Privacy Policy

Kallova LLC, a Massachusetts limited liability company with its registered address at 118 Bogastow Brook Road, Sherborn, MA 01770 (“Kallova,” “we,” “us”), operates the Kallova mobile application and the website kallova.com (together, the “Services”) — a marketplace that connects homeowners (“Clients”) with independent lawn-care and landscaping professionals (“Providers”).

This policy describes what information we collect, how we use and share it, and the choices you have. It applies to everyone who uses the Services. The Services are offered in the United States only and are not directed to persons outside the United States.

If you have any questions, contact us at info@kallova.com.

1. Information we collect

1.1 Account information

• Name and phone number. Your phone number is your login credential; we verify it with a one-time code sent by SMS. We do not store passwords.
• Role and profile details — whether you use Kallova as a Client, a Provider, or both, plus profile details you add (such as a profile photo, and for Providers: services offered, equipment photos, and a business name if you sign up as a company).
• Providers only: date of birth, used to confirm eligibility to work. For Providers aged 16–17, we also record a parent or legal guardian's consent.
• Records of your acceptance of our terms and agreements (which document, which version, and when).

1.2 Property information (Clients)

• Your service address, and the geographic coordinates, parcel boundary, aerial imagery, and yard measurements we derive from it. To measure your yard and price jobs up front, we look your address up against third-party and public geographic data sources (address geocoders, county and state parcel records, and government aerial imagery programs). The measured results (for example, lawn and driveway area) are stored with your profile.
• Notes you attach to a job (for example, gate codes or pet warnings). Notes are shown only to the Provider who accepts your job — see Section 3.1.

1.3 Location information

• Clients: we derive your property's coordinates from the address you enter. We do not track a Client's device location.
• Providers: with your permission, we collect your device's precise location to show you nearby jobs and to center demand maps. If you accept a job, and only while that job is active, we collect your location including in the background to confirm you arrived and were on-site — this powers arrival notifications to the Client and our service-verification records. You can decline background access; the app then works in foreground-only mode.

1.4 Photos and job records

• Photos you choose to upload: profile photos, Provider equipment photos, before/after photos of a job, and photos submitted with a service issue or dispute.
• Job history: services requested and performed, dates, arrival windows, completion records, ratings, and reviews.

1.5 Payments and payouts

Payments are processed by Stripe, Inc. Your full card number never touches Kallova's servers — it goes directly to Stripe, and we store only a payment record (amount, date, card brand and last four digits, and Stripe's identifiers). Providers are paid through Stripe Connect; the bank account and tax information Providers submit during payout onboarding is collected and held by Stripe under its own privacy policy, not by us.

1.6 Identity verification and background checks (Providers)

• Before taking jobs, Providers complete identity verification through Stripe Identity. Your government-ID images and selfie are captured and analyzed by Stripe; Kallova stores only the outcome (verified or not) and Stripe's session reference, never the ID images themselves.
• Where we offer or require them, criminal background checks are performed by a consumer-reporting agency (currently Checkr, Inc.) with your separate, explicit consent and the disclosures required by the Fair Credit Reporting Act. We store the check's status and result classification, not the underlying report details.

1.7 Messages and support conversations

• In-app messages between a Client and their matched Provider are stored so both sides can see the conversation and so we can investigate disputes or abuse reports.
• Support chats. Our in-app help assistant is powered by an AI model (provided by Anthropic). Your support conversation is processed to generate replies and is logged for quality and safety review; we redact obvious sensitive strings (such as card-like numbers) before writing the log. You can always ask the assistant to escalate to a human.

1.8 Device and technical information

• A push notification token for your device, if you allow notifications.
• Basic technical data generated by using the Services (API request logs, timestamps, IP addresses in server logs, app version).
• Crash reports and performance data. If the app crashes or misbehaves, a technical report (stack trace, device model and operating-system version, app version, and what the app was doing at the time) is sent to Sentry, our crash-reporting provider, along with sampled performance measurements (such as app start time and screen responsiveness). These reports are tagged with your account ID so we can connect a problem you tell us about to its technical cause; they do not include your name, address, messages, or payment details, and we use them only to find and fix problems with the app.
• We do not use advertising SDKs, advertising or marketing analytics trackers, or advertising identifiers, and we do not track you across other companies' apps or websites.

1.9 Referrals

If you share or redeem a referral code, we record the code, who referred whom, and the reward status. We do not access your contacts.

2. How we use information

We use the information above to:

• create and maintain your account, and authenticate you by SMS code;
• measure yards, generate upfront prices, and match Client jobs with nearby Providers;
• process payments, Provider payouts, tips, bonuses, credits, and refunds;
• send transactional notifications (job offers, acceptance, arrival, completion, payment and schedule events) by push notification and SMS — we do not send marketing texts;
• verify Provider identity and eligibility, and operate safety features such as on-site confirmation;
• provide customer support, investigate disputes, and moderate reported content;
• detect, prevent, and enforce against fraud and abuse — including maintaining ban records (see Section 5);
• add booked visits to your device calendar, only if you turn that feature on (calendar events are written on your device; we do not read your calendar);
• comply with law, and establish or defend legal claims.

