Privacy Policies

In short: We collect the information needed to run Kio: your account, the events and photos organizers upload, purchases, and technical data from your device. We use it to provide the service, keep it safe and comply with the law. We do not sell your personal information. You can ask us what we hold about you, correct it, delete it or restrict how we use it, and you can delete your account from the App or from our website. Kio does not use facial recognition today; if we add it, it will be optional and will require your express consent first.

1. Who we are and what this Policy covers

Kio is operated by Danto's App CORP, a company organized under the laws of the State of Georgia, United States of America ("Danto's App", "we", "us" or "our"). This Privacy Policy explains how we collect, use, share, retain and protect personal information when you use the Kio mobile applications, the website at https://kiropsrental.com/kio_website and related services (the "Service"), and the choices and rights you have.

This Policy applies to Users of the Service and also to people who do not use Kio but appear in photos uploaded by an Organizer (see Section 10). Capitalized terms not defined here have the meaning given in our Terms and Conditions.

Each section starts with the full text; where useful, we include examples in plain language to make our practices easier to understand.

2. Who is responsible for your information

Danto's App is responsible for the personal information processed to operate Kio, such as account data, purchase records and technical data.

Organizers decide which photos to upload, which Events to create, whether an Event is public or private, who is granted access and whether photos are sold. Organizers are responsible for having the rights and consents needed to publish photos of the people who appear in them. We process the photos to host, display, deliver, protect and moderate them as described in this Policy.

Contact: kio@dantosapp.com · Danto's App CORP, Atlanta, Atlanta, Georgia, United States of America.

3. Information we collect

3.1 Information you provide

• Account information: name, email address, password (stored in hashed form), profile photo if you add one, preferred language and, if you sign in with Apple or Google, the identifier and information that provider shares with us.
• Event information: event name, date, description, visibility setting (public or private), prices and sales settings.
• Photos and their metadata: the images Organizers upload and the technical data embedded in the files (EXIF metadata), which may include the date, camera model and, if enabled on the device, the location where the photo was taken. [[CONFIRM_EXIF_HANDLING: state whether EXIF/GPS data is removed on upload; we strongly recommend removing location data from published copies.]]
• Access requests: when you request access to a Private Event, we share with the Organizer your name, profile photo, the message you include (if any) and the date of the request.
• Purchase information: photos obtained, price, currency, date, transaction identifiers and payment status. Card details are entered directly with Stripe; we receive only limited information such as the card brand, last four digits and payment result.
• Organizer payout information: to receive payments, Organizers provide identity, tax and bank information directly to Stripe. We receive the account status and payout records needed to operate sales.
• Subscription information: if you subscribe through the Apple App Store or Google Play, we receive confirmation of the subscription, its status and its renewal dates. We do not receive your full payment details.
• Communications: messages you send to support, reports you submit, appeals and your answers to surveys.

3.2 Information collected automatically

• Device and log data: IP address, device model, operating system, app version, language, time zone, dates and times of access, crash reports and error logs.
• Usage data: screens viewed, features used, Events visited, searches within the App and interactions with photos, collected through Firebase (Google) for analytics and app stability.
• Notification tokens: identifiers needed to send push notifications through Firebase Cloud Messaging.
• Approximate location: inferred from your IP address, used for security, fraud prevention and to show prices and taxes for your country. We do not collect precise location from your device for the operation of the Service.

3.3 Information from others

• Photos of you uploaded by Organizers. You may appear in photos uploaded by an Organizer even if you are not a Kio User.
• Reports. Other people may report content or accounts and include information about you.
• Service providers. Stripe, Apple, Google and Firebase may share with us information related to payments, subscriptions, authentication and app performance.

3.4 Information we do not intend to collect

We do not ask for and do not want sensitive information such as government identification numbers, health information, religious or political beliefs, or information about sexual life. Please do not include it in event descriptions, messages or reports unless strictly necessary for a report.

4. Facial recognition and biometric information

Kio does not currently use facial recognition and does not collect biometric identifiers or biometric information.

We may in the future offer an optional feature to help people find photos in which they appear (for example, by comparing a reference photo you provide with the photos of an Event you have access to). If we do, before the feature is activated for you:

• we will update this Policy and show you a separate, specific notice in the App explaining what biometric information is collected (such as a mathematical representation of facial geometry, often called a "face template"), the specific purpose, how long it will be kept and who processes it;
• we will ask for your express, written (electronic) consent, separate from your acceptance of these Terms. The feature will be off by default and refusing will not affect your access to the rest of the Service;
• for users under 18, consent must be given by a parent or legal guardian, and a parent or guardian may use the feature to find photos of their own minor child;
• biometric information will be used only to find matching photos within Events you are authorized to see. It will not be used to identify people for other purposes, will not be sold, leased or traded, will not be used for advertising, and will not be used to train facial recognition models for third parties;
• face templates will be deleted when you withdraw consent, when you delete your account, or when the purpose for which they were collected has been fulfilled, and in any case within the period required by applicable law (for example, no later than three years after your last interaction with the feature under the Illinois Biometric Information Privacy Act), whichever occurs first;
• you may withdraw your consent at any time from the App settings, and we will delete your face templates without undue delay;
• we will publish a biometric information retention schedule and the identity of any provider that processes biometric information on our behalf.

Organizers will not be able to run facial recognition on people who have not given their own consent.

5. How we use your information

• To provide the Service: create and manage accounts, host and display Events and photos, process access requests, deliver photos, process purchases and payouts, and manage subscriptions.
• To keep Kio safe: review and moderate Content, through human review and automated tools where used, investigate reports, detect and prevent fraud, spam, abuse and unauthorized access, protect minors and people in vulnerable situations, and enforce our Terms.
• To comply with the law: keep accounting and tax records, respond to lawful requests from authorities, and report apparent child sexual exploitation to NCMEC as required by U.S. law.
• To communicate with you: send transactional messages (purchase confirmations, access request updates, security alerts, changes to our Terms) and respond to your requests.
• To improve the Service: understand how the App is used, fix errors and develop new features, using aggregated or de-identified data where possible.
• Marketing: send news and offers about Kio only if you agree or as permitted by law. You can unsubscribe at any time.

We do not use your photos to train artificial intelligence models offered to third parties, and we do not use the content of Private Events for advertising.

Where the law requires a legal basis for processing (for example, if you are in the European Economic Area or the United Kingdom), we rely on: performance of our contract with you (to provide the Service); our legitimate interests (security, moderation, fraud prevention, improvement of the Service), balanced against your rights; compliance with legal obligations; and your consent (marketing, optional analytics where required and, in the future, any biometric feature).

6. How information is shared

We do not sell your personal information and we do not share it for cross-context behavioral advertising. We share information only as follows:

• With other Users, according to the Event settings: Content in Public Events is visible to any User. Content in Private Events is visible to the Organizer and to the Users the Organizer approves. Your name and profile photo are visible to Organizers when you request access to their Events, and to Organizers when you obtain their photos.
• With service providers that process data on our behalf, under contract: DigitalOcean (cloud infrastructure and storage of photos through DigitalOcean Spaces and its content delivery network), Google Firebase (authentication [[CONFIRM]], analytics, crash reporting and push notifications), Stripe (payment processing and Organizer payouts), and Apple and Google (app distribution and in-app subscriptions). [[ADD_EMAIL_PROVIDER_AND_OTHERS_IF_ANY]]
• For legal and safety reasons: with law enforcement, courts, regulators or NCMEC when required by law or when we believe in good faith that disclosure is necessary to protect the safety of any person, to investigate fraud or abuse, or to protect the rights and property of Danto's App, our Users or the public.
• In a business transaction: in connection with a merger, acquisition, financing or sale of assets, subject to protections at least equivalent to those in this Policy.
• With your consent or at your direction.

Once a User has legitimately obtained a photo, it may be stored on that User's device and shared outside Kio within the limits of the license described in our Terms. We cannot control copies that leave the Service.

7. Public and private Events

Organizers choose the visibility of each Event. Public Events can be found and viewed by any User and may be discoverable through search inside the App. Private Events are only accessible to Users approved by the Organizer. Private settings reduce exposure but cannot prevent an approved User from capturing or copying what they see. If you are an Organizer, choose Private Events for occasions involving minors or sensitive moments.

8. How long we keep information

We keep personal information for as long as needed for the purposes described in this Policy, unless the law requires or allows a longer period. Typical periods:

• Account information: while your account is active; deleted within [[30]] days after account deletion, except as indicated below.
• Photos and Events: while the Organizer keeps them published; removed from the Service when the Organizer deletes them or deletes the account. Copies in backups are overwritten within [[35]] days.
• Purchase and transaction records: up to 7 years, for accounting, tax and fraud-prevention purposes.
• Moderation records and reports: up to [[3]] years after the decision, to handle appeals, detect repeat violations and protect safety. Content involving the sexual exploitation of minors and related account information is preserved and reported as required by law and is not kept beyond what the law requires.
• Support communications: up to 2 years after the last interaction.
• Logs and analytics: generally up to 14 months, or in aggregated or de-identified form.

We may keep information longer when necessary to comply with a legal obligation, resolve disputes, enforce our agreements or respond to a legal hold.

9. Your rights and choices

Depending on where you live, you may have some or all of the rights below. We extend them to all Users regardless of location, to the extent reasonably possible, subject to legal limits and identity verification.

9.1 Information about, rectification and erasure of your data

You have the right to ask us at any time for information about the personal data we hold about you, its source, the recipients to whom it has been disclosed and the purposes for which it is processed, and to receive a copy of it. You may also ask us to correct inaccurate or incomplete data and to delete your data. You can correct most account information directly in the App. We may keep certain information when the law requires it or when it is necessary to establish, exercise or defend legal claims, to prevent fraud or to protect safety, and we will tell you when that is the case.

9.2 Right to demand processing restrictions

You have the right to ask us to restrict the processing of your personal data, which means that we will store it but not otherwise use it, in the following cases:

• if you dispute the accuracy of your data, for the time we need to verify it;
• if the processing is unlawful and you prefer that we restrict it rather than delete it;
• if we no longer need the data but you need it to establish, exercise or defend legal claims;
• if you have objected to processing based on our legitimate interests, while we determine whether our grounds override yours.

When processing is restricted, we will only process the data, other than storing it, with your consent, to establish, exercise or defend legal claims, to protect the rights of another person, or for important reasons of public interest or legal obligation.

9.3 Other rights

• Objection: you can object to processing based on our legitimate interests and, at any time, to the use of your data for direct marketing.
• Portability: you can ask for a copy of data you provided to us in a structured, commonly used, machine-readable format.
• Withdrawal of consent: where we rely on your consent, you can withdraw it at any time without affecting processing carried out before.
• Non-discrimination: we will not treat you differently for exercising your rights.
• Appeal and complaint: if we deny your request, you can appeal by replying to our decision. You may also have the right to complain to the data protection or consumer protection authority where you live.

9.4 How to exercise your rights

Write to kio@dantosapp.com from the email address associated with your account, indicating the right you want to exercise. We may ask for information to verify your identity, and we will not use it for any other purpose. You may use an authorized agent where the law allows it, and we may ask for proof of authorization. We respond within 30 days, or within the shorter or longer period required by the law that applies to you, and we will tell you if we need more time and why.

9.5 Other choices

• Change the visibility of your Events, approve or reject access requests, and delete photos at any time from the App.
• Turn off push notifications in your device settings.
• Unsubscribe from marketing emails using the link they contain.

10. If you appear in a photo

You may appear in photos uploaded by an Organizer even if you have never used Kio. If you want a photo of you, or of a minor for whom you are the parent or legal guardian, to be removed:

• contact the Organizer of the Event first, if you can, since they decided to publish it; or
• use the "Report" option on the photo in the App, or write to kio@dantosapp.com with the link to the Event or photo and the reason for your request. You do not need a Kio account.

We give priority to requests involving minors, intimate or sexual images, images that put someone's safety at risk, and images published without consent. We may hide the photo while we review the request. We may ask for reasonable information to confirm that the request comes from the person depicted or their legal representative, and we will use it only for that purpose.

11. Deleting your account

You can delete your account at any time:

• In the App: Profile › Settings › Account › Delete account.
• On our website, without needing the App installed: at https://kiropsrental.com/kio_website/en/delete-account. To protect you, we send a confirmation message to the email address associated with the account before deleting it.

When your account is deleted, we delete your profile, your Events, your photos and the personal information associated with the account from our active systems within [[30]] days. We keep only the information described in Section 8 that the law requires or allows us to keep (for example, transaction records and moderation records related to safety), and residual copies in backups are overwritten within [[35]] days. Deleting your account does not cancel In-App Subscriptions; cancel them in your Apple or Google account. Photos that other Users have already legitimately downloaded remain on their devices.

12. Children and teens

Kio is not directed to children under 13, and we do not knowingly collect personal information from children under 13 through their own accounts. If we learn that a child under 13 has created an account, we will delete it and the associated information. Users between 13 and 17 may only use Kio with the permission of a parent or legal guardian and cannot create Events, sell photos or receive payments.

Photos of minors may be uploaded by Organizers, who must have the consent of their parents or guardians. We apply stricter review to reports involving minors and we remove any Content that sexualizes or endangers them. If you are a parent or guardian and believe your child's information or image is on Kio without your consent, contact kio@dantosapp.com.

13. Security

We use technical and organizational measures designed to protect personal information, including encryption in transit (HTTPS/TLS), access controls based on the principle of least privilege, hashed passwords, access to Private Event content through restricted links or authorization checks [[CONFIRM: signed URLs on DigitalOcean Spaces]], monitoring and logging. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a security incident affects your personal information, we will notify you and the authorities when the law requires it. Help protect your account by using a strong, unique password and not sharing your credentials.

14. International transfers

Danto's App is based in the United States, and our service providers may process information in the United States and other countries ([[DIGITALOCEAN_REGION]]). Data protection laws in those countries may differ from those where you live. When required, we use appropriate safeguards for international transfers, such as standard contractual clauses.

15. Cookies on our website

Our website uses only the cookies strictly necessary for it to work: a session cookie, a security cookie to protect forms (CSRF) and a cookie to remember your language. We do not use advertising cookies on the website. If we add analytics or other non-essential cookies, we will update this section and, where required, ask for your consent first. The App uses Firebase as described in Section 3.2.

16. Additional information for U.S. residents

Depending on your state of residence (for example, California, Colorado, Connecticut, Virginia or Texas), you may have the rights described in Section 9, including the rights to know, access, correct, delete, obtain a portable copy and opt out of the sale of personal information, targeted advertising and certain profiling. We do not sell personal information, we do not share it for cross-context behavioral advertising and we do not use it for profiling that produces legal or similarly significant effects. In the last 12 months we have collected the categories of information described in Section 3, from the sources described there, for the purposes in Section 5, and disclosed them to the categories of recipients in Section 6.

17. Changes to this Policy

We may update this Policy. If changes are material, we will notify you in the App, by email or on the Site before they take effect and, where required, ask for your consent. The "Last updated" date shows the date of the most recent change. Previous versions are available on request.

18. Contact

Danto's App CORP
Atlanta, Atlanta, Georgia, United States of America
Privacy: kio@dantosapp.com
Safety reports: kio@dantosapp.com

This Policy is available in English and Spanish. In case of any conflict, the English version prevails, unless applicable law requires otherwise.