KRUNK PTY LTD — PRIVACY POLICY

ACN 601 756 914   |   Published at: https://www.krunk.com/privacy-policy/   |   Last Updated: 24.09.26

Privacy Policy

This Privacy Policy (Policy) describes how KRUNK Pty Ltd ACN 601 756 914 and its affiliates (KRUNK, we or us) collect, use and disclose your Personal Information when you visit https://www.krunk.com/ (Website) or use our mobile application (App). Any capitalised terms used in this Policy that are not defined here have the meaning given in the KRUNK Terms & Conditions, available on our Website and in our App.

1. Commitment to privacy

a. KRUNK is bound by the Australian Privacy Principles contained in the Privacy Act 1988 (Cth), and by any other privacy legislation that applies in the jurisdiction in which you use our Website or App (Applicable Laws).
b. The object of the Australian Privacy Principles is to protect the confidentiality of personal information and the privacy of individuals by regulating the way personal information is managed through our Website and App. This Policy applies to all products, services, App and Website offered by KRUNK (collectively, Services) accessed by you.

2. What is “Personal Information”?

a. The Privacy Act defines “Personal Information” as information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether or not the information or opinion is true, and whether or not it is recorded in a material form.
b. If information does not disclose your identity or enable your identity to be ascertained, in most cases it will not be classified as Personal Information and will not be subject to this Policy.
c. KRUNK is committed to protecting the Personal Information it collects and regularly monitors its systems and procedures to ensure compliance with the Australian Privacy Principles and this Policy.
d. We are not responsible for the privacy practices of any third-party websites that may be linked to our Services.

3. What information do we collect and why?

a. The Personal Information we collect and hold about you depends on your interaction with us. When you use the Services, we collect, use and hold your Personal Information where it is reasonably necessary for, or directly related to, the performance of our functions and activities.
b. Use of the Services may result in collection of device information, including: (A) the type and version of your web browser, your operating system, IP address, time zone, cookie information, the pages or products you view, search terms, and how you interact with the Services, and your location; (B) collected to load the Services accurately for you and to perform analytics to optimise the Services; and (C) collected automatically when you access our Services, including through cookies.
c. We also collect Personal Information that is reasonably necessary for, or directly related to, the functions of the Services.
d. The Personal Information we collect may include: your name; your address; your date of birth; your email address; your location; your phone number; photographic identification; and any other information you provide through the Services or that we receive from a third party.
e. We collect your Personal Information for the purposes of:
i. suggesting events and interests located near you, or near an advertiser;
ii. using your location data to suggest people to follow nearby, recommended activities in your area, and like-minded people to meet up with in your area or at a specific location;
iii. providing you with promotional material and information that may be of interest to you;
iv. advertising purposes, including personalising and delivering advertisements based on your interests, behaviours and location, on our platform and through third-party advertising platforms. We do not sell your Personal Information. Where advertising is delivered through third-party platforms, we do so in a manner consistent with Section 9 of this Policy and with the requirements of the app marketplaces through which the App is distributed;
v. facilitating our internal business operations, including meeting legal requirements; and
vi. analysing our products, services and customer needs with a view to developing new or improved products and services.
f. By using our Services, you consent to receiving direct marketing material. We will only use your Personal Information for this purpose where we have collected it directly from you, and where the material is of a type you would reasonably expect to receive from us. Our direct marketing will always include a simple means to opt out. You may request removal of your Personal Information from our marketing database at any time and we will comply in accordance with Applicable Laws.

4. How we collect your Personal Information

a. We collect Personal Information from you whenever you input it through our Services or a connected interface.
b. Personal Information is generally collected directly from you through our standard forms, over the internet when you access the Services, by email, or through a telephone or in-person conversation. In some instances we may collect Personal Information about you indirectly where it is unreasonable or impractical to collect it directly from you; we will notify you of these instances in advance or, where that is not possible, as soon as reasonably practicable afterwards, and will handle that information in accordance with this Policy.
c. If the Personal Information you provide is incomplete or inaccurate, we may be unable to provide you (or someone you know) with the products or services being sought.
d. You may choose to deal with us anonymously or by using a pseudonym, although this may affect our ability to provide the Services you are seeking.

