Privacy Policy

Last updated: 30 September 2026. Operator: Kurdography, Kurdistan Region, Iraq. Contact: [email protected]. Applies to kurdography.com and the Kurdography app for Android and iOS.

What we collect

• Your account: first and last name, email address, phone number, country, and your password (stored only as a salted hash).
• Your profile: your public name, photo, bio, city, gender and links, only the ones you fill in.
• What you post: posts, stories, reels, highlights, trade ideas, comments, likes, follows, channel posts and direct messages.
• Trading accounts you connect (optional): the MetaTrader 5 login, server and password (stored encrypted with AES-256-GCM, never shown back and never logged), and the account's balance, equity and trade history.
• Notifications (app): a device token from Google Firebase Cloud Messaging, and the language your notifications are written in.
• Security records: sign-in activity and recorded account actions, with the browser or app name and the IP address they came from, used to keep accounts safe and stop abuse.

Camera and microphone

The app uses the camera and microphone only while you have its camera open to take a photo or record a video. Nothing is recorded at any other time, and what you take is uploaded only when you post it.

What other people see

When you first sign in, you join the Community with a public profile showing your first name and the initial of your last name. In Settings > Privacy you choose what else your profile shows, whether others can see your followers and the people you follow, or to make your profile private. Direct messages, reports and your trading account credentials are never public. A trading account's results are public only if you publish them.

Who processes data for us

We do not sell your data or share it for advertising. These services process data only to run Kurdography:

• Cloudflare carries traffic to and from our servers.
• Brevo sends our emails (verification, password reset).
• Google Firebase Cloud Messaging delivers the app's notifications. A notification says who did what (for example "Karo liked your post"), never the text of a message.
• Google Gemini writes optional analysis from numeric account figures only, never a password, account number or server name.

How long we keep it

While your account exists. When your account is deleted, your personal data and content are removed, except records we must keep for security, for the fairness of past tournaments, or by law.

Deleting your account

In the app or on the website: Settings > Delete account. Or on this page: kurdography.com/delete-account. We review each request and complete it within 30 days.

Your rights

You can see and correct your data in Settings, download your trading data, and ask us to delete your account. Write to [email protected].

Children

Kurdography is for adults (18 and over). We do not knowingly collect data from children.

Changes

We post any change on this page and update the date above.