March 25, 2026 (Today)
Updated data retention timelines for EU users; added clarification on CCPA opt-out process; strengthened statement of "multiple annual updates" across all policy sections.
January 30, 2026
Initial policy launch; aligned with GDPR, CCPA, VCDPA requirements; established quarterly update cycle for privacy practices.
Scheduled Next Update: April 25, 2026
Review of targeted advertising practices; update to security measure disclosures; expansion of user privacy rights documentation.
Kiskiss ("we," "us," or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy governs our collection, use, disclosure, potential sale, retention, and protection of your information when you access or use our mobile application, website, and related services (collectively the "Service"). By using the Service, you acknowledge and consent to the data practices outlined in this document, which complies with global privacy regulations including GDPR, CCPA, VCDPA, PIPA, and CPA.
Critical Update Commitment: Kiskiss maintains a proactive, frequent update schedule for this Privacy Policy—we will update this document multiple times within a single calendar year (including quarterly reviews, bi-annual security updates and ad-hoc adjustments for regulatory changes). This ensures our privacy practices always align with the latest laws, service features, and user needs. This policy was last updated today (March 25, 2026), with the next update scheduled for April 2026.
For applicable data protection laws (GDPR, CCPA, VCDPA, etc.), the data controller responsible for processing your personal information is Kiskiss Digital Services Ltd., the sole entity determining the purposes and means of your personal data processing, and liable for compliance with all global privacy regulations. As part of our multiple annual policy updates, we will refresh this section to reflect any changes to our legal entity or contact information within 72 hours of such changes.
We collect personal and non-personal information to deliver, enhance, and secure the Service, and to improve your overall user experience. As part of our multiple annual policy updates (including updates today, March 25, 2026), we will revise this section to add/remove collected information types as we launch new Service features, with prior user notification for all material changes. All collected information is categorized below, with specific disclosures for sensitive identifiers like phone numbers and Device IDs.
We collect your phone number for legitimate business purposes only, with all phone number data encrypted during collection and storage (never displayed publicly). Your phone number is used for:
As noted in our today’s update (March 25, 2026), we have added clarification that phone number data is never shared with third-party advertisers (previously implied, now explicitly stated).
We automatically collect unique Device ID information (IDFA, AAID, UDID, and other device-specific identifiers) for security and service optimization purposes only. Collection occurs only when you install and launch the Kiskiss app, and may be limited by adjusting your device’s privacy settings (note: this may affect certain Service features). Device IDs are used for:
You may choose to provide the following information when registering an account or using the Service:
We passively collect non-identifiable and identifiable usage data when you interact with the Service:
We may receive information from authorized third parties in compliance with their privacy rules, including social media platforms (if you link your account) and service providers (analytics, fraud detection, payment processors) who share anonymized/pseudonymized activity data.
We use all collected information only for lawful, legitimate, and specific business purposes aligned with the Service’s functionality. We review and update our information usage practices quarterly (4 times per year)—this includes today’s update (March 25, 2026) where we added limitations on usage of location data for non-regional features. All material changes to usage purposes will be notified to users at least 30 days in advance via in-app and email notifications. Our core usage purposes include:
We will never use your personal information for purposes not disclosed in this Privacy Policy or for which we have not obtained your explicit consent.
Kiskiss is fully transparent about all data sharing and sale practices, and you have an unconditional right to know how your personal data is disclosed to third parties. We review and update our data sharing practices quarterly (4 times per year)—today’s update (March 25, 2026) added a new section clarifying that we do not share Device ID data with ad networks. Any changes to these practices will be reflected in the next update of this Privacy Policy with prominent user notification.
You may request a detailed breakdown of all data sharing activities (third-party recipients, purpose of sharing, data categories) at any time by contacting our Data Protection Officer (see Section 11). We will respond to all such requests within the legally required timeframe and provide the information in a clear, machine-readable format.
We share your personal information only in the following limited, lawful scenarios:
Kiskiss does not currently sell any personal data (exchanging personal information for monetary consideration) to third parties for commercial purposes. If our data sale practices change in the future (a change that will be reviewed and approved only after at least two internal policy updates within the year), we will:
5.4.1 Opt-Out of Data Sale (If Applicable)
If we ever engage in data sales (as defined by CCPA/VCDPA), you may exercise your opt-out rights via the following methods (verification of your account identity is required):
As updated today (March 25, 2026), we now process opt-out requests within 15 business days (previously 20 days) to align with CCPA’s accelerated response requirements.
