Legal · effective 2026-09-01
Privacy Policy
KIKIYO LTD is the controller of the personal data described here. This policy covers the whole service, including the photographs you upload.
1Who is responsible
KIKIYO LTD is the data controller for the processing described in this policy. Write to support@kikiyok.shop for anything to do with your data, or telephone +44 20 7469 7312. The company's registered particulars are on the Legal Information page.
This policy is written for the UK General Data Protection Regulation and the Data Protection Act 2018. Where the EU GDPR applies to you it is applied on the same terms, and residents of California have the additional rights set out in clause 9.
2What we collect and why
| Data | Purpose and lawful basis |
|---|---|
| Email address, password (stored only as a hash), display name | To create and secure your account, and to send service messages. Performance of a contract, Art. 6(1)(b). |
| Photographs of shoes you upload, and the sentence you write about them | To produce your result. Performance of a contract, Art. 6(1)(b). |
| The reads you save, and the shoe records you build from them | To keep your workspace between sessions. Performance of a contract, Art. 6(1)(b). |
| Plan, billing period, renewal date, invoices | To operate the subscription and to meet tax record-keeping duties. Contract, Art. 6(1)(b), and legal obligation, Art. 6(1)(c). |
| Card details | Never held by us. They are entered into, and held by, the payment provider configured for this deployment. We receive only a token, the last four digits and the expiry date. |
| IP address, browser and device type, pages requested, error and abuse logs | To keep the service running and to prevent abuse. Legitimate interests, Art. 6(1)(f) — our interest in a working, non-abused service, weighed against the limited intrusion of short-lived technical logs. |
| Analytics about how sections of the site are used | Only with your consent, given through the cookie banner. Art. 6(1)(a). Declining changes nothing about how the service works for you. |
We ask for nothing else. There is no field anywhere in this service for your foot, your shoe size, your health, your age beyond the confirmation that you are 18 or over for a paid plan, or your location beyond the country implied by your IP address.
3Your photographs are not used to train models
Photographs of shoes uploaded to this service are not used to train models — not ours, not a supplier's, and not a third party's. This is a term of our agreement with our inference supplier, not only a policy of ours.
A photograph is sent to the inference supplier, held for the seconds needed to return a result, and is not retained by them afterwards. We do not use uploads to build datasets, we do not license them, and we do not sell them.
We do keep aggregate counts that contain no image and no personal data — for example, how often a photograph turns out to be insufficient to establish a construction — because that is how we know whether the guidance on how to take the photograph is working.
4How long we keep things
| Item | Kept for |
|---|---|
| Uploaded photographs | 30 days from processing, or until you delete them, whichever is sooner. If you save a read to a shoe record, the photograph is kept while that record exists. |
| Saved reads and shoe records | Until you delete them or close the account. |
| Account data | Until you close the account, then 30 days to allow recovery from an accidental deletion. |
| Invoices and billing records | Six years after the end of the accounting period they relate to, as UK tax law requires. |
| Technical and abuse logs | 90 days. |
| Support correspondence | 24 months. |
Deletion removes data from live systems immediately and from encrypted backups within 30 days, when the backup containing it is rotated out.
5Who else processes your data
- A hosting and content delivery provider, which serves the site and stores uploads.
- A database and authentication provider, which stores account records and saved reads.
- An inference provider, which receives a photograph in order to return a reading of it and does not retain it.
- A payment provider, configured by the operator of this deployment, which handles the card transaction and the subscription.
- An email provider, which sends account, renewal-reminder and support messages.
Each is a processor acting on our written instructions under Art. 28 UK GDPR, and none of them may use your data for their own purposes. We do not sell personal data and we do not share it for anyone else's advertising.
6Transfers outside the United Kingdom
Some of those providers operate outside the United Kingdom. Where a transfer is to a country covered by UK adequacy regulations, that is the basis for it. Where it is not, the transfer is made under the International Data Transfer Agreement issued by the Information Commissioner, or under the EU Standard Contractual Clauses together with the UK International Data Transfer Addendum, in each case with a transfer risk assessment on file.
Ask support@kikiyok.shop and we will tell you which mechanism covers a particular provider.
7Security
- The whole site is served over HTTPS and sends HTTP Strict Transport Security.
- Passwords are stored only as salted hashes and are never recoverable, by us or by anyone else.
- Uploads are stored in private buckets and served only through short-lived signed links tied to your session.
- Card data never reaches our systems. It is entered into the payment provider's own fields, and the provider is responsible for PCI DSS compliance in respect of it.
- Access to production data is limited to the people who need it, and is logged.
If a breach occurs that is likely to result in a risk to your rights and freedoms, we report it to the Information Commissioner within 72 hours of becoming aware of it and tell affected users without undue delay where the risk is high.
8Your rights
- Access — a copy of the personal data we hold about you.
- Rectification — correction of data that is wrong or incomplete.
- Erasure — deletion, subject to records we must keep by law, such as invoices.
- Restriction — a pause on processing while a dispute about accuracy or legitimate interests is resolved.
- Portability — your account data and saved reads in a machine-readable file.
- Objection — to processing based on legitimate interests, including a full stop to it unless we can show compelling grounds that override your interests.
- Withdrawal of consent — at any time, for anything based on consent, without affecting what was lawful before you withdrew it.
Email support@kikiyok.shop. We answer within one month, and tell you inside that month if a request is complex enough to need longer. Exercising a right costs nothing.
8.1Complaining to the Information Commissioner
You have the right to complain to the Information Commissioner's Office, the UK supervisory authority for data protection, at ico.org.uk, by telephone on 0303 123 1113, or by post to Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.
You can complain to the ICO whether or not you have raised the matter with us first, though we would rather have the chance to put it right.
9If you are in California
You have the right to know what personal information is collected and how it is used, the right to delete it, the right to correct it, and the right to opt out of its sale or sharing. We do not sell or share personal information as those terms are defined by the California Consumer Privacy Act, so there is nothing to opt out of. We do not discriminate against anyone for exercising a right.
10Automated processing
The reading of a photograph is automated. It produces a description of what a shoe appears to be, not a decision about you: it has no legal effect on you and does not significantly affect you within the meaning of Art. 22 UK GDPR. No profile is built from your uploads, and nothing you upload affects your price, your plan or your access.
11Children
Paid plans are for people aged 18 and over. Under-18s may use the free tier with the consent of a parent or guardian. We do not knowingly collect data from children under 13, and we delete any that comes to our attention.
12Changes
Material changes are notified to registered users by email at least 30 days before they take effect. The effective date at the top of this page always shows the version in force.