Privacy Policy

Last updated: 30 June 2026

1. Introduction

kkaloo (“we”, “us”, “our”) is operated by Aykon Group OÜ, an Estonian company. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights under the EU General Data Protection Regulation (GDPR) and other applicable laws.

2. What data we collect

2.1 Data you provide directly

• Account data: email address, username, password (hashed).
• Profile data: answers to personality and relationship profile questions.
• Payment data: billing details processed by our payment provider. We do not store full card numbers.
• Communications: messages you send via our support form or email.

2.2 Data collected automatically

• Usage data: pages visited, features used, session duration, interactions within the app.
• Device data: browser type, OS, device identifiers, IP address.
• Cookies: see our Cookie Policy for full details.

3. Legal basis for processing (GDPR Art. 6)

• Art. 6(1)(b) — Contract: processing necessary to perform our subscription service.
• Art. 6(1)(a) — Consent: analytics cookies and optional marketing communications.
• Art. 6(1)(c) — Legal obligation: tax records, fraud prevention.
• Art. 6(1)(f) — Legitimate interests: security, abuse prevention, product improvement.

4. How we use your data

• To provide, operate, and maintain the Service
• To process payments and manage subscriptions
• To personalise your experience (compatibility reports, recommendations)
• To respond to support requests
• To improve the Service through analytics
• To send transactional emails (receipts, password resets)
• To comply with legal obligations

5. Data sharing

We do not sell your personal data. We share data only with:

• Payment processors: to process subscriptions securely.
• Infrastructure providers: hosting, email, analytics (all under data processing agreements).
• Legal authorities: when required by law or to protect our legal rights.

6. International transfers

Some service providers may be located outside the European Economic Area (EEA). Where data is transferred outside the EEA, we ensure appropriate safeguards are in place (Standard Contractual Clauses or adequacy decisions).

7. Data retention

We retain personal data for as long as your account is active or as necessary to provide the Service. After account deletion, we retain identifiable data for up to 90 days before permanent deletion. Financial records are retained for 7 years as required by Estonian law.

8. Your rights (GDPR)

You have the right to access, rectify, erase, restrict, port, and object to processing of your personal data. To exercise any of these rights, email support@kkaloo.app. We will respond within 30 days.

9. Cookies

We use cookies and similar tracking technologies. See our Cookie Policy for full details and how to manage your preferences.

10. Children

The Service is not directed at individuals under 18. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us immediately at support@kkaloo.app.

11. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction.

12. Supervisory authority

If you believe we have violated your data protection rights, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate (aki.ee) or the supervisory authority in your EU member state of residence.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the “Last updated” date.

14. Contact

Privacy questions: support@kkaloo.app
Aykon Group OÜ, Kadaka tee 72a, Tallinn 12618, Estonia