Privacy Policy
Last updated: 18 September 2026 · Effective for the Kamao website, brand dashboard, and mobile apps (including Google Play and Apple App Store listings).
This policy explains what personal data Kamao collects, why we collect it, how we share it, how long we keep it, and how you can access or delete it. It is written to meet Google Play User Data and Apple App Store privacy / account-deletion disclosure requirements.
1. Who we are
Kamao is operated by Aayusofttech (“we”, “us”). We provide a creator-commerce platform: brands run campaigns, and creators submit social content to earn rewards.
Operator website: aayusofttech.com.np. Privacy and account requests: use Delete Account or Contact / demo.
2. Scope
This policy covers:
- The Kamao mobile application distributed on Google Play and the App Store
- The Kamao website and brand / admin dashboard
- Related APIs used by the app
It does not control Instagram, TikTok, or other social networks where you publish content, or payment providers such as Khalti. Those services have their own policies.
3. Data we collect
We collect only what is needed to run accounts, campaigns, submissions, and payouts.
Account and profile. Name, email, password (stored hashed), tenant / workspace, optional avatar, optional age confirmation when a minimum age is configured, role (creator, brand, staff).
Creator activity. Campaign joins, post submissions, captions/hashtags you provide, receipt or purchase-proof files when a campaign requires them, performance metrics we receive from connected platforms, wallet balances, withdrawal requests, and payout method details you save (for example bank or Khalti identifiers).
Social connections. When you connect Instagram, TikTok, or similar platforms we receive tokens and profile identifiers needed to verify posts. Access tokens are stored on our servers, not in a way that lets other users impersonate you.
Brand activity (web). Brand profile, campaign settings, wallet funding records, and review decisions.
Device and app technical data. Approximate device/app version as sent with API requests, authentication tokens on the device, IP address and logs for security and fraud prevention. We do not sell advertising IDs. We do not use your data to run third-party ads across other apps.
Support and demo requests. Messages, contact details, and related tickets (including account-deletion requests).
We do not require precise GPS location, contacts, or SMS. If a future OS permission is requested, the in-app purpose string will match this policy.
4. Why we use data (legal bases)
- Provide the service you asked for (account, campaigns, wallet, withdrawals)
- Verify UGC against campaign rules and connected social accounts
- Process payouts and keep financial records
- Secure the service, prevent fraud and abuse
- Respond to support, demo, and deletion requests
- Comply with law (tax, accounting, lawful requests)
- Improve product reliability using aggregated or de-identified metrics
5. How we share data
We do not sell personal data. We share it only with:
- Social platforms you connect (Meta / Instagram, TikTok, and similar) so we can complete OAuth and verify eligible posts
- Payment providers such as Khalti, and banks or payout rails you choose, to move campaign funds and creator withdrawals
- Infrastructure and support tools (hosting, email, our CRM inbound for support / demo / deletion tickets)
- The brand that runs a campaign you join, to the extent needed to review submissions and pay rewards (they see your creator identity and content you submit)
- Authorities when required by applicable law
Staff access is limited to people who operate the platform.
6. International processing
Kamao is operated from Nepal and may use processors in other countries. If you use the app from elsewhere, your data may be processed in Nepal and in those processor locations under this policy.
7. Retention
We keep account and activity data while your account is open. After a verified deletion request we delete or anonymize personal data within 30 days, except records we must keep for legal, tax, accounting, dispute, or fraud-prevention purposes (for example completed payout ledgers). Published posts on Instagram or TikTok remain on those platforms; we cannot delete them for you.
8. Security
We use HTTPS in production, hashed passwords, and role-based access. No method of transmission or storage is 100% secure. Keep your password confidential and log out of shared devices.
9. Children
Kamao is not directed at children under 13, and we do not knowingly collect personal data from children under 13. Where the host configures a higher minimum age, we collect only a confirmation that you meet that age. If you believe a child has created an account, submit a deletion request. Our public Child Safety Standards (required for Google Play UGC apps) are at /child-safety.
10. Your rights
Subject to applicable law, you may request access, correction, or deletion of personal data we hold, and you may disconnect social accounts in the app. To delete your account and associated personal data, use the Delete Account request form (this URL is also the web destination for Google Play and App Store data-deletion). We may need to verify that you control the email on the account.
11. Cookies and similar technologies (website)
The website uses cookies or similar storage that are necessary to keep you signed in and to protect forms (anti-forgery). We do not use them to run third-party advertising networks on the marketing site.
12. Google Play Data safety and Apple privacy labels
For store listings we declare collection of account information, user content (photos/videos and related metadata you submit), identifiers needed for login, and financial information related to wallets and payouts. Data is used for app functionality, account management, and fraud prevention. It is not used for third-party advertising. Account creation is optional only in the sense that you can browse public marketing pages without an account; the creator mobile app requires an account to use core features.
13. Changes
We may update this policy. The “Last updated” date will change. Material changes that affect how we use personal data will be reflected on this page before they take effect for new collection.
14. Contact
Aayusofttech — Kamao privacy. Web: aayusofttech.com.np. Deletion: /delete-account. Other enquiries: /book-demo.