Privacy Policy

1. Overview

This Privacy Policy describes how Kivo Apps ("Kivo Apps", "we", "us" or "our") handles information in connection with our mobile applications available on the Apple App Store and Google Play (each an "App" and together the "Apps"), our website at kivoapps.com, and any related services (collectively, the "Services").

By downloading or using our Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with it, please do not use the Services.

2. Information we collect

2.1 Information you provide to us

• Support communications. If you email us at help@kivoapps.com, we receive your email address, name (if provided), the content of your message, and any attachments or device details you choose to share.
• Feedback and surveys. If you submit feedback, ratings or responses to optional in-app surveys, we receive the information you provide.

2.2 Information collected automatically

When you use our Apps, we and our third-party service providers may automatically collect:

• Device information: device model, operating system and version, language, region and time-zone settings, screen size, app version, and mobile carrier.
• Identifiers: app-instance identifiers, Firebase installation IDs, an anonymous app user ID generated for purchase management, push notification tokens, and — only where permitted — advertising identifiers such as Apple's IDFA or Google's Advertising ID (GAID). We also may use Apple's IDFV (identifier for vendor).
• Usage data: features used, screens viewed, session length and frequency, in-app events (for example, starting playback or extracting an archive — but not the file names or contents), and interactions with ads.
• Diagnostics: crash logs, stack traces, performance data (such as launch time and responsiveness), and error reports.
• Network and approximate location data: IP address and coarse location (city/country level) inferred from it. We do not collect precise GPS location.
• Purchase information: subscription status, product purchased, price and currency, transaction identifiers, purchase and renewal dates, trial status and store country. We never receive your full payment card details.

2.3 Information we do not collect

We do not ask for or knowingly collect your name, postal address, phone number, contacts, precise location, health data or other sensitive personal information through our Apps.

3. Your files & media

Passwords you enter to unlock protected archives are used only on-device to perform the extraction and are not transmitted to us. If an App offers optional features that require you to choose a cloud provider (for example, importing from iCloud Drive, Google Drive or Dropbox), the transfer takes place directly between your device and that provider under its own privacy policy.

4. How we use information

We use the information described above to:

• Provide, operate and maintain the Apps and their features;
• Process and verify in-app purchases and subscriptions, unlock premium features, and restore purchases across your devices;
• Understand how the Apps are used so we can improve features, design and performance;
• Detect, diagnose and fix crashes, bugs and technical issues;
• Remotely configure features and run experiments (for example, testing different layouts or paywall designs);
• Display advertising in free versions of the Apps and measure ad performance, including personalized ads where you have given permission;
• Send push notifications you have opted into, such as reminders or update announcements;
• Respond to your support requests and communicate with you;
• Prevent fraud, abuse and unauthorized use, and protect the security of our Services; and
• Comply with legal obligations and enforce our Terms of Service.

5. Legal bases for processing (EEA, UK & Switzerland)

If you are located in the European Economic Area, United Kingdom or Switzerland, we process personal data on the following legal bases:

• Performance of a contract — to provide the Apps and process your purchases and subscriptions.
• Legitimate interests — to keep the Apps secure, fix crashes, understand aggregate usage and improve our products, where those interests are not overridden by your rights.
• Consent — for personalized advertising, certain analytics, and access to device identifiers or storage where required by law. You can withdraw consent at any time (see Section 7).
• Legal obligation — to comply with applicable laws, such as tax and accounting rules.

6. Third-party services we use

Our Apps integrate software development kits (SDKs) from the trusted providers below. These providers may collect information directly from your device as described in their own privacy policies. Not every App uses every service.

Ad mediation platforms such as AppLovin MAX and AdMob may pass limited information to additional demand partners to fill ad requests. A list of those partners is available on request or through the relevant mediation provider's website.

7. Advertising, tracking & your choices

Free versions of our Apps may display banner, interstitial, native or rewarded video ads. Ads help us keep the Apps free. Premium subscribers generally do not see ads.

7.1 Apple App Tracking Transparency (iOS)

On iOS 14.5 and later, we will ask your permission through Apple's App Tracking Transparency (ATT) prompt before accessing your device's IDFA or tracking you across apps and websites owned by other companies. If you choose "Ask App Not to Track", we and our partners will not access your IDFA and you will receive non-personalized or contextual ads. You can change this at any time in Settings → Privacy & Security → Tracking.

7.2 Consent in the EEA, UK & Switzerland

Where required by law, we use a consent management platform (such as Google's User Messaging Platform, certified under the IAB Transparency & Consent Framework) to request your consent before using personal data for personalized ads or storing information on your device. You can review or change your choices at any time from the Privacy settings option in the App's settings.

7.3 Android advertising ID

On Android, you can reset or delete your advertising ID, or opt out of ads personalization, in Settings → Google → Ads (or Settings → Privacy → Ads, depending on your device).

