert location at any time in the App's notification settings; turning the alerts off erases it, and so does deleting your account.
- Complaints: If you have a concern about how we've handled your information, contact us using the details below. If you're not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
9. KerbNab Pro and subscription data
If you subscribe to KerbNab Pro, we (via RevenueCat, and via Apple's App Store or Google Play depending on your device) receive information about your subscription status — such as whether your subscription is active, which plan you're on, and when it renews or expires — so we can unlock Pro features for you. We do not receive or store your payment card details: those stay with Apple or Google. See our Terms of Service for the subscription terms.
10. Children's privacy
KerbNab is not directed at children. You must be at least 16 years old to create an account. We do not knowingly collect personal information from children under this age. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.
11. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we'll revise the "Last updated" date at the top of this page. Significant changes may also be communicated within the App. Your continued use of the App after an update means you accept the revised policy.
12. Contact us
If you have any questions, requests or concerns about this Privacy Policy or your personal information, please contact:
KerbNab — Billy
Email: kerbnab@gmail.com
Australia
This policy is governed by the laws of Victoria, Australia.