5. Website, App, cookies & beacons

a. The Services may contain links to other websites not owned or controlled by us. These links are provided for your convenience only and do not constitute endorsement. KRUNK is not responsible for the privacy practices of other websites; we encourage you to read the privacy statement of any platform you visit.
b. Our Services may use web beacons (clear gifs) — small pieces of code placed on a page to monitor behaviour and collect data about visitors, for example to count visitors or deliver a cookie.
c. We collect Personal Information via cookies from your device to identify when you use the Services and to help customise your experience. As a general rule you cannot be personally identified from our use of cookies, but a cookie may link back to a database record about you.
d. A cookie is a small amount of information downloaded to your device when you use our Services. We use functional, performance, advertising, and social media / content cookies. Cookies remember your actions and preferences so you do not have to re-enter information each time.
e. You can control and manage cookies in various ways. Removing or blocking cookies can negatively affect your experience and parts of the Services may become inaccessible.
f. Most browsers accept cookies automatically, but you can choose whether to accept them through your browser controls. Information about managing cookies is available in your browser’s help file or at www.allaboutcookies.org.
g. Blocking cookies may not completely prevent how we share information with third parties such as our advertising partners.
h. We use Google Analytics to understand how customers use the Website. You can read how Google uses your information at https://policies.google.com/privacy and opt out at https://tools.google.com/dlpage/gaoptout.
i. You can opt out of targeted advertising through Facebook (facebook.com/settings/?tab=ads), Google (google.com/settings/ads/anonymous), and the Digital Advertising Alliance’s opt-out portal (optout.aboutads.info).

6. Use, disclosure and location data

a. KRUNK uses your Personal Information for the primary purpose for which it was collected, which generally includes suggesting events and interests near you, and using your location data to suggest people to follow, recommended activities, and like-minded people to meet up with in your area.
b. We may also use your Personal Information to: provide updated product or safety information; send you material about our activities and products that we believe may interest you (with your consent where you are a subscriber); show other KRUNK users your approximate location on a map to assist with meet-ups; respond to your requests and manage your account; resolve problems; plan and arrange meetings between you and other users; generate customer lists for market research; verify your age or identity as needed to provide the Services safely and lawfully; improve our products and Services; de-identify your information; protect someone’s health, safety or welfare; comply with a law, regulation, court order or other legal requirement; and undertake other activities for which you have consented.
c. Location data. Location is central to how the Services work. Before we access your device location, the App presents an in-app disclosure describing what location data is collected, when it is collected, and how it is used and shared, and we ask for your consent through a clear, affirmative action. You can withdraw location permission at any time through your device settings, though doing so will limit map, discovery and meet-up features. We collect location only while you are using the App unless we separately disclose and obtain your consent to any background collection.
d. We will only use or disclose your Personal Information for a purpose that was not the primary purpose of collection where we are required, authorised or permitted to do so by law or a court or tribunal order.
e. We may disclose Personal Information: to our related companies and affiliates; to third-party service providers engaged by us to perform services for us or on our behalf; where authorised or required by law or permitted under the Australian Privacy Principles or Applicable Laws; and where you have expressly consented.
f. You represent and warrant that you have permission to share any information you provide to KRUNK, that you consent to such information being shared with third parties as described in this Policy, and that the information is accurate, current, non-misleading and relevant for the purpose for which you provide it.

7. Disclaimer

a. KRUNK makes no representation and assumes no responsibility for the accuracy of information available through our Services, and such information is subject to change without notice.
b. You are encouraged to confirm any information obtained from our Services with other sources.

8. Cross-border data transfer

a. We may disclose your Personal Information — including information that may identify your geographic location — to a KRUNK company or affiliate, or to our databases overseas. When disclosing Personal Information offshore, KRUNK takes steps to ensure the use and disclosure of the transferred information is dealt with in accordance with this Policy and the requirements of the relevant law in the relevant jurisdictions.
b. By providing KRUNK with your Personal Information, you consent to the transfer, storage and processing of your Personal Information in other countries. You acknowledge that where we rely on your consent, your Personal Information may not receive the same protection as under Australian privacy law.

