Privacy Policy
Last updated: November 9, 2026
This policy explains what information Kipi Apay, operated by Kipi Apay, collects when you use our website and app, why we collect it, and the choices you have. If you have questions, write to privacy@example.com.
What we collect
Account information: your name, email address, preferred language and a securely hashed version of your password. We never store your password itself.
Business information you enter: businesses, locations, products and services, prices, stock, sales, payments, expenses, customers and their contact details, team members and their roles. You decide what goes in; we store it so the app can show it back to you and your team.
Usage and technical information: the sessions you are signed in with (including your browser's user agent), a history of important changes in each business (who changed what and when), and server logs that include IP addresses and the pages requested. We use these to keep the service secure and working.
Billing information: if you subscribe, payments are handled by Stripe. We receive your subscription status and a customer reference, but never your full card number.
How we use it
- To provide the app: sign you in, show your businesses, calculate prices, profit and reports.
- To send emails you need, such as confirming your address, invitations to a business and password resets.
- To keep the service secure: limiting sign-in attempts, investigating abuse and fixing errors.
- To run subscriptions and free trials.
- To understand how people use the public website, only if you accept analytics cookies.
We do not sell your information and we do not use the business data you enter for advertising.
Support access
When you ask for help, a member of our support team may sign in to your business to look at the problem. Support sessions are time-limited, require a written reason, and appear in your business's change history so you can see what was done.
How long we keep it
We keep your account and business data while your account is open, because your sales, stock and financial history depend on it. Records that are part of that history are archived rather than deleted while the business is active.
If you ask us to delete your account or a business you own, we will delete or anonymize the data within 30 days, except where we must keep some records to meet legal, tax or accounting obligations. Backups are overwritten on a rolling schedule. Server logs are kept for a limited time.
Security
Passwords are hashed with a modern algorithm, connections are encrypted, the session cookie is protected from scripts, and each business's data is kept separate from every other business. No system is perfectly secure, but we work to protect your information and will tell you without undue delay if a breach affects your data.
Your choices and rights
You can update your name and language in the app at any time. You can ask us for a copy of your personal information, to correct it, or to delete it, by writing to privacy@example.com. Depending on where you live, you may have additional rights, such as objecting to certain processing or complaining to a data protection authority. We will answer requests within 30 days.
If a business you belong to was set up by someone else, that business's owner controls its data; we may refer your request to them.
Children
Kipi Apay is a tool for running a business and is not meant for children under 16. We do not knowingly collect information from them.
Changes to this policy
If we change this policy, we will update the date at the top. If the change is significant, we will also tell you by email or in the app before it takes effect.
Contact
Kipi Apay
Email: privacy@example.com