Privacy Policy

Introduction

Kiu-R ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our digital menu platform and services.

By using Kiu-R, you agree to the collection and use of information in accordance with this policy.

Information We Collect

1. Information You Provide

• Account Information: Name, email address, phone number, restaurant name, and business details
• Menu Content: Menu items, descriptions, prices, images, and categories
• Payment Information: Billing details and payment method (processed securely by our payment provider)
• Communications: Messages, feedback, and support requests
• Phone Number: Mobile phone number provided during the diner verification process when placing an order through a restaurant's digital menu

2. Information We Collect Automatically

• Usage Data: How you interact with our platform, features used, and performance metrics
• Device Information: Browser type, operating system, IP address, and device identifiers
• QR Code Analytics: Scan frequency, location data (if permitted), and access times
• Cookies: Session cookies and preference settings

How We Use Your Information

We use collected information to:

• Provide and maintain our services
• Process transactions and send transaction notifications
• Respond to customer service requests and support needs
• Send administrative information and service updates
• Send marketing and promotional communications (with consent)
• Monitor and analyze usage patterns to improve our services
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations and enforce our terms

SMS/Text Messaging

Kiu-R uses SMS (Short Message Service) text messages as part of our ordering platform. This section describes how we collect, use, and protect your phone number in connection with SMS messaging.

How We Collect Your Phone Number

When you place an order through a restaurant's digital menu on our platform, you are asked to verify your identity by entering your mobile phone number. This happens within our in-app diner verification screen, which is part of the ordering checkout flow. You must actively enter your phone number and tap "Send code" to initiate the process. No SMS is sent without your explicit action.

What Messages We Send

By providing your phone number and completing the verification process, you consent to receive the following types of SMS messages from Kiu-R:

• Verification codes: A one-time 6-digit code to verify your identity when placing an order
• Order confirmations: A notification confirming your order has been received, including your order number and total
• Order updates: A notification when your order is ready for pickup or delivery to your table
• Order receipts: A summary of your completed order with a link to your itemized receipt
• Invoice notifications: If you request a tax invoice (factura), a notification when it is available for download

We do not send marketing, promotional, or advertising messages via SMS. All messages are transactional and directly related to an order you have placed.

Message Frequency

Message frequency varies based on your ordering activity. You will typically receive 2 to 4 messages per order (verification code, order confirmation, order ready, and receipt). You will only receive messages when you actively place an order.

How to Opt Out

You can opt out of receiving SMS messages at any time by replying STOP to any message you receive from us. After opting out, you will receive a single confirmation message and no further SMS messages will be sent. You may also contact us at privacy@kiu-r.com to request removal from our messaging list. Please note that opting out of SMS may prevent you from placing orders through our platform, as phone verification is required for the ordering process.

Help

For help with SMS messaging, reply HELP to any message or contact us at support@kiu-r.com.

Costs

Message and data rates may apply. Kiu-R does not charge for SMS messages, but your mobile carrier may charge standard messaging fees. Consult your mobile plan for details.

Phone Number Privacy

Your phone number is stored in hashed form in our database for identity matching. We do not sell, rent, or share your phone number with third parties for marketing purposes. Your phone number is shared only with our SMS delivery provider (Bird/MessageBird) solely for the purpose of delivering messages to you. We do not use your phone number for any purpose other than the transactional messages described above.

Data Sharing and Disclosure

We may share your information in the following situations:

Service Providers

We share data with third-party vendors who perform services on our behalf, such as payment processing, data analysis, email delivery, hosting services, and customer service.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

Legal Requirements

We may disclose information when required by law, court order, or governmental request, or when we believe disclosure is necessary to protect our rights or user safety.

With Your Consent

We may share information for other purposes with your explicit consent.

Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication requirements
• Employee training on data protection
• Secure data centers with physical security controls

Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this policy. When determining retention periods, we consider:

• The duration of our relationship with you
• Legal or regulatory obligations
• Statute of limitations periods
• Our legitimate business interests

Your Rights and Choices

Depending on your location, you may have the following rights:

Access and Portability

Request a copy of your personal information in a structured, commonly used format.

Correction

Request correction of inaccurate or incomplete personal information.

Deletion

Request deletion of your personal information, subject to certain exceptions.

Marketing Opt-Out

Unsubscribe from marketing communications using the link in our emails or by contacting us.

Cookie Preferences

Manage cookie preferences through your browser settings.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We ensure appropriate safeguards are in place for such transfers in accordance with applicable law.

Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete that information.

Updates to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. For material changes, we may provide additional notice via email or through the platform.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

For European Users (GDPR)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Legal Basis: We process personal data based on consent, contract performance, legal obligations, or legitimate interests
• Data Protection Officer: Contact our DPO at dpo@kiu-r.com
• Supervisory Authority: You have the right to lodge a complaint with your local data protection authority
• Right to Object: You can object to processing based on legitimate interests
• Automated Decision Making: We do not use fully automated decision-making that produces legal effects

For California Residents (CCPA)

California residents have specific rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request disclosure of personal information collected, used, and shared
• Right to Delete: Request deletion of personal information
• Right to Opt-Out: Opt out of the sale of personal information (we do not sell personal information)
• Non-Discrimination: Exercise privacy rights without discriminatory treatment

To exercise these rights, contact us at privacy@kiu-r.com.