Privacy Policy

What Data We Collect

We collect only the information necessary to provide, coordinate, and safeguard your household stay agreements and shared records:

• Account & Profile Information: Name, email address, profile avatar, and authentication identifiers through our secure authentication partner (Clerk).
• Phone Number & SMS Communication Data: Mobile phone number, delivery status timestamps, and message history for transactional coordination when you opt in.
• Household Stay & Agreement Details: Dates of stay, living agreements, room or space nicknames, house rules, quiet hours, and logistics (WiFi, door codes, trash schedules).
• Household Ledger & Contribution Records: Contribution amounts, dates, categories, notes, receipt images, and chore point redemptions. Note: Kouchd is an agreement and bookkeeping ledger; we do not store credit card numbers, process payments, or custody funds.
• Technical & Usage Telemetry: Browser type, operating system, IP address, and interaction timestamps necessary to prevent fraud and ensure platform reliability.

How We Use Your Data

Wrelik Brands LLC uses the collected data strictly for operational, non-marketing purposes:

• Household Coordination & Shared Records: Establishing mutual stay agreements, managing versioned terms, and maintaining partitioned household ledgers.
• Transactional SMS Notifications & Alerts: Delivering real-time stay alerts, chore due date reminders, check-in logistics, stay amendment requests, and ledger updates.
• Account Security & Fraud Prevention: Verifying user identity, safeguarding invite token hashes, and maintaining immutable audit logs of stay modifications.
• Customer Support: Responding to user inquiries, resolving technical issues, and maintaining system availability.

1. Scope and roles

This Privacy Policy explains how Wrelik Brands LLC ("Wrelik," "we," "us," or "our") collects, uses, discloses, and protects Personal Information when you visit our websites or use our applications and related services, including Kouchd, sporkd, Klutr, and DRX / Deelrx CRM (each an "App" and together, the "Services"). "Personal Information" means information that identifies, relates to, describes, or can reasonably be linked with an individual.

The app-specific addendum presented with this Privacy Policy describes practices unique to the App you use. If an app-specific addendum conflicts with the general portions of this Privacy Policy, the addendum controls for that App.

For consumer accounts, shared living arrangements, and our websites, Wrelik generally determines why and how Personal Information is processed as a data controller. Where an organization or group administrator coordinates managed living spaces, that administrator controls ordinary workspace membership, and Wrelik processes records to deliver the platform in accordance with account configurations and applicable law.

2. Information we collect (What Data We Collect)

Depending on the Service and the features you use, we may collect:

• Account and identity information: name, email address, profile avatar, authentication identifiers, household or stay membership, role (host, co-host, guest), account settings, and login or security events.
• Newsletter subscription information: email address and subscription preference when you choose to receive occasional Kouchd product and launch updates.
• Phone number and SMS communication data: mobile telephone number, carrier delivery timestamps, inbound/outbound SMS interaction records, verification tokens, and text messaging opt-in consent records when you provide a mobile number and consent to receive SMS notifications.
• Household stay and agreement details: stay dates, room or living space nicknames, house rules, quiet hours, household check-in logistics, WiFi credentials, trash schedules, stay terms, and mutual host-guest confirmation events.
• Household ledger and contribution records: bookkeeping entries, contribution amounts, dates, categories (e.g., groceries, utilities, supplies, repairs, off-platform cash transfers), notes, receipt images, and chore point redemptions. Note: Kouchd is an agreement and bookkeeping ledger; we do not store full payment card numbers, process payments, custody funds, or connect to bank accounts.
• Device, network, and usage information: IP address, browser or device type, operating system, app build version, language, pages or features visited, interaction timestamps, referring pages, session activity, and related technical metadata.
• Diagnostics and security telemetry: crash reports, error logs, performance traces, audit events, hashed invite tokens, suspected fraud or abuse signals, and records necessary to keep accounts, household data, and Services secure.
• Communications and support requests: support tickets, inquiries, feedback, survey responses, beta-testing feedback, and other messages you submit to our team.

3. How we use information (How We Use Your Data)

Wrelik Brands LLC uses Personal Information for operational purposes and for optional communications you request to:

• send occasional Kouchd product news and launch updates when you expressly subscribe to the website newsletter;
• provide, operate, maintain, synchronize, and support the Services across web and mobile platforms;
• authenticate users, administer accounts, safeguard session tokens, and enforce role-based stay access boundaries;
• coordinate shared household agreements, maintain bilateral ledger partitioning, and record mutual confirmations;
• deliver transactional communications, stay logistics, chore alerts, and requested SMS text notifications;
• personalize household settings and synchronize stay records securely across authorized devices;
• monitor platform reliability, diagnose system defects, measure feature performance, and prevent outages;
• protect hosts, guests, Wrelik, and the public from fraud, abuse, security breaches, and unauthorized access;
• comply with applicable laws, respond to legal process, enforce our agreements, and defend legal claims; and
• notify you regarding material changes to our Services, security notices, or legal policies.

