Privacy

Who is responsible

Kiploy is operated by GonzaloLP, CVR DK41705175, Denmark. GonzaloLP is the data controller for the processing described in this notice.

Data we process

Depending on how you use Kiploy, we may process account and contact details, authentication data, merchant and membership information, billing records, support messages, and technical information such as IP address, browser, device, website interactions and security logs.

Why we process data

We process data to provide and secure the service, manage accounts and subscriptions, deliver Wallet and communication features, answer support requests, meet legal obligations, prevent misuse and, with consent, understand the public website and commercial journey.

Legal basis

Processing may be necessary to perform a contract, comply with a legal obligation, or pursue legitimate interests in operating and securing Kiploy. Optional analytics or marketing technologies would only be used after consent.

Cookies and similar technologies

Kiploy uses necessary technologies for authentication, security, language, account context and cookie preferences. Google Analytics is optional and is loaded only after consent on the public website and commercial journey. The cookie policy contains the current inventory and durations.

Service providers

Kiploy uses Vercel for application hosting, Supabase for authentication and data storage, Stripe for payments, Resend for transactional email, Apple and Google for Wallet functionality, and Google Analytics for consented website measurement. Each provider processes data for the relevant service under its applicable terms and data protection commitments.

International transfers

Some providers may process data outside Denmark or the European Economic Area. Where required, Kiploy relies on an approved transfer mechanism and appropriate safeguards.

How long data is kept

Data is kept only for as long as needed for the purpose for which it was collected, to provide the service, resolve disputes, secure accounts, and comply with accounting or other legal obligations.

Your rights

Subject to applicable law, you may request access, correction, deletion, restriction, portability, or object to processing. You may withdraw consent at any time without affecting processing that occurred before withdrawal.

You may also lodge a complaint with the Danish Data Protection Agency, Datatilsynet.

Contact

Contact Kiploy with privacy or data protection questions.