Privacy policy clauses for Kochava
Kochava is a mobile attribution and audience management platform that tracks app installations, user events, and device behavior to measure marketing campaign performance and build targeted audience segments. We use it to understand which marketing channels drive downloads and user engagement.
Free scan · No signup · Results in 60 seconds
What data Kochava collects
Your privacy policy must disclose each of the following data types when you use Kochava.
When does Kochava trigger privacy obligations?
Data flows and trigger points
Installing the Kochava SDK immediately begins collecting device identifiers (IDFA, Android Advertising ID, IP address) and fingerprinting data tied to app installs and in-app events. If your app has any location permission, Kochava will collect and process location data. This is not passive—attribution and audience segmentation require active transmission to Kochava's servers in the United States.
Regulatory scope
GDPR (EU/EEA users): Device identifiers and location data constitute personal data under GDPR Article 4(1). Processing requires a lawful basis (Article 6) and explicit opt-in consent for location under the ePrivacy Directive Article 5(3). Apple's App Tracking Transparency (ATT) requirement means iOS users must grant permission *before* Kochava collects IDFA; without it, you cannot use that identifier for attribution.
