Krami: Privacy Policy · Qiksy

Last updated: 1 November 2026

Who we are

Krami is an app for people who sell on marketplaces: you take a photo of a thing, and Krami makes a ready listing from it, then helps with orders, parcels and buyers’ messages. It is operated by Dmytro Liesniak, sole proprietor (ФОП), Ukraine, registered in the Ukrainian state register (ЄДР) as Liesniak Dmytro Volodymyrovych, D-U-N-S 66-768-5166, trading as Qiksy. Contact: [email protected], in any language the app speaks.

This policy covers the Krami app for Android and iPhone, its web version at krami.qiksy.app (also at qiksy-krami.pages.dev), and its server at krami-api.qiksy.app.

What the app asks your phone for

• Camera: to photograph the thing you sell. You can also pick photos from your gallery instead.
• Microphone, only when you press the button to dictate a description or a reply. Krami does not listen at any other time.
• Notifications, only if you switch them on, to tell you about a new order or a buyer’s message while Krami is closed.

Krami does not ask for your location, your contacts or your files beyond what you pick yourself.

Signing in

You can use Krami without an account. If you want to come back to it on another phone, you sign in with:

• A code by e-mail, sent through Cloudflare Email Service. It works for 10 minutes and five tries. We keep only a hash of the code, never the code itself.
• Google or Apple. We check the sign-in’s signature and take only the e-mail address they confirm (with Apple it can be a private relay address). We keep nothing else from them. When someone signs in to your account this way, we send a short note to that address.

Your e-mail address is kept on our server only inside encrypted records, and it is looked up by a one-way hash, not by the address itself. It is tied to your Allegro connection, so that signing in on a new phone opens your Allegro again.

Your marketplaces

Allegro. You connect Allegro on Allegro’s own page, where you press «allow». Allegro then gives our server access keys for your seller account. We keep those keys, your Allegro login and seller number, your company name if Allegro has one, and the shipping address you type once for your first listing. Your phone never holds the Allegro keys: it holds only a random Krami session key.

Trendyol and eMAG. You paste the API keys from your seller panel (Trendyol: seller ID, API key and secret; eMAG: API user, password and country). Our server first checks them with the marketplace, and keeps them only if they work.

All of this is one record on our server, encrypted with AES-GCM under a key of ours that is kept apart from the data. The record is found by a one-way hash of your session key, so the stored data alone opens nothing. A session nobody uses for 90 days is deleted by itself.

Disconnecting. In Settings, each marketplace has its own Disconnect button. It deletes that marketplace’s keys from our server at once.

What Krami reads from Allegro. With your permission, Krami reads your offers, orders, returns, Allegro’s fees for the monthly statement, delivery prices and buyers’ messages, and shows them to you. It passes them through and does not store them, apart from the few things named on this page. For the order and buyer data Allegro shows you (a buyer’s login, city, items, delivery method), Allegro’s own privacy rules apply.

Photos and AI

When you take or pick photos of a thing (up to four), they are sent to our server and from there to Google’s Gemini API, which returns what the thing is, what is printed on it (brand, model, barcode, the producer’s name and address) and the listing’s fields. If the main model is busy, the same request may go to another Gemini model at Google. Our server then asks Allegro for a matching category using only the words Gemini returned, not the photos. We do not store the photos or the answer; the answer goes back to your phone.

Gemini also writes for you: a description from the notes you typed or dictated, a polite Polish reply to a buyer, a translation of buyers’ messages and of offer titles into your language. Each time, only the text needed for that one task is sent. We use Gemini as a paid service, under Google’s terms for which the content is not used to improve Google’s products; Google may keep it for a limited time to detect abuse.

When you publish, your photos and the listing’s text go to Allegro, where they become your offer. Before anything leaves for Allegro, our server removes links, e-mail addresses and phone numbers from the text, as Allegro’s rules require.

The white cover photo

Allegro wants the first photo on a pure white background. When you ask for one, that photo is sent to Cloudflare Images, which cuts the thing out and puts it on white. The new picture goes straight back to your phone. We do not keep either picture. On Allegro this cover is marked as made with the help of AI.

Buyers’ messages

Krami shows your Allegro Message Center: our server reads the threads from Allegro and sends your replies to Allegro for you. Opening a thread marks it read on Allegro. To draft a reply, the last messages of that thread and the facts of its offer and order (name, price, stock, order status, delivery method) are sent to Gemini. The reply is sent only when you press Send.