9. Data hosting and transfer to third parties

a. KRUNK processes and stores its data, including Personal Information, on secure cloud servers operated by Amazon Web Services. We may transfer data to third-party service providers. By submitting Personal Information or otherwise using the Services, you agree to this transfer, storage and processing. You acknowledge that your Personal Information may be accessible to law-enforcement and governmental agencies under lawful-access regimes or court order.
b. We do not sell or rent your Personal Information. For the purposes of this Policy and the app marketplaces through which the App is distributed, “sale” means the exchange or transfer of personal or sensitive user data to a third party for monetary consideration. A user-initiated transfer of your information (for example, where you use a feature of the App to share content with another user) is not a sale.

10. Service providers, SDKs and business partners

a. We engage third-party companies and individuals to facilitate our Services, including maintenance, database management, web analytics and general improvement of the Services. We take commercially reasonable steps to ensure our service providers adhere to the security standards we apply to your Personal Information.
b. Our App includes third-party software development kits (SDKs) and may use third-party integrations, including artificial-intelligence services. We take reasonable steps to ensure that such third-party code and its providers handle user data in a manner consistent with this Policy, with your consent, and with the requirements of the app marketplaces through which the App is distributed, including that such providers do not sell personal or sensitive user data obtained through the App.

11. Minors

a. The Services are intended for persons aged 18 years and over. We do not knowingly collect, use or disclose Personal Information from anyone under the age of 18. If you are under 18 you are not permitted to access or use the Services.
b. If we become aware that we have inadvertently collected Personal Information from a person under 18 without appropriate consent, we will take reasonable steps to delete that information as soon as practicable.
c. If you believe we may have collected personal information from someone under 18, please contact us at supprt@krunk.com.

12. Child safety and CSAE standards

KRUNK has zero tolerance for child sexual abuse and exploitation (CSAE). These standards apply to all content, communications and conduct on or through the Services, including in-person meet-ups and events arranged through the App, and form part of our Terms & Conditions.

a. Prohibited conduct. You must not use the Services to engage in, facilitate, promote or attempt any form of CSAE, including: creating, sharing, requesting or possessing child sexual abuse material (CSAM); grooming a minor or attempting to establish contact with a minor for a sexual purpose; sexualising minors in any content, including drawn, digitally altered or AI-generated content; sextortion, or coercing or enticing a minor to produce sexual content; trafficking or advertising minors for sexual purposes; and using the App’s meet-up, event or messaging features to arrange contact with a minor for any sexual or exploitative purpose.
b. Age requirement. As set out in Section 11, the Services are only for persons aged 18 and over. We take reasonable steps to prevent minors from accessing the Services, including a date-of-birth check at sign-up, and we remove any account we reasonably believe belongs to a minor.
c. Detection and moderation. We use a combination of user reports and human moderation to detect and remove prohibited content and conduct.
d. How to report. You can report any user, profile, message, photo, post or event through the in-app Report function or by emailing James Webb at support@krunk.com. Reports concerning possible CSAE are prioritised for review. You do not need to be certain before making a report.
e. How we respond. When we become aware of suspected CSAE, we remove the content, permanently suspend the accounts involved and take steps to prevent re-registration, preserve relevant information as required or permitted by law, and report the matter to the appropriate authorities, including the Australian Centre to Counter Child Exploitation (ACCCE) and, where applicable, the National Center for Missing & Exploited Children (NCMEC) and law enforcement in the relevant jurisdiction. We cooperate with law-enforcement requests made in accordance with law.
f. Immediate danger. If a child is in immediate danger, contact emergency services first — in Australia, call 000. You can also report online child sexual exploitation directly to the ACCCE at www.accce.gov.au/report, and report harmful or illegal online content to the eSafety Commissioner at www.esafety.gov.au.
g. Handling of related information. Despite Sections 15 and 16, we may retain and disclose Personal Information connected with a suspected CSAE incident where required or permitted by law, including to law-enforcement agencies, and to our legal advisers for the purpose of obtaining legal advice (but never child sexual abuse material itself, which we provide only to law enforcement and other authorities as required by law), and we may decline to notify the account holder where doing so could prejudice an investigation or place any person at risk.
h. Compliance with law. We comply with applicable child safety laws, including the Online Safety Act 2021 (Cth), the Criminal Code Act 1995 (Cth), and equivalent laws in the jurisdictions in which the Services are available.
i. Child safety contact. KRUNK’s designated point of contact for child safety matters, including enquiries from app marketplaces and law-enforcement agencies, is James Webb, Chief Financial Officer, who can be contacted at support@krunk.com.

