Privacy Policy

This Privacy Policy for Zyvo Studios ("we," "us," or "our") describes how and why we might access, collect, store, use, and/or share your personal information when you use our services, including when you:

• Download and use our mobile application Kith, or any other application of ours that links to this Privacy Policy
• Engage with us in other related ways, including any marketing or events

Kith is a personal relationship app that helps you remember and maintain meaningful connections with the people in your life. Users can store profiles of people they know, track relationships, log shared memories, and visualize their social network. All data is stored securely in the cloud and is only accessible by the account holder.

Questions or concerns? Reading this Privacy Policy will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our services. If you have any questions, please contact us at hello@usekith.app.

1. What Information Do We Collect?

Personal information you provide to us

We collect personal information that you voluntarily provide when you register, use our services, or contact us. This may include:

• Names
• Email addresses
• Passwords (stored as hashed values — never in plain text)
• Phone numbers
• Mailing addresses
• Job titles
• Date of birth
• Profile photos
• Relationship and social network data

Sensitive information

With your consent or as permitted by applicable law, we may process personal notes and relationship data that you voluntarily enter, which may contain sensitive information about yourself or others.

Social login data

You may register using your Google account. If you do, we receive your name and email address from Google as described in Section 5.

Information collected automatically

When you use our services, we automatically collect certain technical information including:

• Log and usage data — IP address, device information, timestamps, and feature usage
• Device data — device type, operating system, and application identification
• Relationship graph data — social connection patterns derived from user-created relationships, used solely to provide the graph visualization feature and not for advertising or sharing with third parties

2. How Do We Process Your Information?

We process your personal information for the following purposes:

• To create and manage your account
• To deliver the services you request
• To respond to your inquiries and provide support
• To send administrative information (policy changes, security alerts)
• To request feedback on our services
• To protect our services from fraud and abuse
• To identify usage trends and improve the app
• To provide account security — IP addresses and timestamps are used for rate limiting to prevent unauthorized access
• To maintain app security — server logs are retained to identify unusual activity and prevent brute force attacks

3. What Legal Bases Do We Rely On?

If you are located in the EU or UK, we rely on the following legal bases under GDPR:

• Consent — where you have given permission for a specific purpose
• Performance of a Contract — to fulfill our obligations in providing the service
• Legitimate Interests — to analyze usage, prevent fraud, improve the service, and protect account security
• Legal Obligations — where required by law
• Vital Interests — to protect your safety or the safety of others

If you are located in Canada, we process your information with your express or implied consent, or as otherwise permitted by applicable law.

4. When and With Whom Do We Share Your Information?

We do not sell or share your personal information with third parties for advertising or commercial purposes. We may share information only in the following limited circumstances:

• Business transfers — in connection with a merger, acquisition, or sale of company assets
• Legal requirements — when required by law or to protect our legal rights

5. How Do We Handle Social Logins?

Kith offers Google Sign-In as a registration option. When you use this, we receive your name and email address from Google. We use this information only to create and manage your Kith account. We do not control how Google uses your information — please review Google's privacy policy for details.

6. How Long Do We Keep Your Information?

We keep your personal information for as long as you have an account with us. When you delete your account, your personal data is permanently removed from our active databases immediately. Encrypted database backups may contain your data for up to 30 days before being rotated out, after which all backups will be free of your data. Anonymized server logs may persist for up to 90 days for security and abuse-prevention purposes. If you have made a paid transaction with Kith, transaction records may be retained for up to 7 years to comply with Dutch tax and accounting law (these do not contain your relationship data). See our account deletion page for more detail.

7. How Do We Keep Your Information Safe?

We implement appropriate technical and organizational security measures including:

• Passwords hashed with BCrypt — never stored in plain text
• All data transmitted over HTTPS (encrypted in transit)
• JWT tokens for authenticated API access
• Rate limiting to prevent brute force attacks
• Data stored on managed, secured cloud infrastructure

However, no electronic transmission over the internet can be guaranteed 100% secure. We cannot promise that unauthorized third parties will never defeat our security measures. You should only access our services within a secure environment.

8. Do We Collect Information From Minors?

Our services are intended for users aged 16 and older. We do not knowingly collect data from or market to children under 16 years of age. By using Kith, you represent that you are at least 16 years old. If we learn that personal information from a user under 16 has been collected, we will deactivate the account and delete the data promptly. This restriction applies to account registration only. Users who are 16 or older may store personal information about individuals of any age as part of their personal relationship management, provided they have a legitimate personal reason to do so and comply with applicable data protection laws regarding information about third parties. To report such a case, contact us at privacy@zyvostudios.com.

9. What Are Your Privacy Rights?

Depending on your location, you may have the following rights regarding your personal information:

• Right to access and obtain a copy of your data
• Right to correct inaccuracies
• Right to request deletion of your data
• Right to restrict or object to processing
• Right to data portability
• Right to withdraw consent at any time

You can exercise most of these rights directly within the Kith app (Settings → Export my data / Delete account). For other requests, visit our request form or email privacy@zyvostudios.com.

If you are in the EEA or UK and believe we are unlawfully processing your data, you have the right to complain to your local data protection authority. In the Netherlands, this is the Autoriteit Persoonsgegevens.

Withdrawing consent

You may withdraw your consent at any time by contacting us. This does not affect the lawfulness of processing that occurred before withdrawal.

Account information

You can review and update your account information at any time within the app. To terminate your account and delete all your data, go to Settings → Account → Delete account.

10. Controls for Do-Not-Track Features

Some browsers and mobile operating systems include a Do-Not-Track (DNT) feature. As no uniform standard for DNT signals currently exists, we do not respond to DNT signals at this time. If a standard is adopted in the future, we will update this policy accordingly.

11. Do US Residents Have Specific Privacy Rights?

If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have specific rights under your state's privacy laws, including the right to access, correct, delete, or obtain a copy of your personal information.

We do not sell or share personal information with third parties for advertising purposes. We have not done so in the preceding 12 months and will not do so in the future.

To exercise your rights, visit our request form, email privacy@zyvostudios.com, or refer to the contact details below.

California "Shine the Light" Law

California residents may request information about any personal information we disclosed to third parties for direct marketing purposes in the preceding calendar year. As we do not share personal information for direct marketing, there is nothing to report. To submit a request in writing, use the contact details in Section 13.

12. Do We Make Updates to This Policy?

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated version will show a revised date at the top. If we make material changes, we will notify you by posting a notice within the app or by sending you an email. We encourage you to review this policy periodically.

13. How Can You Contact Us?

If you have questions or comments about this policy, you may contact our Data Protection Officer:

14. How Can You Review, Update, or Delete Your Data?

You have the right to request access to, correction of, or deletion of the personal information we hold about you. The easiest ways to do this are:

• Within the app — Settings → Export my data (to download all your data) or Settings → Account → Delete account (to permanently delete everything)
• Request form — tally.so/r/Pdv9rd
• Email — support@usekith.app