Privacy Policy
Last updated: August 2026
Kiryo is a private operations tool for rental businesses. This policy explains what we collect, why, and who else is involved in processing it. We do not sell your data, and we do not use it for advertising.
What we collect
Account information you give us. Your name, email address, business name, and phone number, provided when you sign up or later in your settings. Your email address comes from the Google account you sign in with.
Rental data you enter. The items, categories, orders, and customer records you add — including any names, phone numbers, email addresses, and notes you choose to store about your own customers, and any photos you upload of your items. You decide what goes in.
Payment information. Handled entirely by Paddle. We never see or store your card details. We keep a customer reference from Paddle and your current plan so we know what your account is entitled to.
Technical logs. Our hosting and database providers keep standard server logs, such as IP addresses and request times, to operate and secure the service.
How we use it
- To provide the service — storing and showing your inventory, orders, and customers.
- To send transactional email through Resend, such as reminders about upcoming pickups and returns, and account-related notices. These are part of the service, not marketing.
- To process subscription payments through Paddle.
- To keep the service secure, diagnose faults, and prevent abuse.
- To respond to you when you contact us for support.
We do not use your rental data for any purpose other than providing the service to you.
Data storage
Your data is stored in a Supabase-hosted PostgreSQL database, and item images are stored in Supabase Storage. Access is restricted at the database level so that each account can only read and write its own rows. Data is transmitted over encrypted connections (HTTPS).
Third parties
We rely on a small number of providers to run Kiryo. Each processes data only as needed to provide its part of the service, and each has its own privacy policy:
- Supabase — database, authentication, and file storage.
- Vercel — application hosting and delivery.
- Paddle — payment processing and tax handling, as Merchant of Record.
- Resend — transactional email delivery.
- Google — sign-in, if you authenticate with a Google account.
These providers may process data outside your country. We may also disclose data if required by law, or to protect the rights and safety of our users.
Cookies
Kiryo sets only the essential cookies needed to keep you signed in and to protect your session. We do not use tracking cookies, advertising cookies, or third-party analytics, so there is no cookie banner to click through. Clearing these cookies signs you out.
Data retention
We keep your data for as long as your account is active. When you delete your account, your profile, items, categories, customers, orders, and uploaded images are deleted along with it. Some records may persist briefly in encrypted backups, and Paddle retains billing records for as long as its own tax and accounting obligations require.
Your rights
- Access and export. You can view your data in the app at any time, and request a copy of it by emailing us.
- Correction. You can update your name, business name, and phone number in your settings, and edit or remove any rental data you have entered.
- Deletion. You can delete your account and all its data from your settings. This is immediate and cannot be undone.
- Objection and complaint. Depending on where you live, you may have the right to object to certain processing or to complain to your local data protection authority.
Where you store personal data about your own customers, you are the controller of that data and we process it on your behalf. Requests from your customers should come to you, and we will help you respond to them.
Contact
Questions about privacy, or a request about your data? Email hi@kiryo.app. See also our terms of service.