13. Data security

You use our Services at your own risk. We implement commercially reasonable technical, administrative and organisational measures to protect Personal Information from loss, misuse and unauthorised access, disclosure, alteration or destruction, in accordance with Applicable Laws, including transmitting personal and sensitive user data using modern encryption (for example, over HTTPS). However, no internet or email transmission is ever fully secure or error-free, so you should take care in deciding what information you send us. We are not responsible for circumvention of any privacy settings or security measures on the Service or on third-party websites.

14. Access, correction and accuracy

a. Australian Privacy Principle 12 permits you to obtain access to the Personal Information we hold about you in certain circumstances, and Australian Privacy Principle 13 allows you to correct inaccurate Personal Information, subject to certain exceptions.
b. You may access the Personal Information we hold about you by making a written request. We will respond within a reasonable period. We may charge a reasonable fee for processing your request (but not for making it).
c. We may decline a request for access in circumstances prescribed by the Privacy Act; if we do, we will give you written reasons (unless it would be unreasonable to do so).
d. If you believe the Personal Information we hold is inaccurate, incomplete or out of date, please notify us and we will take reasonable steps to correct it.
e. If we refuse to correct your Personal Information, we will give you written reasons and details of how to complain.
f. To obtain access, please contact us as set out in Section 25.

15. Opt-out choices

To opt out of (1) any consents previously given to us, (2) receiving communications from us, or (3) having Personal Information disclosed to third parties, email support@krunk.com. Despite this right, we retain the right to collect, maintain and process information provided by and collected about you on and through the Services, and to disclose such information to comply with our reasonable business and legal obligations.

16. Account deletion and data retention

a. You may delete your KRUNK account at any time. You can initiate deletion: (i) from within the App, via Settings → Account → Delete Account; and (ii) outside the App, by visiting https://www.krunk.com/delete-account/. Both methods are readily discoverable and free of charge.
b. When you delete your account, we delete the Personal Information associated with that account. Temporary deactivation, disabling or “freezing” of an account is not the same as deletion; deleting your account is permanent and cannot be undone.
c. We retain certain limited information after account deletion only where necessary for legitimate purposes such as security, fraud prevention, dispute resolution, safety, or compliance with a legal or regulatory obligation. Where we retain such information, we hold it only for as long as necessary for that purpose and then delete or de-identify it. Indicative retention periods are: transaction and payment records — 7 years to meet tax and financial-records obligations; safety, moderation and abuse-report records — 7 years, or longer where the record relates to a suspected offence involving a minor or where we are required to preserve it by law; and basic identifiers held to enforce a ban or prevent re-registration by a removed user — for as long as the ban remains in force.
d. Content you shared with other users, or that other users saved or re-shared, may continue to exist within the Services after your account is deleted where we are not able to remove it from those users’ records; where practicable we de-identify such content.
e. You may also request deletion of specific Personal Information without deleting your whole account by contacting us at support@krunk.com. Residents of jurisdictions with additional deletion rights (see Sections 21–23) may have further entitlements.

17. SMS and one-time passwords

KRUNK collects and uses your mobile phone number to send transactional text messages that you request or initiate, including one-time passwords (OTPs), verification codes, account-access messages and security notifications. Message frequency varies, and message and data rates may apply. KRUNK does not sell, rent or share mobile phone numbers, SMS opt-in data or messaging consent with third parties or affiliates for marketing or promotional purposes. This information may be provided only to service providers and telecommunications carriers that help us deliver these messages, and they may use it solely to provide those services. SMS consent is not transferable. You may reply STOP to opt out or HELP for assistance.

18. Business transfer

If our business (or substantially all of our assets) is acquired by a third party, or if we go out of business, enter bankruptcy or undergo some other change of control, Personal Information may be made available or otherwise transferred to the new controlling entity, where permitted under Applicable Laws and with legally adequate notice to users.