7.4 Other choices

• Go ad-free: purchase a premium plan within the App.
• Push notifications: disable them in your device settings at any time.
• Industry opt-outs: learn more at youronlinechoices.eu (EU) or the DAA AppChoices app (US).

8. Subscriptions & payments

All payments for subscriptions and in-app purchases are processed by Apple (App Store) or Google (Google Play). We do not collect or store your credit card or payment information. Apple and Google share with us only the information needed to confirm and manage your purchase, such as a transaction identifier, product, price, purchase date and subscription status.

We use RevenueCat to securely validate receipts, manage entitlements and let you restore purchases. RevenueCat identifies you with a randomly generated anonymous ID unless you choose to sign in to an account (if offered). For subscription billing terms, auto-renewal, cancellation and refunds, please see our Terms of Service.

9. How we share information

We do not sell your personal information for money. We share information only as follows:

• Service providers: with the third-party providers listed in Section 6, who process data on our behalf or as independent controllers to provide analytics, crash reporting, purchase management, push notifications and advertising.
• Legal requirements: when required by law, court order or governmental request, or when we believe disclosure is necessary to protect our rights, your safety or the safety of others, investigate fraud, or respond to a government request.
• Business transfers: in connection with a merger, acquisition, financing, reorganization or sale of all or part of our business, in which case information may be transferred to the acquiring entity subject to this policy.
• With your consent: in any other situation where you have directed or agreed to the sharing.
• Aggregated data: we may share aggregated or de-identified information that cannot reasonably be used to identify you.

10. Data retention

We keep personal information only for as long as necessary for the purposes described in this policy, unless a longer period is required or permitted by law. As a general guide:

• Analytics data in Firebase is retained for up to 14 months;
• Crash reports in Crashlytics are retained for up to 90 days;
• Purchase and subscription records are retained for as long as needed to provide your entitlements and meet tax and accounting obligations;
• Support emails are retained for up to 24 months after your last contact, unless you ask us to delete them sooner.

Data held by third-party providers is retained according to their own policies.

11. Security

We use reasonable administrative, technical and organizational measures to protect information, including encryption in transit (HTTPS/TLS), access controls and reputable infrastructure providers. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. International data transfers

Our service providers may process information in the United States and other countries whose data protection laws may differ from those in your country. Where we transfer personal data from the EEA, UK or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or the EU-U.S. Data Privacy Framework where the recipient is certified.

13. Your privacy rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you;
• Correct inaccurate or incomplete information;
• Delete your personal information;
• Restrict or object to certain processing, including processing based on legitimate interests;
• Data portability — receive your information in a structured, machine-readable format;
• Withdraw consent at any time, without affecting processing that took place before withdrawal; and
• Lodge a complaint with your local data protection authority.

Because our Apps do not require an account, much of the information we receive is linked only to random device or app identifiers. To help us locate your data, please include your App name, device type and — if available — the anonymous user ID shown in the App's settings when you contact us at help@kivoapps.com. We will respond within the time required by applicable law (typically 30 days). We may need to verify your request before acting on it.

Deleting the App from your device stops further collection of information through it. To also delete data already collected, contact us using the details above.

14. California and other US state privacy rights

If you are a resident of California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon or another US state with a comprehensive privacy law, you may have additional rights, including the right to know, access, correct and delete personal information, and the right to opt out of the "sale" or "sharing" of personal information or its use for targeted advertising.

• Categories collected: identifiers (device and advertising IDs, IP address), commercial information (purchase history), internet or other electronic network activity (app usage and ad interactions), and inferences drawn from the above. We do not collect sensitive personal information.
• Sale/sharing: we do not sell personal information for money. However, allowing advertising partners to collect identifiers for targeted advertising may be considered "selling" or "sharing" under some state laws. You can opt out by declining the ATT prompt on iOS, disabling ads personalization on Android, enabling Global Privacy Control where supported, or emailing us with the subject line "Do Not Sell or Share".
• Non-discrimination: we will not discriminate against you for exercising your privacy rights.
• Authorized agents and appeals: you may use an authorized agent to submit a request, and you may appeal a decision on your request by replying to our response.

15. Children's privacy

Our Apps are not directed to children under the age of 13 (or under 16 in the EEA and UK, or the equivalent minimum age in your jurisdiction), and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us at help@kivoapps.com and we will delete it.

16. Device permissions

Our Apps may request access to certain device features only when needed for the feature you are using. You can grant or revoke these permissions at any time in your device settings.

• Photos & media / files: to play, browse, import or save media and archives you select. Accessed on-device only.
• Notifications: to send optional reminders and updates.
• Tracking (iOS ATT): to deliver personalized ads, as described in Section 7.
• Local network / AirPlay / Chromecast: to stream media to devices on your network, where supported.

17. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, Apps or legal requirements. When we do, we will update the "Last updated" date above and, for material changes, provide notice in the App or on our website. Your continued use of the Services after an update means you accept the revised policy.

18. Contact us

If you have any questions, concerns or requests regarding this Privacy Policy or your personal information, please contact us: