Privacy Policy

Kiima ("we", "us", "our") is a social gifting and support pool platform that lets creators receive monetary gifts through a personalised link. Our platform is available at kiima.app.

If you have questions about this policy, contact us at hello@kiima.app.

When you create a Kiima account we collect:

• Your email address and password (via Supabase Auth)

• Your display name, username, bio, and profile avatar

• Your selected currency

• Social media links you choose to add

When a gifter sends a gift we collect:

• The display name or social handle the gifter provides (or "Anonymous" if they choose)

• The gift amount

• Payment reference from Paystack (we do not store card numbers or bank details)

We also collect standard server logs (IP address, browser type, pages visited) for security and debugging purposes.

We use the information we collect to:

• Operate and improve the Kiima platform

• Display your public creator profile to gifters

• Process gifts and calculate fees via Paystack

• Send transactional emails (e.g. password reset)

• Detect and prevent fraud or abuse

• Comply with legal obligations

We do not sell your personal information to third parties.

All payment processing is handled by Paystack (paystack.com). When a gifter completes a payment:

• Card and bank details are entered directly on Paystack's secure checkout — Kiima never sees or stores them

• Paystack sends us a webhook confirming the transaction was successful

• We record the gift amount, platform fees, and Paystack's transaction reference

Paystack's own privacy policy governs how they handle payment data. You can read it at paystack.com/privacy.

Gifters may choose to contribute anonymously. When a gifter selects "Stay anonymous":

• Their display name is stored as NULL in our database

• They appear publicly as "Anonymous"

• This anonymity is absolute — even Kiima administrators cannot reveal the identity of an anonymous gifter

We share your data only with:

• Supabase — database, authentication, and file storage (supabase.com)

• Paystack — payment processing (paystack.com)

• Vercel — hosting and edge delivery (vercel.com)

• Resend — transactional email delivery (resend.com)

Each of these providers is bound by their own privacy policies and data processing agreements. We do not share your data with advertisers, data brokers, or any other third parties.

Kiima uses session cookies strictly necessary for authentication. We do not use advertising cookies, cross-site tracking, or analytics that identify individual users. Standard server access logs are retained for up to 90 days for security purposes.

We retain your account data for as long as your account is active. If you wish to delete your account, contact us at hello@kiima.app and we will remove your profile and personal data within 30 days, except where retention is required by law (e.g. financial records).

Contribution records may be retained for accounting and compliance purposes even after account deletion.

Depending on your location, you may have the right to:

• Access the personal data we hold about you

• Correct inaccurate data

• Request deletion of your data

• Object to or restrict processing of your data

• Receive a copy of your data in a portable format

To exercise any of these rights, contact us at hello@kiima.app.

We use industry-standard measures to protect your data, including encrypted connections (HTTPS), row-level security on our database, and restricted access to production systems. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Kiima is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us at hello@kiima.app and we will delete it promptly.

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of Kiima after changes are posted constitutes your acceptance of the updated policy.