Privacy Policy

Kizu ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services (collectively, the "Service").

1. Information We Collect

Information You Provide

• Account Information: When you create an account, we collect your email address or phone number. If you sign up with a phone number, we store it to deliver verification codes via SMS.
• Profile Information: You may optionally provide your name and profile photo.
• Content: Photos, videos, audio recordings (memories), comments, and messages you upload or create within the app.
• Contacts: If you grant permission, we access your device contacts to help you connect with friends and family.

Information Collected Automatically

• Device Information: Device type, operating system, and unique device identifiers.
• Photo Metadata: Date, time, and location data embedded in your photos (EXIF data), if present.
• Usage Data: How you interact with the app, including features used and time spent.
• Location Data: With your permission, we collect location data to tag photos with where they were taken.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process your account registration and manage your subscription
• Enable you to upload, organize, and share photos with your circles
• Facilitate communication between you and other users
• Send you service-related notifications
• Respond to your comments, questions, and support requests
• Detect, prevent, and address technical issues and security threats

Communications and Verification

We use your email address or phone number to send verification codes when you sign in. These are transactional messages required to authenticate your identity.

• Email verification: If you register with an email address, we send verification codes via email each time you sign in.
• SMS verification: If you register with a phone number, you consent to receiving SMS verification codes at that number. Message and data rates may apply. Message frequency varies based on sign-in activity (typically 1-2 messages per session). You can change your preferred verification method in account settings.

We do not use your email address or phone number for marketing or promotional communications unless you separately opt in.

3. How We Share Your Information

We do not sell your personal information. We share your information only in the following circumstances:

• With Your Circles: Photos, albums, and content you explicitly share with your circles are visible to members of those circles.
• Service Providers: We work with third-party companies that help us operate our service (e.g., cloud hosting, payment processing). These providers are contractually obligated to protect your information.
• Legal Requirements: We may disclose information if required by law or in response to valid legal requests.
• Business Transfers: If Kizu is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4. Data Storage and Security

Your data is stored securely using industry-standard encryption:

• All data is encrypted in transit using TLS/SSL
• Data at rest is encrypted using AES-256 encryption
• We use secure authentication methods including biometric options
• Access to your data is restricted to authorized personnel only

5. Your Rights and Choices

You have the following rights regarding your data:

• Access: You can access your personal information through the app.
• Export: You can export all your data (photos, albums, memories) at any time via Settings > Export Data.
• Correction: You can update your account information in the app.
• Deletion: You can delete your account and all associated data by contacting support.
• Permissions: You can revoke app permissions (camera, photos, location, contacts, microphone) through your device settings.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide you services. If you delete your account, we will delete your personal information within 30 days, except where we are required to retain it for legal purposes.

7. Children's Privacy

Kizu is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

8. Third-Party Services

Our Service may integrate with third-party services:

• Cloud Import: If you connect Google Photos, iCloud, Dropbox, or other services, we access only the data necessary to import your photos.
• Payment Processing: Subscription payments are processed by Stripe and/or Apple. We do not store your full payment card details.
• Push Notifications: We use Firebase Cloud Messaging to deliver notifications.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically.

11. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at:

• Email: privacy@kizu.com
• Support: support@kizu.com

12. Our Anti-Spam Commitment

Kizu is built to be a safe space for families and friends. We use a progressive verification system with multiple layers of protection — including email intelligence, invitation quotas, trust scoring, and geographic risk assessment — to keep bad actors out while making it easy for real people to connect.

New accounts have a 24-hour waiting period, and flagged accounts can appeal through phone verification, community petitions, or location verification.

Read our full Anti-Spam policy →