• Dictation. Where your phone has its own speech recognition, it turns your words into text, and we receive only the text. Where it has none, the recording is sent to our server and to Gemini, which writes it down and turns it into Polish. We do not keep the recording.
• Attachments. Photos or a PDF you attach go through our server to Allegro. A buyer’s attachment is fetched from Allegro when you open it, and is not stored by us.
• GIFs come from GIPHY. Our server sends GIPHY the words you search for, never who you are. The small pictures in the list load on your phone from GIPHY’s servers, so GIPHY sees your phone’s internet address. The GIF you pick is sent to Allegro as an attachment.

What our server keeps

• Your connection record, encrypted, as described above.
• Your drafts, if you are connected to Allegro: each draft with its photos, at most 200, kept under your Allegro seller number so that every phone of yours sees the same ones. A listing stays there after you publish it, and is deleted from our server when you delete it in the app.
• Your storefront, if you make one: the short name and title you chose. It is a public page that anyone with the link can open, and it shows your live Allegro offers (title, photo, link to Allegro). We keep a copy of that list for up to 30 days, so the page opens even when Allegro is slow.
• Notifications, if you switch them on: your phone’s push address and language, and the ids of your recent message threads and orders, so that only new ones are announced. Every five minutes our server asks Allegro what is new. A notice carries a buyer’s login or the items and total of an order, and travels encrypted through your phone’s push service.
• Parcels: which shipping command belongs to which order, for 30 days, so a double tap never buys a second parcel.
• Your plan and counters, described below.

What stays on your phone

• Your Krami session key, until you disconnect or it stops working.
• Your drafts with their photos, so Krami works without signal.
• Small things: your language, your own reply templates, translations of your offer titles, your sound choices, which orders you shipped, and the last state of your plan and marketplaces.

Uninstalling the app removes all of it from the phone.

Paying for Krami

The first listings are free. After that, Krami has a paid plan, bought on the website through Goose, our own checkout, where the card payment is taken by monobank (plata by mono). We never see your card. Goose keeps your e-mail address, the plan, the amount and the subscription’s state, and e-mails you about renewals; we are told of each payment. The payment page knows you only by a random record number, never by your session key.

The Android and iPhone apps sell nothing. Inside them you see your plan and what it holds, but there is no price, no buy button and no link to a payment.

Limits and counters

So that Krami stays within what it costs us, our server counts per seller: how many listings you published, how many photo reads you used (three for each listing your plan holds), and your paid term. Each day it also counts calls that cost us money (reads, cover photos, sign-in codes, replies), per account or, before you connect, per internet address. These day counters are deleted after two days. For our own bookkeeping we count, per day, how many tokens Gemini used and how many listings went out, with no seller in those numbers.

Analytics and advertising

Krami contains no analytics, no advertising and no tracking, and loads no script from anyone else, except Goose’s own payment script on the website’s plan screen. We build no profile of you.

Who processes data for us

• Cloudflare runs our server (Cloudflare Workers) and stores its data (Workers KV and Durable Objects). It also sends our e-mails (Cloudflare Email Service) and makes the white cover (Cloudflare Images).
• Google reads photos and writes texts (Gemini API) and handles Sign in with Google.
• Apple handles Sign in with Apple.
• Allegro, Trendyol and eMAG receive what you send to them through Krami, under their own privacy rules.
• GIPHY supplies GIFs, as described above.
• monobank takes card payments through Goose.

For exchange rates our server downloads the European Central Bank’s daily rates (or the same rates from Frankfurter); nothing about you is sent. Cloudflare runs our server in its global network, so data may be processed outside Ukraine and the European Union. These providers process data only to provide these services. We sell nothing to anyone.

How long we keep things

• Photos sent to be read or whitened: not kept.
• Sign-in codes: 10 minutes. Day counters: two days.
• Your connection record: until you disconnect, or 90 days without use.
• Drafts: until you delete them in the app. Storefront copy: up to 30 days after its last refresh.
• Your account: until you delete it in Settings or ask us to. The plan record and payment records: for as long as the law requires.

Deleting your data

Disconnecting a marketplace in Settings deletes its keys at once. Delete account, at the end of the sign-in block in Settings, deletes the rest at once: your sign-in address, every connection record of your phones and computers with the marketplace keys in them, your drafts, your storefront and your notifications. Your offers on Allegro stay, because they belong to your Allegro account. What stays with us is the plan record under your marketplace seller number: which plan, until when, and how many offers it has published. It holds no name, address or photo, and it is there so a plan you paid for is not lost and the free offers cannot be taken again with a new account. You can also write to [email protected] from the address you sign in with, or tell us your Allegro login, and we delete it within 30 days. Payment records stay for as long as the law requires.

Children

Krami is a tool for sellers and is not meant for children.

Changes to this policy

A change moves the date at the top. If the app ever starts sending something new, this page says so before the update ships.