Kivaloop Privacy Policy

App: Kivaloop & Kivaloop Shop Partner (com.mobile.kivaloopShop) · Effective date: 2 November 2026

This Privacy Policy explains how Kivaloop ("we", "us", or "our") collects, uses, stores, and deletes information when you use the Kivaloop customer application and the Kivaloop Shop Partner mobile application (the "Apps").

1. Information we collect

A. Customer Account Data (Kivaloop App)

• Account details: Email address, display name, and profile photo.
• Activity & Rewards: Cart contents, placed orders, reward points, fortune-wheel spin history, and cafe favorites.
• User Content: Stories, posts, comments, and reviews.

B. Merchant & Partner Data (Kivaloop Shop Partner App)

• Owner Information: Full name, login email, and contact phone number.
• Store Profile: Shop name, business description, category, street address, city, and ZIP code.
• Operating Hours: Opening/closing hours and weekly schedules.
• Menu & Catalog: Item names, descriptions, prices, categories, and item photos.
• Store Media: Store logo, storefront banner, and gallery photos uploaded via Cloudinary.
• Order Management: Order fulfillment records, order status updates, and revenue summaries.

C. Location & Technical Data (Both Apps)

• Authentication credentials: Securely managed through Google Firebase Authentication. Passwords are never stored on our servers.
• Location Data: Approximate or precise GPS location, collected only when granted permission to display nearby cafes or set store coordinates. We do not track location in the background.
• Support inquiries: Communications sent to us for customer support or account deletion requests.

2. How we use information

• To create, authenticate, and manage your account (as a customer or merchant partner).
• To display cafes, menus, and promotions to customers, and process orders in real time.
• To provide merchants with dashboard metrics, sales tracking, and order management.
• To store and deliver uploaded media (photos, banners, menu pictures).
• To process account deletion and customer support requests.
• To ensure platform security, prevent fraud, and comply with legal requirements.

3. Service providers

We use trusted third-party service providers that process data on our behalf:

• Google Firebase (Authentication and Cloud Firestore) for sign-in, account data, and app data.
• Cloudinary for image hosting and delivery.
• Mapbox for maps and place/geocoding search.

These providers may process data in countries other than your own. We do not sell your personal information.

4. Data retention

We keep your account information and content while your account is active. Stories expire after approximately 24 hours. If you delete your account, we delete your account and associated app data, except where we are required to retain certain information for legal, security, or fraud-prevention reasons. Backup copies and content delivery caches may take up to 30 days to be removed.

5. Account and data deletion

You can delete your account at any time:

• In the App: open Profile, tap the settings icon, choose Delete Account, and confirm with your password.
• On the web: visit Kivaloop Account Deletion and follow the instructions. This does not require the App.

Deleting your account removes your account record, profile, posts, stories, shops, menus, and reward/spin data associated with your account. See the deletion page for details.

6. Security

Data is transmitted over encrypted connections (HTTPS). We use industry-standard authentication and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

7. Children

The App is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.

8. Your choices

• You can edit your profile information in the App.
• You can revoke location permission in your device settings; some features may stop working.
• You can delete your account using the in-app option or the web request page.

9. Changes to this policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new effective date.

10. Contact us

For privacy questions or data requests, email shakibshovon.10@gmail.com.