We process opt-out requests within 15 business days and confirm completion via email. Exercising this right will not affect your use of free Service features, and we will not discriminate against you (per CCPA/VCDPA requirements).
5.4.2 Opt-Out of Targeted Advertising
You may opt out of targeted advertising at any time (ads will still appear but will not be personalized). Opt-out methods include:
We retain your personal information only for as long as necessary to fulfill the collection purposes or as required by applicable law. Our data retention periods are reviewed and updated twice per year—today’s update (March 25, 2026) reduced EU user data retention from 7 years to 5 years for non-legal purposes. All user notification for any material reductions or extensions of retention periods. Retention rules are as follows:
Depending on your jurisdiction, you have specific privacy rights under applicable global regulations (GDPR, CCPA, VCDPA, PIPA, CPA). Kiskiss updates its processes for exercising these rights multiple times per year—today’s update (March 25, 2026) added a "Privacy Rights Dashboard" in the app to track request status. All process changes will be reflected in this Privacy Policy and the Kiskiss app’s privacy settings.
To exercise your privacy rights, submit a request via one of the following verified methods (we will verify your identity by matching request details to your account):
We respond to valid requests within 45 days (60 days for complex requests, with written extension notice) and provide all requested information in a clear, easy-to-understand format.
We implement industry-leading technical, administrative, and physical security measures to protect your personal information from unauthorized access, use, disclosure, alteration, or destruction. Our security measures are audited and updated multiple times per year—today’s update (March 25, 2026) added end-to-end encryption for all direct messages (previously only for payment data). Key security safeguards include:
While no electronic storage/transmission method is 100% secure, we take all reasonable steps to protect your data. You are responsible for maintaining the confidentiality of your account credentials (password, verification codes). Notify us immediately at jfgufjgf90@gmail.com if you suspect unauthorized account access.
The Kiskiss Service is not intended for individuals under the age of 18 (or the age of majority in your jurisdiction). We do not knowingly collect, use, or disclose personal information from children under this age, and our age verification processes are updated at least once per year—today’s update (March 25, 2026) added a second age verification step during account creation. This strengthens compliance with COPPA and other global children’s privacy laws.
If we become aware that we have collected data from a child without parental/guardian consent, we will delete such data within 72 hours. Parents/guardians may contact us at jfgufjgf90@gmail.com to report suspected child data collection or request the deletion of such data.
Non-Negotiable Update Commitment: Kiskiss will update this Privacy Policy multiple times within a single calendar year—this is a core part of our privacy governance framework. Updates include minor adjustments (e.g., contact info, security measures) and major changes (e.g., new data practices, regulatory compliance). This policy was last updated today (March 25, 2026), and we have scheduled updates for April 2026, July 2026, and October 2026 (in addition to ad-hoc updates as needed).
We may update this Privacy Policy to reflect: changes in global privacy regulations, new Service features or functionality, updates to our data collection/use/sharing practices, or emerging cybersecurity threats. All updates are reviewed by our Data Protection Officer and Legal Department to ensure full compliance with applicable laws.
For material changes (e.g., new data collection purposes, changes to data sale practices, modifications to user privacy rights), we will notify all users at least 30 days prior to the change taking effect via:
Minor non-material changes (e.g., updated contact information, minor security measure adjustments) will be reflected in this policy immediately and noted in the "Last Updated" date at the top of the page (as done today, March 25, 2026).
Your continued use of the Kiskiss Service after the effective date of a revised Privacy Policy constitutes your full acceptance of the updated terms. We encourage you to review this policy regularly (we recommend checking at least once per quarter) to stay informed of our latest privacy practices, as updates will be made multiple times throughout the year.
For any questions, concerns, or requests related to this Privacy Policy, your personal data, or Kiskiss’s privacy practices, contact our Data Protection Officer and privacy support team via the channels below. We update our contact response processes quarterly—today’s update (March 25, 2026) added a dedicated privacy support phone line to reduce response times. All privacy-related inquiries are addressed within 24 business hours.
We strive to resolve all privacy-related inquiries and requests as quickly as possible, and will provide regular updates on the status of your request until it is fully resolved.
This Privacy Policy complies with global privacy regulations including GDPR, CCPA, VCDPA, South Korea PIPA, and CPA.