19. Changes to this Privacy Policy

We may amend this Policy from time to time. If we change our Policy, we will post the changes on this page and update the modification date at the top. Use of Personal Information we collect is subject to the Policy in effect at the time such information is collected, used or disclosed. If we make material changes, or changes to the way we use Personal Information, we will notify you by posting an announcement on our Website or App, or by email, before the change takes effect. You are bound by any changes when you use our Services after those changes are first made available.

20. Complaint procedure

a. If you have a complaint about how we maintain the privacy of your Personal Information, please contact us as set out in Section 25. All complaints are considered by our privacy officer, and we may seek further information to clarify your concerns. If we agree your complaint is well founded, we will take appropriate steps to rectify the problem.
b. If we are unable to resolve your concerns, you can contact the Office of the Australian Information Commissioner: GPO Box 5218, Sydney NSW 2001; enquiries@oaic.gov.au; 1300 363 992; www.oaic.gov.au.
c. Residents of other jurisdictions may also contact the relevant information commissioner or data-protection authority in their jurisdiction.

21. Foreign privacy laws

You may have additional rights under other applicable foreign privacy laws, including: the Personal Data Protection Act 2012 (Singapore) if you are a Singaporean resident; the UK GDPR and the EU GDPR if you are a resident of the United Kingdom or the European Union respectively; and US state privacy laws such as the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) if you are a resident of certain US states.

22. GDPR

a. If you are an individual in a country in the European Economic Area (EEA), we may be required to comply with the EU General Data Protection Regulation 2016/679 (GDPR) when processing the Personal Information of data subjects in the EEA in relation to offering our products or services, or where we monitor your behaviour in those countries. KRUNK is a data controller for our Website and the services provided through it.
b. In some circumstances the GDPR provides additional protection to individuals located in Europe, and additional rights and remedies may be available to you.
c. You have certain rights in relation to Personal Information we hold about you, including the rights to be informed, to access, to rectify, to erase, and to object to or restrict processing. We may require evidence of your identity before acting on your request.
d. Where there is a conflict between Sections 22 and 23 and the rest of this Policy, Sections 22 and 23 prevail if you are an individual residing within GDPR jurisdiction.

23. GDPR lawful bases for processing

Under the GDPR, we process your Personal Information on the following legal bases:

a. Legitimate interests — where we have good, sensible, practical reasons for processing that are in our interests, having weighed the impact on your interests and rights and applied appropriate safeguards. You can object to processing carried out on this basis.
b. Contract — where processing is necessary to perform the Services you have agreed to receive from us. If you do not provide your Personal Information, we may not be able to provide the Services.
c. Legal obligation — where we are subject to legal obligations to process your data, including making mandatory disclosures to government bodies and law-enforcement agencies.
d. Consent — where we ask for your consent to use your information (for example, to sign up to our newsletter). You can withdraw consent at any time by following the instructions in the relevant communication or by contacting us under Section 25.

24. Your California privacy rights (CCPA/CPRA)

If you are a California resident, you may have the right to know what personal information we collect, use, disclose and (if applicable) sell or share; to access and delete your personal information; to correct inaccurate personal information; and to opt out of the sale or sharing of personal information and of targeted advertising. KRUNK does not sell personal information for monetary consideration. To exercise these rights, contact us at support@krunk.com. We will not discriminate against you for exercising your rights.

25. How to contact us about privacy

If you have any queries, wish to access your Personal Information, or have a complaint about our privacy practices, contact our privacy officer:

Address: PO Box 321, Lennox Head, NSW 2478, Australia

Email: support@krunk.com

26. Definitions and interpretation

In this Policy:

Australian Privacy Principles means the Australian Privacy Principles under the Privacy Act 1988 (Cth);

App means the KRUNK application;

CSAE means child sexual abuse and exploitation, as described in Section 12;

GDPR means the EU General Data Protection Regulation 2016/679;

Personal Information has the meaning given in the Privacy Act 1988 (Cth) as amended;

Policy means this Privacy Policy as amended from time to time;

Privacy Act means the Privacy Act 1988 (Cth);

User means a user of the Website or App;

we/us/our means KRUNK Pty Ltd ACN 601 756 914 and its related bodies corporate;

Website means www.krunk.com or any URL that replaces it; and

you/your means you as a user of the Website and/or App and the person acquiring information from us.

A singular word includes the plural and vice versa; a reference to a statute includes regulations and amendments; and headings are for convenience only.