Privacy Policy
Last updated: 12 September 2026
This Privacy Policy describes how the operator of kiwari.dev (“Kiwari,” “we,” “us,” or “our”) collects, uses, shares, and protects personal information in connection with the website and the Kiwari product (together, the “Services”).
1. Controller
The controller of personal information processed in connection with the Services is the operator of kiwari.dev. Privacy requests may be sent to hello@kiwari.dev.
2. Purposes of processing
Personal information is processed to:
- provide, operate, maintain, and improve the Services;
- create and manage accounts, authenticate users, and provide support;
- process subscriptions, payments, and usage metering;
- communicate about the Services, security matters, and policy updates;
- monitor performance, diagnose issues, and prevent abuse or fraud;
- comply with legal obligations and enforce our terms; and
- measure website and product usage where you have consented or where otherwise permitted by law.
3. Legal bases
Where the GDPR or similar laws apply, processing is based on one or more of the following:
- Contract. to provide the Services you request and to manage your account or subscription.
- Consent. for optional analytics cookies and similar technologies on this website, and where otherwise required.
- Legitimate interests. including securing the Services, preventing abuse, improving reliability, and responding to inquiries, where those interests are not overridden by your rights.
- Legal obligation. where retention or disclosure is required by applicable law.
4. Cookies and similar technologies
Essential storage is used to remember your analytics preference and to operate the site. Non-essential analytics cookies or similar technologies are used only if you accept them. You may change your choice by clearing site data for this website or adjusting browser settings. Declining analytics keeps optional analytics off until you accept.
5. Sharing of information
We do not sell personal information. Personal information may be shared with the following categories of recipients only as needed to operate the Services or as required by law:
- Hosting and infrastructure providers. to deliver the website, APIs, and related technical services.
- Authentication providers. to sign you in and manage account identity.
- Payment and billing providers. including our merchant of record for paid plans.
- Database and storage providers. to store application data needed to operate the product.
- AI and inference providers. to process prompts and generate requested outputs.
- Analytics providers. for website analytics (with consent where required) and product telemetry.
- Professional advisors and authorities. where reasonably necessary for legal, security, or compliance purposes.
Such providers are authorized to process personal information only to perform services on our behalf or, where they act as independent controllers (for example, a merchant of record), under their own privacy notices.
6. International transfers
We and our service providers may process personal information in countries other than the country in which you reside. Where required, appropriate safeguards are used for such transfers, including standard contractual clauses or equivalent mechanisms.
7. Retention
Personal information is retained only for as long as needed to provide the Services, fulfill the purposes described in this policy, resolve disputes, enforce agreements, and meet legal, tax, or accounting requirements. Retention periods vary by data type and context.
8. Categories of personal information
Depending on how you interact with the Services, we may collect the following categories of personal information:
- Identifiers. such as name, email address, account identifiers, and online identifiers.
- Customer and commercial information. such as subscription details, purchase history, and billing status. We do not store full payment card numbers.
- Internet or other electronic network activity information. such as interactions with the Services, diagnostic events, and log data.
- Approximate location information. derived from technical data such as IP address.
- User content and communications. such as information you submit through the Services or send to us.
- Inferences. drawn from the foregoing to the extent needed to provide and improve the Services.
We collect this information directly from you, automatically through your use of the Services, and from service providers that support the Services (such as authentication and payment providers).
9. Rights and choices
Depending on your place of residence, you may have rights to access, correct, delete, or port personal information; to restrict or object to certain processing; and to withdraw consent where processing is based on consent. You may also have the right to lodge a complaint with a data protection supervisory authority.
To exercise these rights, contact hello@kiwari.dev. We may need to verify your request before responding. On this website, analytics cookies may be declined in the consent banner.
10. Children
The Services are not directed to children under 16, and we do not knowingly collect personal information from children under 16. If you believe a child has provided personal information, contact us and we will take appropriate steps.
11. Security
Administrative, technical, and organizational measures are used that are designed to protect personal information. No method of transmission or storage is completely secure, and absolute security cannot be guaranteed.
12. Changes
This Privacy Policy may be updated from time to time. Material changes will be posted on this page, and the “Last updated” date above will be revised.
13. Contact
Privacy questions and requests: hello@kiwari.dev. Security reports: security@kiwari.dev.