— Privacy Policy

How we handle your data.

Plain language, our actual practice. Last updated and effective dates below.

Last updated: 7 May 2026Effective: 7 May 2026Version: 1.0

01About this policy

This Privacy Policy explains how 12597918 Canada Inc. (operating as “Kiuro,” “we,” “us,” or “our”) collects, uses, discloses, and safeguards information when you use the Kiuro mobile application, website, and related services (the “Service”).

By creating an account or using the Service, you agree to the practices described here. If you do not agree, please do not use the Service.

In short: we collect what's needed to make Kiuro work, we don't sell your data, and you can export or delete it at any time.

02Information we collect

Information you give us

  • Account information. Name, email, password (hashed), profile photo, and time zone when you create an account.
  • Trip content. Itinerary text, hotel and travel confirmations, dates, locations, notes, and any other content you paste or upload.
  • Photos and media. Photos you upload or import, along with their EXIF metadata (date, time, GPS coordinates, camera settings) when present.
  • Captions and edits. Captions you write or accept, voice preferences, and editing history.
  • Communications. Messages you send us through support, contact forms, or surveys.
  • Payment details. If you subscribe to a paid plan, billing information processed by our payment processor (Stripe). We do not store full card numbers ourselves.

Information collected automatically

  • Device and log data. Device type, operating system, browser, IP address, language, crash reports, and timestamps of your activity.
  • Usage data. Pages and features you use, session duration, and interaction events used to improve the Service.
  • Approximate location. Derived from your IP address. We do not access your precise device location unless you grant permission for a specific feature.

Information from third parties

  • Sign-in providers. If you log in with Google or Apple, we receive your name, email, and profile picture from that provider.
  • Connected services. If you choose to connect a calendar, photo library, or other service, we receive only the data needed to deliver that integration, with your authorization.

03How we use information

We use the information we collect to:

  • Provide, maintain, and improve the Service;
  • Parse pasted plans into structured itineraries and surface relevant information about your trips;
  • Generate caption suggestions in your selected voice;
  • Personalize your experience and remember your preferences;
  • Authenticate you and protect the Service against fraud and abuse;
  • Communicate with you about your account, updates, and (where you've consented) marketing;
  • Process payments and manage subscriptions;
  • Comply with legal obligations and enforce our Terms.

Where required, our legal bases include performance of our contract with you, your consent, our legitimate interests, and compliance with legal obligations.

04How we share information

We do not sell your personal information. We share information only as described below.

  • Service providers. Hosting and infrastructure (Vercel, Supabase, Cloudflare), analytics, error monitoring, customer support, email delivery, and payment processing — bound by contracts that require them to protect your data and use it only for our purposes.
  • AI providers. Caption drafting and itinerary parsing rely on third-party large-language-model providers. Content sent for processing is governed by no-training, zero-retention agreements where available.
  • Legal and safety. When required by law, court order, or to protect rights, safety, or property.
  • Business transfers. In connection with a merger, acquisition, or sale of assets, with notice to you.
  • With your direction. When you explicitly choose to share content (for example, posting to Instagram from within Kiuro).

05Storage & security

Your data is stored on infrastructure operated by reputable cloud providers. We use industry-standard safeguards, including:

  • Encryption in transit (TLS 1.2+) and at rest;
  • Hashed and salted passwords (bcrypt or stronger);
  • Role-based access control and audit logging for our staff;
  • Regular backups and disaster-recovery testing;
  • Vulnerability scanning and dependency monitoring.

No method of transmission or storage is one hundred percent secure. We will notify affected users and the appropriate authorities of any breach involving personal data, as required by law.

06Your rights & choices

Depending on where you live, you may have the right to:

  • Access the personal information we hold about you;
  • Correct inaccurate or incomplete information;
  • Delete your information (subject to limited legal exceptions);
  • Export a portable copy of your data;
  • Withdraw consent for processing based on consent;
  • Object to certain processing or request restriction;
  • Opt out of marketing communications at any time.

You can exercise most of these rights directly inside the Kiuro app under Settings → Privacy & data, or by emailing us at privacy@kiuro.app. We respond within 30 days.

If you are in the European Economic Area, the United Kingdom, or California, you have additional rights under the GDPR, UK GDPR, and CCPA respectively. You may also lodge a complaint with your local data protection authority.

07Cookies & tracking

We use cookies and similar technologies to keep you signed in, remember preferences, and understand how the Service is used. Categories:

  • Strictly necessary — required for the Service to function (cannot be disabled).
  • Functional — remember your preferences (theme, language).
  • Analytics — aggregated usage data to improve the Service.

You can manage cookies through your browser. We honour Global Privacy Control signals and the “Do Not Track” header where applicable.

08Children's privacy

Kiuro is not directed at children under 16, and we do not knowingly collect personal information from anyone under that age. If you believe a child has provided us information, contact privacy@kiuro.app and we will delete it promptly.

09International transfers

We are based in Canada, and our servers may be located in Canada, the United States, or the European Union. By using Kiuro, you consent to your information being transferred to and processed in these jurisdictions. We rely on contractual safeguards (Standard Contractual Clauses, equivalents) for cross-border transfers where required.

10Data retention

We keep your personal information for as long as your account is active and for a reasonable period afterward to comply with legal, accounting, or reporting obligations. When you delete your account, we permanently remove your trip content, photos, and captions within 60 days, except where retention is required by law.

11Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you in the app and by email at least 14 days before the changes take effect. The “Last updated” date at the top reflects the most recent revision.

12Contact us

For privacy questions or to exercise any of your rights:

If you are an EU or UK resident and need to reach our representative, please email privacy@kiuro.app with the subject line “EU representative” and we will provide current contact details.