Privacy Policy

1. Introduction

Kiku (“we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you use our website and services (the “Service”).

2. Information We Collect

Information you provide

• Email address — when you join our waitlist or create an account
• Payment information — processed securely by Stripe when you make a purchase (we do not store your card details)
• Account credentials — email and password when you register

Information collected automatically

• Usage data — pages visited, interactions, and feature usage via PostHog analytics
• UTM parameters — marketing attribution data (utm_source, utm_medium, utm_campaign)
• Device information — browser type, operating system, and screen size
• Cookies — small data files used for analytics and session management

3. How We Use Your Information

We use your information to:

• Operate, maintain, and improve the Service
• Send you updates about Kiku, including launch notifications and product news
• Process payments and manage your account
• Analyze usage patterns to improve user experience
• Communicate with you about your account or transactions
• Comply with legal obligations

4. Third-Party Services

We use the following third-party services to operate Kiku:

• Supabase — database and authentication
• Stripe — payment processing
• PostHog — product analytics
• Resend — transactional emails

Each of these services has its own privacy policy governing how they handle your data. We encourage you to review their policies.

5. Cookies and Tracking

We use cookies and similar technologies for analytics and to remember your preferences. You can control cookies through your browser settings. Disabling cookies may affect some functionality of the Service.

6. Data Sharing

We do not sell your personal information. We may share your information only in the following circumstances:

• With third-party service providers who help us operate the Service (as listed above)
• When required by law or to protect our legal rights
• In connection with a merger, acquisition, or sale of assets (with notice to you)

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you request deletion, we will remove your data within 30 days, except where retention is required by law.

8. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Opt out of marketing communications at any time
• Request a copy of your data in a portable format

To exercise any of these rights, email us at [email protected].

9. Data Security

We implement reasonable security measures to protect your personal information, including encryption in transit (HTTPS) and at rest. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

10. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new “Last updated” date. Continued use of the Service after changes constitutes acceptance.

12. Contact Us

If you have questions about this Privacy Policy, please contact us at [email protected].