We do not use your information for third-party advertising, and we do not sell it.

3. How information is shared

3.1 Between Clients and Providers (the point of the marketplace)

• Before a Provider accepts a job, they see the job's approximate location as map coordinates, the service type, yard-derived job details, and an estimated pay range — not your name, street address, exact price, or notes.
• After a Provider accepts your job, they see the service address, your first name, your job notes, and the arrival window. You see the Provider's name, photo, rating, and (during an active job) their live location en route/on site.
• Exact payment amounts, tips, and bonuses are revealed to the Provider only after the job is completed.
• Ratings and reviews you leave are visible to the rated party and inform matching.

3.2 Service providers (processors)

We share information with companies that process it on our behalf, under contracts that limit their use of it to providing services to us:

3.3 Other disclosures

We may disclose information: to comply with law or valid legal process; to protect the rights, safety, or property of Kallova, our users, or the public; in connection with a merger, acquisition, or sale of assets (your information would remain subject to this policy or one at least as protective); or with your direction or consent.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We have not done either in the preceding 12 months.

4. Your choices

• Location, camera, photos, notifications, calendar — all controlled by device-level permissions you can change at any time in your phone's Settings. The app degrades gracefully: declining a permission disables that feature, not the app.
• Push notifications can also be silenced per-app in your device settings.
• SMS is used for login codes and transactional service messages only. Because your phone number is your login credential, you cannot opt out of login codes while keeping an account.
• Profile information can be viewed and edited in the app.

5. Data retention and account deletion

• We keep your information while your account is active.
• You can delete your account yourself, from inside the app — go to Settings → Delete account. You do not need to email us. Deletion is permanent and covers your whole identity: if one phone number is registered as both a Client and a Provider, both profiles are deleted together, and the phone number is released so it can be used to sign up again later.
• What deletion removes. We delete your profile(s) and the login identity tied to your phone number, along with the data attached to your account — including your saved service address and the yard measurements derived from it, your profile details and identity-verification result, the jobs you booked as a Client and the reviews you wrote, your in-app messages, your referral records and any referral credits, and your support-chat history.
• Work you performed as a Provider. Jobs you completed for a Client belong to that Client's records and remain there, but they are unlinked from you — your account is detached from the job. On-site location records and job assignments tied to your account are deleted.
• When deletion is blocked. Deletion is refused only while you have a job in flight (a booked job as a Client, or a job you have accepted as a Provider). Finish or cancel it first, then delete — this keeps a deletion from stranding the other party mid-service.
• What we keep, and why. After deletion we retain only what we must:
  • Payment and payout records are held by our payment processor, Stripe, under its own retention schedule, because tax, accounting, and financial-services law require them; they are not kept on Kallova's own servers.
  • If an account was banned for fraud or abuse — a separate step from the voluntary deletion described above — we keep a one-way cryptographic hash of the phone number and Stripe's card fingerprint, solely to prevent the banned user from re-registering. A hash cannot be reversed into your phone number.
  • Server logs are retained on a short rolling basis, and residual copies may persist in encrypted backups for a limited time before they age out.
• Deleting your account is not a ban. A voluntary deletion leaves nothing that blocks you from signing up again. Barring someone from re-registering is a separate action we take only against accounts banned for fraud or abuse.

6. Your privacy rights (California and other states)

If you live in California, the CCPA/CPRA gives you the right to: know/access the personal information we hold about you, delete it, correct it, and not be discriminated against for exercising these rights. Because we do not sell personal information or share it for cross-context behavioral advertising, and we do not use sensitive personal information beyond what is necessary to provide the Services, there is nothing to opt out of — but you may still ask. Residents of other states with comprehensive privacy laws (including Colorado, Connecticut, Virginia, Utah, and Texas) have similar rights.

To exercise any right: use the in-app deletion tool, or email info@kallova.com from a means by which we can verify you control the account (we will verify by sending a code to the account's phone number). You may use an authorized agent; we will still verify the underlying account. We respond within the time required by applicable law (generally 45 days).

The categories of personal information we collect are listed in Section 1; the purposes in Section 2; the recipients in Section 3. We collect them directly from you, from your device (with permission), and from the geographic data sources described above.

7. Children and minors

The Services are not directed to children under 16, and Clients must be 18 or older. Providers aged 16–17 may work only through our minor-worker program with recorded parent/guardian consent and restricted job types. If you believe a child under 16 has created an account, contact us at info@kallova.com and we will delete it.

8. Security

We protect your information with TLS encryption in transit, row-level access controls in our database, role-restricted access for the pre-accept marketplace (Providers never see addresses or names in the job feed), and least-privilege service credentials. No system is perfectly secure; if we learn of a breach affecting your personal information we will notify you as required by law.

9. Changes to this policy

We will post any changes here and update the effective date. For material changes we will notify you in the app or by SMS before they take effect. Continued use of the Services after a change takes effect is acceptance of the updated policy.

10. Contact us