1. Information We Collect
1.1 Information You Provide Directly
When you register or use the Service, we may collect:
- Account information — name, email address, and password (stored in hashed form)
- Profile / card information — job title, company, phone number, social links, profile photo, and any other content you add to your digital card
- Payment information — billing address and payment method details (processed by a third-party payment provider; we do not store full card numbers)
- Communications — messages you send to our support team
1.2 Information Collected Automatically
When you access the Service, we automatically collect:
- Log data — IP address, browser type, operating system, referring URLs, pages visited, and timestamps
- Device information — device type, unique identifiers, and mobile network information
- Usage data — features used, links clicked, NFC card tap and view events
- Cookies — see Section 5 for details
1.3 Information from Third Parties
We may receive information from OAuth providers (e.g. Google, LinkedIn) if you choose to sign in via a third-party service, and from payment processors confirming transaction status.
2. How We Use Your Information
We use the information we collect to:
- Provide and operate the Service — create and display your digital business card, process NFC tap events, and manage your account
- Process payments — handle subscription billing and invoicing
- Communicate with you — send transactional emails and, where permitted, marketing communications
- Improve the Service — analyse usage trends, debug issues, and develop new features
- Ensure security — detect and prevent fraud, abuse, or unauthorised access
- Comply with legal obligations — respond to lawful requests from authorities
We do not sell your personal information to third parties.
3. How We Share Your Information
3.1 With Service Providers
We engage trusted third-party vendors for cloud hosting, email delivery, payment processing, and analytics. These providers are contractually bound to use your information only as necessary to provide their services to us.
3.2 Publicly Visible Profile Data
Information you add to your digital business card (name, contact details, links, photo) is designed to be shared with anyone who taps or scans your NFC card, or visits your public card URL. You control what appears on your card.
3.3 Business Transfers
If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.
3.4 Legal Requirements
We may disclose your information if required by law or in response to valid requests by public authorities (e.g. a court order or government agency).
4. Data Retention
We retain your personal information for as long as your account is active or as needed to provide the Service. You may request deletion of your account at any time (see Section 8). We may retain certain information for a limited period after account deletion as required by law or for legitimate business purposes such as resolving disputes.
5. Cookies
We use cookies and similar tracking technologies to operate and improve the Service:
| Type | Purpose |
|---|---|
| Essential | Required for the Service to function — session management, authentication |
| Preference | Remember your settings such as language (Arabic / English) and display preferences |
| Analytics | Understand how visitors use the Service so we can improve it |
| Marketing | Deliver relevant advertisements where applicable and permitted |
You can control cookies through your browser settings. Disabling essential cookies may affect Service functionality.
6. Security
We implement industry-standard technical and organisational measures — including HTTPS/TLS encryption, hashed password storage, and restricted internal access — to protect your information. No method of internet transmission is completely secure; we cannot guarantee absolute security.
7. International Data Transfers
The Service may be operated from servers located outside your country of residence. By using the Service, you consent to the transfer of your information to those servers. We take steps to ensure such transfers comply with applicable data protection laws.
8. Your Rights
Depending on your location, you may have the following rights regarding your personal information:
- Access — request a copy of the information we hold about you
- Correction — request that inaccurate or incomplete information be corrected
- Deletion — request that we delete your personal information
- Portability — request your data in a structured, machine-readable format
- Objection / Restriction — object to or request restriction of certain processing activities
- Withdraw Consent — where processing is based on consent, withdraw it at any time
To exercise any of these rights, contact us at the address in Section 12. We will respond within a reasonable timeframe consistent with applicable law.
9. Children's Privacy
The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will promptly delete it.
10. Third-Party Links
The Service may contain links to third-party websites or services. We are not responsible for their privacy practices and encourage you to review their policies before providing any personal information.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The updated version will be indicated by a revised "Last Updated" date. We encourage you to review this policy periodically.
12. Contact Us
Email: privacy@example.com
Mailing Address:
kialik.com
This document was last updated on August 16, 2026.