Privacy Policy

1. Information we collect

Account information

When you create a customer account, we collect your name and email address, and a password (stored as a secure one-way hash, never in plain text). If you sign in with Google instead, we receive your name, email address, and profile photo from your Google account, and do not receive your Google password.

Reservation information

When you make a reservation, we collect the restaurant, date, time, and party size, and any special requests, occasion, or phone number you choose to provide. If you opt in, we also record your marketing communications preference for that reservation.

Content you post

If you submit a review, we collect its rating and text. Reviews are moderated before appearing publicly on the restaurant's page.

Restaurant accounts

Restaurant managers and staff have separate accounts, created by invitation, with their own name, contact details, and login credentials, used solely to operate their restaurant's presence on Kiiü.

Technical information

Like most web services, our servers automatically log standard technical information with each request (such as IP address and browser type) for security and reliability purposes — see Section 5.

2. How we use your information

We use the information above to:

• create, secure, and let you sign in to your account;
• process, confirm, and let you manage or cancel your reservations;
• send you transactional emails: confirmations, reminders, modification notices, and cancellations relating to your bookings;
• send you marketing communications, but only if you've opted in, and you can opt out at any time;
• display your published reviews on the relevant restaurant's page;
• detect, investigate, and prevent fraud, abuse, and security incidents; and
• comply with our legal obligations.

We do not use your information for third-party advertising, and we do not run analytics or advertising trackers on this site.

3. How we share your information

• With the restaurant you reserve with — your name, contact details, and reservation details, which they need to honor your booking.
• With service providers who help us operate Kiiü, under agreements that limit their use of your information to providing that service: a cloud hosting and storage provider, an email delivery service, and Google (only if you choose to sign in with Google).
• If required by law, or to protect the rights, property, or safety of Kiiü, our users, or the public.
• If Kiiü is involved in a merger, acquisition, or sale of assets, in which case we'll give notice before your information is transferred or becomes subject to a different privacy policy.

We do not sell your personal information to anyone.

4. Data retention

We keep your account and reservation information for as long as your account is active, so your reservation history remains available to you, and for a reasonable period afterward to meet legal, accounting, and dispute-resolution needs. If you request deletion of your account, we'll delete or anonymize your personal information except where we're required to retain it by law.

5. Data security

We use industry-standard safeguards to protect your information: connections to Kiiü are encrypted in transit (HTTPS), passwords are never stored in plain text, and access to production systems is restricted. No method of transmission or storage is completely secure, so we can't guarantee absolute security, but we work to protect your information and to respond quickly if something goes wrong.

6. Cookies

We use a session cookie to keep you signed in and a security cookie to protect against cross-site request forgery. These are strictly necessary for the Service to function, are not used for advertising or cross-site tracking, and cannot be disabled while still using Kiiü.

7. Your rights and choices

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, and to object to or restrict certain uses of it. You can exercise many of these directly:

• Review and update your name, email, and password from your account's Profile page.
• View, manage, and cancel your reservations from "My reservations."

For anything else, including a full copy of your data or account deletion, contact us using the details in Section 11.

8. Marketing communications

We only send marketing communications to customers who have opted in when booking a reservation. You can opt out at any time by contacting us; this never affects the transactional emails (confirmations, reminders, cancellations) tied to an actual reservation.

9. Your state and regional rights

If you are located in the European Economic Area, the United Kingdom, or a U.S. state with its own privacy law, you may have additional rights under that law, such as the right to lodge a complaint with your local data protection authority. [Placeholder — this section should name the specific jurisdictions Kiiü operates in and the applicable rights before this policy is finalized.]

10. Children's privacy

Kiiü is not directed at children, and we do not knowingly collect personal information from children under 13 (or the applicable age of digital consent in your region). If we learn we've collected such information, we'll delete it.

11. Third-party links

Restaurant pages may link to a restaurant's own website, and sign-in may link to Google. Those sites have their own privacy practices, which this policy does not cover.

12. Changes to this policy

We may update this policy from time to time. We'll update the date at the top of this page when we do, and for significant changes we'll take reasonable steps to let you know.

13. Contact us

Questions about this policy or your data? Reach us at [email protected].