Privacy Policy

This Privacy Policy explains how Archicava SRL ("Kizuno," "we," "us," or "our"), a company registered in Romania at Str. Tudor Vladimirescu 39A, Constanța, Romania (Company Registration No. J2021002879139, CUI 44792301), collects, uses, shares, and protects information when you use the Kizuno mobile application, this website, and any related services (together, the "Service").

By creating an account or otherwise using the Service, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree, please do not use the Service.

Kizuno acts as the "data controller" (under the EU General Data Protection Regulation, "GDPR") for the personal data described below.

1. Information We Collect

1.1 Information you provide directly

• Account information: email address, display name, username, and (optionally) a profile photo.
• Authentication data: if you sign in with Apple or Google, we receive the identifier and any name/email that provider chooses to share.
• Business Owner information: if you register a Community (business) profile - whether from the app or from this website's dashboard - we collect your business name, category, description, address, logo/cover images, and payment/subscription details.
• User content: photos submitted as proof of completing a mission, posts, messages, community reports, and any other content you choose to submit.
• Friend and social data: friend requests, accepted friendships, and block lists you create.
• Support communications: anything you send us when you contact support.

1.2 Information collected automatically

• Location data: with your permission, we collect your device's precise location to show nearby communities on the Explore map, personalize your Feed, and to power venue check-in style features. You can decline or later revoke location permission in your device settings; some features will not work without it.
• Push notification token: a device-specific token (via Apple/Google push services, through Expo) used to deliver notifications. You can disable notifications in your device settings.
• Usage data: app and website interactions, screens/pages viewed, and similar diagnostic information needed to operate and improve the Service.
• Transaction and loyalty data: records of Points earned, redeemed, transferred to friends, or received, tied to the specific Community (business) where they were earned - see our Terms of Service for how Points work.
• Device information: device model, operating system version, and app version, for compatibility and troubleshooting.
• Website log data: like most websites, our hosting provider automatically records standard technical information for requests to this site - IP address, browser type, and pages visited - used for security, abuse prevention, and diagnostics.

1.3 Information from third parties

• Payment processors: if you subscribe to a paid plan, our payment providers (Apple, Google, and/or Stripe) share limited transaction confirmation data with us (e.g., subscription status, plan tier). We do not receive or store your full card number.

2. How We Use Your Information

We use the information above to:

• create and maintain your account and let you use the Service's core features (joining/managing Communities, earning and redeeming Points, sending Points to friends, completing missions);
• show you relevant nearby Communities and personalize the Feed;
• send transactional and (where you have not opted out) promotional push notifications;
• process subscription payments and manage Business Owner accounts, including through this website's dashboard;
• detect, investigate, and prevent fraud, abuse, rate-limit violations, and violations of our Terms of Service;
• review and moderate user-submitted content, including mission-proof photos and community reports;
• respond to support requests; and
• comply with legal obligations.

3. Legal Basis for Processing (EU/EEA users)

We process your personal data on the following legal bases:

• Performance of a contract - to provide the Service you signed up for (account, Points, missions, subscriptions).
• Consent - for location access, push notifications, and any optional marketing communications, each of which you may withdraw at any time.
• Legitimate interests - for fraud prevention, rate-limiting abuse, service security, and product analytics, balanced against your rights.
• Legal obligation - where we must retain or disclose data to comply with law (e.g., tax records for Business Owner subscriptions).

4. How We Share Your Information

• With other users: your username, display name, and avatar are visible to other users (e.g., in friend search, community member lists). Business Owners of a Community you join can see your username/display name, your Point balance and transaction history within their Community only, and your join date. Business Owners cannot see your email address, other Communities you belong to, or your friends list.
• With service providers ("sub-processors") who process data on our behalf under contract:
  • Supabase - database, authentication, and file storage hosting.
  • Expo (Expo Push Service) - delivery of push notifications.
  • RevenueCat - subscription/entitlement management.
  • Stripe and Apple/Google (In-App Purchase) - payment processing.
  • Our website hosting provider - for serving this website and processing the associated technical logs described in Section 1.2.
  • Google Analytics (Google Ireland Limited) - website usage analytics, only if you accept our cookie banner; see our Cookie Policy.
• For legal reasons: if required by law, court order, or to protect the rights, safety, or property of Kizuno, our users, or the public.
• Business transfers: if Kizuno is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction; we will notify you before your data becomes subject to a different privacy policy.

We do not sell your personal data.

5. International Data Transfers

Our service providers may process data outside Romania/the EEA (e.g., in the United States). Where this occurs, we rely on appropriate safeguards such as Standard Contractual Clauses or the provider's certified adequacy framework.

6. Data Retention

We retain personal data for as long as your account is active, and afterward for as long as needed to comply with legal obligations, resolve disputes, and enforce our agreements. Point/transaction ledger records tied to a Community may be retained longer for financial and fraud-audit purposes even after account deletion, in de-identified form where possible.

7. Your Rights

If you are in the EEA, UK, or Romania, you have the right to:

• Access the personal data we hold about you;
• Rectify inaccurate data;
• Erase your data ("right to be forgotten"), subject to legal retention requirements;
• Restrict or object to certain processing;
• Data portability - receive your data in a structured, machine-readable format;
• Withdraw consent at any time (e.g., revoke location access) without affecting the lawfulness of prior processing;
• Lodge a complaint with Romania's data protection authority, ANSPDCP (www.dataprotection.ro), or your local supervisory authority.

To exercise these rights, contact us at [email protected]. You can also request account deletion directly in the app under Profile → Account & Privacy.

8. Children's Privacy

The Service is not directed to, and may not be used by, anyone under 16 years old. We do not knowingly collect personal data from children under 16. If we learn we have done so, we will delete it promptly. Contact us at [email protected] if you believe a child has provided us data.

9. Security

We use industry-standard measures (encryption in transit, access controls, row-level security on our database) to protect your data. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. Cookies and Tracking

The Kizuno mobile app does not use browser cookies. This website uses strictly necessary cookies to keep you signed in, and - only if you accept the cookie banner - Google Analytics to understand how visitors use the site. See our Cookie Policy for full details, including how to change your choice.

11. Your Choices

• Location: control via your device's app permission settings.
• Push notifications: control via your device's notification settings, and per-category in-app (e.g., mission updates, friend requests) where available.
• Cookies: control or clear cookies via your browser settings - see our Cookie Policy for what this means for signed-in features.
• Marketing communications: opt out at any time via the unsubscribe link or in-app settings.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via the app, this website, or email before they take effect. Continued use of the Service after changes take effect constitutes acceptance.

13. Contact Us

Archicava SRL Str. Tudor Vladimirescu 39A, Constanța, Romania Email: [email protected]