4. Strict SMS privacy commitment & carrier compliance (A2P 10DLC)

Wrelik Brands LLC maintains strict privacy boundaries for mobile messaging:

We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes.

Text messaging originator opt-in data and consent are strictly excluded from any sharing with third parties, affiliates, or lead generators for marketing or promotional purposes. Any mobile phone numbers collected through our SMS consent forms, onboarding flows, or support workflows are used solely to deliver the relevant operational communications, account alerts, check-in logistics, and household coordination messages you specifically requested.

• Express consent: We require verifiable express opt-in consent before initiating SMS communications. Consent records include timestamp, user identity, phone number, and the specific opt-in medium.
• Opt-out (STOP): You can revoke SMS consent at any time by replying STOP, UNSUBSCRIBE, or QUIT to any text message from Kouchd. We will send a single confirmation text and immediately cease SMS delivery.
• Support (HELP): Reply HELP to any text message for instant support guidance, or email support@kouchd.com or support@wrelik.com.
• Rates and carriers: Message and data rates may apply depending on your mobile carrier plan. Message frequency varies based on household stay activity. Mobile wireless carriers are not liable for delayed or undelivered messages.

5. How we disclose information

We may disclose Personal Information only in the following limited circumstances:

• To infrastructure and service providers: that provide cloud hosting, databases, authentication, email communications, error monitoring, subscription management, and notification transport. Depending on configured features, these include Vercel (web hosting), Convex (reactive real-time database), Clerk (identity and authentication), Loops (Kouchd newsletter updates for people who subscribe), Twilio and Knock (transactional SMS and notification routing), Sentry (error diagnostics), PostHog (product analytics), and RevenueCat (Kouchd Plus subscriptions bought on the web or through the Apple App Store).
• Between stay participants per role permissions: household rules, shared stay logistics, chores, and announcements are visible to stay members. Bilateral financial ledgers, individual contribution records, rates, and balances are partitioned so that each guest's ledger is visible only to that specific guest and the host.
• To advertising partners, only with your permission: If you choose “Allow analytics and ads” in the cookie notice on kouchd.com, we use the Meta Pixel on kouchd.com and in the Kouchd web app, and may send sign-up and subscription events to Meta’s Conversions API, to measure and improve our ads. This may include a hashed email address, an advertising cookie identifier, and the event itself (for example, that you created an account). We never share SMS opt-in data, household details, agreements, or contribution records with advertising partners.
• For legal, compliance, and safety obligations: when reasonably necessary to comply with valid legal process, court orders, or government requests; protect safety, life, or property; investigate security incidents or fraud; or enforce our Terms.
• In a corporate restructuring or asset transfer: such as a financing, merger, acquisition, reorganization, or transfer of operational assets, under strict confidentiality and with advance notice where required by law.
• With professional legal and financial advisers: bound by strict confidentiality and professional ethical duties who require information to provide audit, legal, accounting, or security counsel.

6. Cookies, local storage, analytics, and preferences

Our websites and web applications use essential cookies, secure local storage, and similar technologies to maintain authenticated sessions, secure CSRF tokens, remember user interface preferences, and monitor system performance. On the Kouchd marketing website, the cookie choice you make is stored in local storage and copied to a first-party cookie that the Kouchd web app at app.kouchd.com can read.

On kouchd.com, Google Analytics 4 (measurement ID G-L668QY22EX) is loaded only after you choose Allow analytics in the cookie notice or have previously saved that choice. PostHog product analytics counts page views and clicks on kouchd.com without cookies or local storage until you choose, and also if you choose Only necessary. To count visits without storing anything on your device, PostHog combines your IP address and browser details into an anonymous identifier that changes every day; the IP address is not stored. After you choose Allow analytics, PostHog also keeps a visitor identifier shared with the Kouchd web app, so a visit and a later sign-up can be connected, and records session replays of your visit, and we keep the campaign details of your visit (such as UTM tags and ad click identifiers) in a first-party cookie for up to 90 days. That choice does not grant ad storage, ad user data, or ad personalization consent. You can change your choice using Cookie settings in the site footer. Required technologies remain available without analytics consent; disabling essential session cookies in the app may prevent you from logging in or maintaining a session.

