Kiro Privacy Policy
Effective Date: January 4, 2026
Welcome to Kiro ("we", "us", "our"), a vintage film-style camera application dedicated to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application (the "Service"). By using Kiro, you consent to the collection and use of information in accordance with this policy.
Key Privacy Commitment:
We respect your privacy and are committed to complying with applicable data protection laws including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). We collect only the information necessary to provide and improve our vintage film camera service.
1. Information We Collect
We collect information to provide and enhance our Service. The types of information we collect include:
1.1 Personal Information
- Account Information: Email address, username, and password (if you create an account)
- Profile Information: Profile photo, display name, and preferences you choose to provide
- Contact Information: If you contact us, we may collect your name, email address, and communication content
1.2 Usage and Device Information
- Device Information: Device model, operating system version, unique device identifiers, IP address, and mobile network information
- Usage Data: Information about how you use the Service, including filter usage, photo editing activities, feature interactions, and session duration
- Location Data: Optional, approximate location data (only if you grant permission) to provide location-based filters (you may disable location services at any time)
1.3 Content You Provide
- Photos and images you capture or upload using Kiro
- Edited photos and metadata associated with your content (e.g., timestamps, filter information)
- Content you choose to share through the Service
1.4 Automatically Collected Information
- Log data (e.g., app crashes, error reports)
- Analytics data about app performance and user behavior
- Cookie-like identifiers to recognize your device (you may reset these through your device settings)
2. Purpose of Information Use
We use the collected information for the following legitimate business purposes:
- To provide, maintain, and improve our vintage film camera Service, including photo editing and filter functionality
- To personalize your experience with Kiro, such as recommending relevant film filters based on your usage
- To process transactions for paid filters or premium features
- To communicate with you about the Service, including updates, support, and promotional information (with your consent)
- To analyze usage patterns to improve our app's performance and user experience
- To ensure the security of the Service and prevent fraudulent or unauthorized activities
- To comply with legal obligations and respond to lawful requests from authorities
3. Third-Party Service Data Processing
We may engage third-party service providers to perform functions on our behalf. These third parties may have access to your information only to perform these tasks and are obligated not to disclose or use it for any other purpose:
- Payment Processors: Apple App Store, Google Play Store (process payments for premium features)
- Analytics Providers: Services like Google Analytics (help us understand app usage and improve features)
- Cloud Storage Providers: Secure storage for user content (only with explicit user consent)
- Social Media Platforms: For sharing functionality (you control what content is shared)
- Customer Support Services: To assist with user inquiries and technical support
We ensure that all third-party providers adhere to strict data protection standards and comply with applicable privacy laws.
4. Information Sharing and Disclosure
We do not sell your personal information to third parties. We may share your information only in the following limited circumstances:
- With Your Consent: We may share your information when you explicitly authorize us to do so (e.g., sharing photos to social media)
- Service Providers: As described in Section 3, to third parties that perform services on our behalf
- Legal Requirements: When required by law, court order, or governmental request, or to protect our rights, property, or safety
- Business Transfers: In connection with a merger, acquisition, or sale of assets (you will be notified of any such change)
- Aggregated/Anonymous Data: We may share non-personally identifiable, aggregated data for research, analytics, or marketing purposes
We will not disclose your personal information to third parties for their marketing purposes without your explicit consent.
5. Security Measures
We implement appropriate technical and organizational security measures to protect your information from unauthorized access, disclosure, alteration, or destruction:
- Encryption of personal data in transit and at rest (SSL/TLS encryption)
- Secure authentication protocols for account access
- Regular security assessments and updates to protect against vulnerabilities
- Access controls limiting employee access to personal information on a need-to-know basis
- Secure storage of user content with restricted access
While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we continuously update our security measures to mitigate risks.
6. User Data Rights
Depending on your jurisdiction, you may have the following rights regarding your personal information:
- Right to Access: Request a copy of the personal information we hold about you
- Right to Correction: Request correction of inaccurate or incomplete personal information
- Right to Deletion: Request deletion of your personal information and content (subject to legal obligations)
- Right to Data Portability: Request a copy of your data in a machine-readable format
- Right to Opt-Out: Opt out of certain data processing activities (e.g., marketing communications)
- Right to Withdraw Consent: Withdraw your consent to data processing at any time
To exercise these rights, please contact us at Kiro@gmail.com with your request. We will respond to valid requests within the timeframes required by applicable law (typically 30 days).
7. Children's Privacy Protection
Kiro is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13 without parental consent, we will take steps to delete such information promptly.
For users between 13 and 18 years of age, we require parental or guardian consent before collecting any personal information. Parents or guardians may contact us to review, correct, or delete their child's personal information.
8. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or compliance requirements:
- Account information: Retained until you request account deletion
- User content (photos): Retained only on your device unless you choose to back up to our cloud services
- Usage data: Retained for up to 12 months for analytics purposes (then anonymized)
- Customer support records: Retained for up to 2 years to resolve inquiries
When we no longer need your personal information, we will securely delete or anonymize it.
9. Policy Updates Mechanism
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments.
9.1 We will notify you of material changes to this policy by:
- Posting the updated policy in the Kiro app with a prominent notice
- Sending an email notification to registered users
- Displaying a pop-up notice in the app upon launch
9.2 The updated policy will become effective 30 days after notification, unless required otherwise by law.
9.3 Your continued use of the Service after the effective date of the updated policy constitutes your acceptance of the changes.
9.4 We will archive all previous versions of this Privacy Policy for at least 5 years and make them available upon request.
10. International Data Transfers
If you are located outside the United States, your information may be transferred to and processed in the United States or other countries where our service providers are located. We ensure that these transfers comply with applicable data protection laws, including implementing standard contractual clauses or relying on adequacy decisions where applicable.
Last updated: January 4, 2026
Kiro - Protecting your memories, protecting your privacy