Privacy Policy

1. Who We Are

Kitio is operated by CATKAYA LIMITED, which is responsible for the personal information described in this Privacy Policy.

For privacy questions or support:

Email: support@kitioapp.com

2. Scope

This Privacy Policy explains how Kitio collects, uses, stores and protects information when you use the Kitio mobile application, your Kitio account, cloud synchronization, purchases and related services.

Some Kitio information remains only on your device. Other information may be transmitted to Kitio or to service providers when necessary to provide account, cloud, purchase, authentication, security or technical functionality.

3. Privacy Summary

Kitio:

• does not display third-party advertising;
• does not sell personal information;
• does not use personal information for targeted advertising;
• does not use personal information for cross-app advertising tracking;
• does not share personal information with data brokers;
• does not use Apple's IDFA for advertising purposes.

Kitio does not currently use Firebase Analytics, Firebase Crashlytics or Firebase Performance Monitoring as dedicated telemetry products.

However, integrated Firebase, Google, Apple and security services may process limited account, device, usage and diagnostic information as part of their normal operation.

4. Information We Process

4.1 Account Information

When you create or use a Kitio account, we may process:

• your name;
• your email address;
• your Kitio or Firebase user ID;
• authentication-provider identifiers;
• account status and authentication information.

Authentication may be provided through methods such as email authentication, Google Sign-In or Sign in with Apple.

This information is used to create, authenticate, secure and manage your account.

4.2 Device and Technical Information

Kitio and its service providers may process limited technical information such as:

• device or application identifiers;
• Firebase Installation ID or similar identifiers;
• application version and build number;
• operating-system information;
• language, region and time-zone information;
• IP address;
• request and timestamp information;
• app-integrity or attestation information;
• limited usage and diagnostic metadata.

Depending on the service involved, app stores may classify this information as Device ID, Other Usage Data, Other Diagnostic Data or Other Data.

This information is not used by Kitio for targeted advertising or cross-app advertising tracking.

4.3 Purchases and Entitlements

Kitio may process information related to:

• purchases and purchase restoration;
• product identifiers;
• transaction or purchase references made available to Kitio;
• module entitlements;
• activation status;
• access rights.

This information is used to determine which Kitio modules and features you are entitled to access.

Payments made through the Apple App Store or Google Play are processed by those platforms. CATKAYA LIMITED does not receive your full payment-card number, bank-account credentials or complete payment-instrument details.

4.4 Budget Planner Information

If you use Budget Planner cloud synchronization, information you enter may be transmitted to and stored in Kitio's cloud infrastructure and associated with your account.

This may include:

• income and expenses;
• budgets and categories;
• debts;
• savings goals;
• assets and liabilities;
• recurring payments;
• other financial information you choose to enter.

This information is used only to provide Budget Planner functionality, cloud synchronization, restoration and related account features.

Kitio does not use Budget Planner information for advertising, credit scoring or determining creditworthiness.

Kitio is not a bank, lender, credit-reporting agency, investment adviser or financial adviser.

4.5 Product Interaction and Operational Records

Kitio may create limited server-side records necessary to operate, secure and verify the service.

These records may relate to:

• module activation;
• entitlement restoration;
• access-code redemption;
• .kitio package validation or import;
• purchase verification;
• security and abuse-prevention events.

Records may include a user ID, action type, result, relevant module or package information, timestamps and limited technical metadata.

These records are used for App Functionality, security, entitlement management and fraud prevention.

They are not used for advertising.

4.6 Usage and Diagnostic Information

Kitio does not currently use Firebase Analytics, Firebase Crashlytics or Firebase Performance Monitoring as dedicated analytics or monitoring products.

However, integrated services may automatically process limited technical information required to operate their services.

This may include:

• device identifiers;
• usage metadata;
• service heartbeat or configuration information;
• diagnostic information;
• app-integrity information;
• technical performance information;
• limited crash-related information where applicable to an embedded third-party component.

For app-store privacy purposes, some of this information may be classified as:

• Device ID;
• Product Interaction;
• Other Usage Data;
• Other Diagnostic Data;
• Crash Data;
• Performance Data;
• Other Data.

Such information may be used for application functionality, analytics, security, reliability and technical operation.

It is not used by Kitio for targeted advertising or cross-app advertising tracking.

5. Information Stored Locally

Not all information created in Kitio is transmitted to Kitio's servers.

In the current version, Focus notes and locally stored Focus information are not automatically synchronized to Kitio cloud services.