We honor legally recognized opt-out preference signals, such as Global Privacy Control. When your browser sends Global Privacy Control, we treat it as an opt-out of advertising cookies and of sharing with advertising partners, and the Meta Pixel does not load. We do not sell personal data.

7. Data retention, cleanup, and deletion

We retain Personal Information only for as long as necessary to fulfill the purposes described in this Privacy Policy, including maintaining active household stays, preserving agreed mutual bookkeeping records, complying with legal or tax obligations, resolving disputes, and enforcing agreements.

When you request account deletion or when a stay concludes and is purged, we delete or de-identify personal records from active databases within 30 days. Limited residual records may temporarily persist in encrypted backups, security logs, or legally mandated records until regular backup cycles expire or legal holds are resolved.

Account deletion requests can be initiated directly within account settings or by emailing legal@wrelik.com or privacy@wrelik.com with the subject 'Account Deletion Request'.

8. Security and cryptographic protections

Wrelik employs comprehensive administrative, physical, and technical safeguards designed to protect Personal Information:

• Encryption in transit: All web traffic and API endpoints enforce TLS 1.3 encryption with strong modern cipher suites. Insecure HTTP connections automatically redirect to HTTPS.
• Encryption at rest: Cloud storage volumes, persistent database clusters, and system backups are encrypted at rest using AES-256 encryption.
• Cryptographic invite tokens: Stay invitation tokens are hashed using SHA-256 before storage in database indexes. Plaintext invite tokens are never stored at rest and expire after set validity windows.
• Multi-tenant and stay isolation: Database queries and mutation handlers enforce strict authorization scoping based on verified session identity and assigned household role.

9. Your privacy rights and choices

Depending on your jurisdiction, you may have statutory rights regarding your Personal Information, including the right to:

• Know and access the categories and specific pieces of Personal Information we hold about you;
• Correct inaccurate or incomplete Personal Information;
• Request deletion of your Personal Information, subject to statutory exceptions;
• Obtain a portable copy of your data in a structured, machine-readable format;
• Opt out of marketing communications or withdraw consent for optional SMS alerts at any time;
• Designate an authorized agent to exercise rights on your behalf; and
• Non-discrimination: We will never penalize or deny services to you for exercising statutory privacy rights.

10. U.S. state privacy disclosures

Residents of California (CCPA/CPRA), Colorado, Connecticut, Virginia, and other states with comprehensive consumer privacy laws are entitled to specific disclosures. During the preceding 12 months, we collected the categories of Personal Information described in Section 2: identifiers; customer record information; commercial transaction records; internet or electronic network activity; approximate geolocation (derived from IP address); and communications.

We do not sell personal information. If you allow advertising cookies, we share limited information with Meta for ad measurement, which some U.S. state laws treat as sharing for cross-context behavioral advertising; you can opt out at any time with Cookie settings (Your Privacy Choices), and we treat Global Privacy Control as an opt-out. We do not use sensitive personal information for inferring consumer characteristics and do not knowingly collect or sell personal information of minors under 16.

11. International data transfers

Wrelik Brands LLC is headquartered in the United States, and our cloud infrastructure providers operate primarily in the United States. If you access Kouchd from outside the United States, your information will be transferred to, stored, and processed in the United States, where privacy regulations may differ from your home country. We implement appropriate contractual and organizational safeguards to ensure lawful and protected data transfers.

12. Children's privacy

Kouchd is strictly intended for individuals who are at least 18 years of age. We do not knowingly solicit, collect, or process Personal Information from children under the age of 13 (or under 16 where required by law). If you believe a child has provided us with personal information, please contact legal@wrelik.com immediately so we can promptly investigate and delete the records.

13. Third-party links and external services

Kouchd may display payment handles, external payment links, or reference third-party tools (such as PayPal, Cash App, Zelle, or Apple Pay) provided by hosts to facilitate independent peer-to-peer settling of household expenses. Wrelik Brands LLC does not operate, control, or endorse third-party payment platforms, and their handling of your data is governed solely by their respective privacy policies.

14. Changes to this Privacy Policy

We may update this Privacy Policy periodically to reflect enhancements in Kouchd features, technological evolution, or changes in applicable law. When we update this Policy, we will revise the 'Effective Date' and 'Last updated' dates at the top. For material updates affecting your privacy rights, we will provide conspicuous notice through the application interface, email, or SMS prior to the effective date.

15. Contact and governance

For questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact our legal and privacy team:

Wrelik Brands LLC Attn: Privacy & Data Protection 1700 Northside Drive Atlanta, GA 30318, United States Email: legal@wrelik.com / privacy@wrelik.com Support: support@kouchd.com