Privacy Policy for Kizu.ai

Last Updated: April 14, 2025

Table of Contents

1. Introduction

Welcome to Kizu.ai ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you about how we look after your personal data when you visit our website and use our services, and tell you about your privacy rights and how the law protects you.

This privacy policy applies to personal data we collect through our website, mobile application, and related services (collectively, the "Service").

2. Data Controller

Kizu.ai is the controller responsible for your personal data. If you have any questions about this privacy policy or our data practices, please contact us at:

Email: privacy@kizu.ai

Postal address: Gabriel de Souza Tomitsuka, Entrischenbrunn 15B, 85307 Hettenshausen, Germany

3. The Data We Collect About You

Personal data means any information about an individual from which that person can be identified. We may collect, use, store, and transfer different kinds of personal data about you, which we have grouped as follows:

Identity Data

First name, last name, username or similar identifier

Contact Data

Email address, telephone number

Technical Data

Internet protocol (IP) address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform

Profile Data

Your check-in questions, responses to check-ins, goals, preferences, feedback, and survey responses

Usage Data

Information about how you use our website and services

Communication Data

Your preferences in receiving communications from us

We do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data) unless explicitly provided by you as part of your customized check-in questions. If your usage involves health-related check-ins (such as for eating disorders), this information is treated with the highest level of security and confidentiality.

4. How We Collect Your Personal Data

We use different methods to collect data from and about you including through:

5. How We Use Your Personal Data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

We have set out below a description of the ways we plan to use your personal data:

6. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. We limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

7. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data, and whether we can achieve those purposes through other means, and the applicable legal requirements.

In some circumstances, you can ask us to delete your data. See "Your Legal Rights" below for further information.

8. International Transfers

We may transfer your personal data to third-party service providers who may be located outside the European Economic Area (EEA). Whenever we transfer your personal data out of the EEA, we ensure a similar degree of protection is afforded to it by implementing appropriate safeguards, such as using standard contractual clauses approved by the European Commission.

9. Your Legal Rights

Under the General Data Protection Regulation (GDPR) and other applicable data protection laws, you have specific rights in relation to your personal data:

9.1 Right to Access

You have the right to request copies of your personal data. We may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive.

9.2 Right to Rectification

You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.

9.3 Right to Erasure ("Right to be Forgotten")

You have the right to request that we erase your personal data, under certain conditions. We will comply with your erasure request when:

When we receive a deletion request, we will:

We may deny a deletion request where retaining the information is necessary:

9.4 Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data, under certain conditions.

9.5 Right to Data Portability

You have the right to request that we transfer the data we have collected to another organization, or directly to you, under certain conditions.

9.6 Right to Object

You have the right to object to our processing of your personal data, under certain conditions.

9.7 Right to Withdraw Consent

Where we are relying on consent to process your personal data, you have the right to withdraw this consent at any time.

To exercise any of these rights, please contact us using the details provided in the "Contact Us" section. We will respond to all legitimate requests within one month.

10. Cookies

We use cookies and similar tracking technologies to track the activity on our Service and hold certain information. Cookies are files with a small amount of data which may include an anonymous unique identifier.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

11. Changes to This Privacy Policy

We may update our privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "Last Updated" date.

You are advised to review this privacy policy periodically for any changes. Changes to this privacy policy are effective when they are posted on this page.

12. Contact Us

If you have any questions about this privacy policy, please contact us:

By email: privacy@kizu.ai

13. Supervisory Authority

You have the right to make a complaint at any time to your local supervisory authority for data protection issues. We would, however, appreciate the chance to deal with your concerns before you approach the authority, so please contact us in the first instance.