Photos, files or attachments selected for local features are not automatically uploaded to Kitio solely because you selected them.

Budget Planner information may remain local when cloud synchronization is not used. When Budget cloud synchronization is enabled, synchronized information is processed as described in this Privacy Policy.

6. Exports and Sharing

When you intentionally export, save or share information from Kitio, the selected information may be transferred to another application or service through your device's sharing features.

If you choose to transfer information to email, cloud storage, messaging applications or another third-party service, that provider may process the information under its own privacy policy.

Kitio does not automatically upload locally generated exports to unrelated third-party services.

7. Service Providers

Kitio uses third-party services necessary to provide application functionality.

These may include:

• Google Firebase services, including Authentication, Cloud Firestore, Cloud Functions, Remote Config and App Check;
• Google Sign-In;
• Sign in with Apple;
• Apple App Store;
• Google Play.

These providers may process limited information required to provide their services.

CATKAYA LIMITED does not provide Kitio user information to advertising networks or data brokers.

Where service providers process personal information on our behalf, we use appropriate contractual and technical safeguards where required by applicable law.

8. How We Use Information

We use information primarily to:

• create and manage Kitio accounts;
• authenticate users;
• provide requested Kitio features;
• synchronize supported cloud information;
• verify purchases and entitlements;
• restore access to purchased features;
• protect accounts and backend systems;
• prevent fraud, tampering and abuse;
• maintain technical reliability;
• respond to support requests;
• comply with applicable legal obligations.

Where applicable data-protection law requires a legal basis, processing may be based on performance of a contract, legitimate interests, compliance with legal obligations or consent where required.

Our legitimate interests include securing Kitio, preventing fraud and abuse, maintaining reliable services and protecting users and CATKAYA LIMITED.

9. Data Retention

We retain personal information only for as long as reasonably necessary to provide Kitio, maintain security, comply with applicable law and resolve disputes.

Account and synchronized cloud information is generally retained while your account remains active.

When an account is deleted, information associated with that account is removed or anonymized where reasonably possible, subject to:

• legal retention requirements;
• fraud and security investigations;
• dispute resolution;
• backup and deletion cycles;
• protection of legal rights.

Information stored independently by Apple, Google or another third-party provider is subject to that provider's own retention policies.

10. Account Deletion and Privacy Rights

You can request deletion of your Kitio account from inside the application:

Settings → Delete Account

If you cannot access your account, contact:

support@kitioapp.com

Account deletion and deletion of locally stored device information are not necessarily the same operation. Local information may remain on the device until removed through Kitio, application-data reset, operating-system controls or application uninstall.

Depending on where you live, applicable privacy law may give you rights to:

• request access to your personal information;
• request correction;
• request deletion;
• request restriction of processing;
• receive certain information in a portable format;
• object to certain processing;
• withdraw consent where processing is based on consent;
• lodge a complaint with the relevant data-protection authority.

Right to Object

Where we rely on legitimate interests as the legal basis for processing, you may have the right to object to that processing.

To exercise a privacy right, contact:

support@kitioapp.com

We may request reasonable information to verify your identity before processing a request.

11. International Processing

CATKAYA LIMITED is registered in the United Kingdom and uses service providers that may operate internationally.

As a result, information may be processed outside the country in which you live.

Where applicable law requires safeguards for an international transfer, we use appropriate legally recognized safeguards or transfer mechanisms.

12. Security

CATKAYA LIMITED uses reasonable technical and organizational safeguards designed to protect personal information.

These may include:

• authenticated access;
• backend authorization controls;
• application-integrity checks;
• entitlement validation;
• anti-abuse measures;
• transport encryption;
• restricted access to backend systems.

No application, network or storage system can guarantee absolute security.

If you believe your account or information has been compromised, contact:

support@kitioapp.com

13. Children

Kitio is not specifically directed to children under the age of 13.

Kitio does not knowingly use children's information for targeted advertising or behavioural profiling.

If you are a parent or legal guardian and believe a child has provided personal information in circumstances requiring parental authorization, contact us.

14. Changes to This Privacy Policy

We may update this Privacy Policy when Kitio's functionality, service providers or legal obligations change.

The Last updated date at the top shows when the Policy was most recently revised.

Material changes will be reflected on this page and, where appropriate, through the Kitio application.

15. Contact

For privacy questions, account-deletion assistance or other requests:

CATKAYA LIMITED
71–75 Shelton Street
Covent Garden
London WC2H 9JQ
United Kingdom

Email: support@kitioapp.com