Privacy Notice

Controller and contact

Koon B Co., Ltd. determines how personal data is used for Koon B and MarketB services. Our contact address is 68 Sukhumvit 24, Klong Tan, Klong Toey, Bangkok, Thailand. Contact privacy@koonb.com to exercise your rights, object to processing based on legitimate interests, request deletion, or raise a privacy concern.

What this notice covers

This notice covers personal data processed when you use Koon B on web or mobile: account and phone authentication; sessions and device sign-in state; marketplace listings, media and communications; approximate location used for local discovery; optional first-party search and recommendation personalization; optional first-party advertising preferences described separately; and optional features such as Skin Journal where available.

Feature-specific in-product notices, preferences or consent prompts may also apply before particular processing begins. The separate advertising privacy notice linked from this page covers optional personalized Koon B house offers.

Account and phone authentication

To create or sign in to an account, we process the phone number you submit and one-time passwords delivered by SMS through our SMS OTP provider. Successful verification proves control of that number for authentication and account admission. A phone number or OTP is not treated as proof of legal identity, adulthood, government registration, or ownership of a SIM beyond challenge success.

We may store account profile details you provide, such as display name, plus account security and admission state needed to operate and protect the service.

Sessions and devices

After authentication we create server-managed customer sessions. On the web this includes an HttpOnly session cookie. On mobile, access and refresh credentials are held in platform secure storage on your device, with opaque session and device handles used to issue, rotate, expire or revoke sessions.

Session management may retain coarse platform labels and last-used timing needed for security and device management. It does not use hardware advertising identifiers or biometric templates as account identifiers. Where Face ID, Touch ID or device unlock is used to open local credentials, that biometric check stays on your device. You can sign out; where device management is available, you may revoke other sessions.

Location

Marketplace listings use approximate area labels and limited public location precision so other people do not see your exact coordinates. Exact coordinates used for listing operations are protected and are not published as public exact points.

When you allow location while choosing a nearby area in the app, Koon B uses your device location for that in-app choice. Exact location is not shown to other people.

Camera, photos, microphone and Skin Journal

Camera, photo library and microphone access are requested only for features that need them, such as listing photos, short listing proof videos, and private Skin Journal capture. Media you attach to a public listing can be shown with that listing according to its visibility.

Skin Journal photos and related profile inputs are private account data stored with encryption controls separate from public listing media. Where Skin Journal analysis is available and used, images or derived inputs may be processed by configured AI providers under our instructions to return analysis results to your account. Skin Journal provides authenticated deletion controls for scans and journal data. Do not assume provider systems retain zero copies; ask privacy@koonb.com if you need current provider retention details for that feature.

Marketplace content and communications

We process listing content you create or publish, including titles, descriptions, prices, categories, condition, media and approximate location; buyer and seller profile information shown in the marketplace; messages and deal-related records needed to operate conversations; and safety, trust or report signals when those features are used.

Public listing and seller display information is visible to other users according to listing and profile visibility. Private message and deal content is processed to provide the service and for security, abuse prevention, moderation and legal compliance. Message bodies and payment or deal content are not used for first-party search personalization ranking.

Data used for personalization

When personalization is available and on, we use account and session references to associate activity with your account; current notice, age-eligibility and preference records; eligible product views, clicks and saves; product and category identifiers; interaction timing and feed or search context; and category interests derived from that activity.

We do not use message bodies, payment or deal content, private addresses, exact coordinates, government IDs, birth dates, protected traits or inferred demographics for this purpose. The private 20+ statement determines eligibility only and is not an interest or ranking feature.

Purpose and legal basis

We process personal data to operate and secure Koon B accounts and sessions; provide marketplace discovery, listings, communications and related features; prevent abuse and protect users; meet legal obligations; and, where separately authorized, provide optional personalization or advertising preferences.

For first-party search and recommendation personalization, we rely on legitimate interests to make discovery more useful for eligible signed-in adult accounts, with relevance, safety and user controls. That release uses category interests to order already relevant search results and recommendations. That personalization purpose does not include targeted advertising, cross-context tracking, selling personal data, third-party enrichment, external marketing, sharing personalization data with external AI services, or decisions with legal or similarly significant effects.

Your choice and eligibility

For an account without an earlier opt-out, personalization turns on only after the current notice and separate 20+ self-attestation are completed and eligibility checks pass. An earlier off choice stays off until you explicitly turn it on in Settings. Signing in, accepting the general signup agreement, changing language or reinstalling the app does not reset that choice.

You can use standard results without making the age statement. You can object at any time by turning personalization off in Privacy & personalization Settings or contacting privacy@koonb.com. Turning it off does not remove ordinary marketplace access. Essential account, security and service processing may continue for their own purposes.

Optional advertising preferences

Optional personalized Koon B product and brand advertisements are covered by a separate advertising privacy notice linked from this page and in Settings. That advertising choice is separate from search and recommendation personalization, starts off, and can be turned off at any time.

Retention and deletion

Personalization activity has a rolling 30-day use and expiry window and is removed through background cleanup. Interest profiles expire 30 days after their qualifying source activity and may be replaced when new qualifying activity produces an update. Expired or stale profiles are not used for personalized ranking. Turning personalization off stops new collection and personalized ranking for the account, removes its online interest profile and starts cleanup of its personalization activity.

Notice, age-eligibility and preference records are kept as needed to establish current eligibility, respect your choices and handle privacy or legal obligations. We retain limited opt-out and deletion records to prevent a previous choice from being undone. These records are not used as interests.

Account, session, marketplace content, communications, security and Skin Journal records are kept as needed to operate the service, secure accounts, resolve disputes and meet legal obligations. Periods vary by record type and purpose. Skin Journal data remains while those feature records exist until you delete them in the product or through a completed deletion request.

To request deletion of your account or other personal data, contact privacy@koonb.com. Where the product offers authenticated in-app deletion controls, you may also use those. Physical deletion runs separately from an immediate stop in a feature. Restricted backup or recovery copies may remain until they expire or are overwritten under the backup schedule. Contact privacy@koonb.com for retention details or to request deletion.

Service providers, security and international processing

We use service providers to operate and secure Koon B, including Tencent Cloud for hosting, database and object storage services, and an SMS OTP provider to deliver authentication codes. Where Skin Journal analysis is enabled, configured AI processing providers may process feature inputs under our instructions. Access is limited to authorized people and providers who need the data for those purposes, with security and confidentiality controls.

Our primary application infrastructure is in Bangkok. Supporting infrastructure and provider operations can be outside Thailand, including secret-management infrastructure in Singapore. The data involved depends on the service being operated. Our use of providers and any international transfer of personal data are subject to applicable data-protection requirements. Contact privacy@koonb.com for information about these arrangements.

Your rights

Subject to applicable law, you may request access or a copy, correction, deletion, restriction or portability of your personal data, and object to processing based on legitimate interests. Use available Settings controls for personalization or advertising preferences, or contact privacy@koonb.com. We may need to verify your request and retain limited records for security, legal claims or compliance.

You may also lodge a complaint with Thailand's Personal Data Protection Committee through its official channels.

Changes to this notice

Material changes will have a versioned notice. A new notice does not reset an earlier personalization opt-out or silently authorize an account that is not eligible for personalization.