Privacy Policy

This Policy explains what personal data Koit handles, for what purpose, with whom it is shared, how long it is kept and how you exercise your rights. It applies to the Koit app on iPhone and Android and to the koitapp.com website.

1. Who we are and how to reach us

The data controller is Koit Tecnologia Ltda., CNPJ 53.815.531/0001-07, Av. Paulista, 1106, Sala 01, Andar 16, CEP 01310-914, São Paulo/SP, Brazil.

Data Protection Officer (DPO): Miller Anaia, dpo@koitapp.com. Write to this address about anything in this Policy, including to exercise your rights (section 14).

The Data Rights Center brings together information about your rights, data subject requests and how to contact the ANPD, Brazil’s data protection authority.

Other contacts: support@koitapp.com (support) and legal@koitapp.com (legal notices, reports and child safety). For everyday questions and problems, see the FAQ.

2. Summary

• Koit is a personal journal of your love life. What you record is yours and, in the app, is seen only by you and by the trusted friends you choose, to the extent you choose.
• We do not sell your data. We never use what you record (people, dates, notes, photos) for ads or for marketing aimed at you. We only use this data in studies in aggregated and anonymized form, without identifying anyone (section 6).
• The free plan has ads from Google AdMob, which receives your device’s advertising identifier and technical data, never the content you record.
• We use Google services (Firebase) to run the app, measure usage and fix crashes.
• You can delete your account in the app whenever you want.

3. Data we handle

3.1 Account and sign-up

• Sign-in: email and password, or your Google account or, on iPhone, your Apple account. When you sign in with Google or Apple, we receive the name and email these providers give us, and the app may display your Google account photo.
• Phone number: for email-and-password accounts, for two-step verification by SMS. It also lets your friends invite you as a trusted friend.
• Sign-up: name and date of birth. If you used an invitation, the invitation code.
• Preferences: language, display currency, theme, notification preferences and privacy choices.
• Profile photo, if you subscribe to Koit Pro and choose to add one.

3.2 What you record

• People: name or nickname, pronoun, relationship status, birthday or age, phone, address, social media, job, company, college, bio, likes, dislikes, expenses and photo (Koit Pro).
• Dates: title, date, time, the place and address you type, details, expenses, photos (Koit Pro), check-in, check-out and Dating Mode updates.
• Notes about people and dates.

Koit does not read your conversations, does not look up information about people in other sources and does not use your device’s location: a date’s location is the text you type.

3.3 Device permissions

We ask for each permission only when you use the feature, and you can deny or revoke it in your device settings:

• Device contacts: so you can choose whom to import or invite as a trusted friend. Your address book is read on your device, and only the contacts you choose are uploaded to Koit.
• Camera: to scan a contact’s QR code and take photos.
• Photos: to choose photos from your gallery.
• Notifications: for reminders and trusted friend updates. We store your device’s notification identifier.
• Face ID or biometrics: for the app lock. The check is done by your device; Koit does not receive your biometric data.
• Personalized ads: a request for consent to personalize ads; on iPhone, through the system tracking permission (section 8).

3.4 Trusted friends

To invite a trusted friend, you provide their name and phone number. We store the invitation and the link. For the dates you share, we handle the information described in section 7.

3.5 Koit Pro

When you subscribe, we receive the transaction data from the App Store or Google Play: purchase identifier, plan, price, currency, status and expiry of the subscription. We do not receive your card or payment method details.

3.6 Data generated by use

• Device and app data: device model and operating system, app version, language and date of last access.
• App usage (Firebase Analytics): screens opened, sign-up steps and actions in the app, linked to an internal identifier of your account. These events do not include the content you record.
• Crashes and diagnostics (Firebase Crashlytics): error reports, with technical device data and the internal identifier of your account.
• Integrity (Firebase App Check): verification that access comes from the original app on a trustworthy device.
• Connection data: when you use the app, the Google Firebase services that run Koit log technical connection data, such as IP address, date and time, to operate, protect against abuse and diagnose crashes.
• Ads: the device’s advertising identifier and technical data used by Google AdMob (section 8).

3.7 When you contact us

If you write to us, we handle your message, your address and whatever you tell us, in order to reply.

4. Sensitive data

What you record in Koit about your love life, such as the status of each relationship, your dates and your notes, may reveal or allow inferences about your sex life and sexual orientation. The law treats this as sensitive personal data.

• Why we handle it: this data only exists in Koit because you decide to record it, and it is necessary for the app to work as you expect. We handle it based on your consent, which you give freely and on your own initiative with each entry you make.
• What for: only for Koit to work for you: storing, organizing and showing what you recorded, and sharing with your trusted friends what you decide.
• What never: we do not use this data for ads or for marketing aimed at you, we do not sell it and we do not pass it to the advertising partner. It only goes into studies after being aggregated and anonymized, so that no one can be identified (section 6).
• How to withdraw: you can edit or delete any entry at any time, or delete your account (section 10).

5. People you record

When you record another person in Koit, we handle the data about them that you provide. That person does not need to use Koit and is not notified by the app.

• We keep this data only to show it to you and, for the dates you share, to your trusted friends (section 7). We also use the name in the text of notifications sent to your device, such as the birthday reminder.
• We do not use this data for any other purpose, we do not look up information about these people in other sources, we do not contact them and we do not search for them in other accounts.
• If someone recorded you and you want to exercise your rights, write to dpo@koitapp.com. We review each case and, when the law requires, correct or remove the record.

6. Why we use data and on what legal basis

How we anonymize. In studies and publications, we combine information from many people and remove anything that could identify someone: names, contact details, addresses and the free text of notes. We only publish results that cover enough people that no one can be recognized.

We do not make automated decisions about you and we do not build advertising profiles from what you record.

7. Whom we share with

We share data only with those who need it for Koit to work, and always only what is necessary:

• Your trusted friends, by your choice. For a shared date, they see when and where it takes place, the check-in, the check-out and the updates you send. If a friend asks for the details, they confirm the request, you are notified and they see the title, the full address and information about the person you are meeting: name, age, phone, Instagram, job, company and college, whenever you have recorded them. They never see your photos or notes, and the date stays visible to them for a limited time after it ends. They also see your name in the invitation.
• Google (Firebase), which hosts and runs Koit on our behalf: sign-in, database, photos, server functions, notifications, Analytics, Crashlytics and App Check. Google handles this data according to our instructions.
• Google AdMob, the advertising partner for the free plan: it receives the advertising identifier and technical device and connection data to show and measure ads. We never send the advertising partner the people, dates, notes, photos or anything else you record.
• Apple and Google, when you sign in with their accounts and when you buy Koit Pro through the App Store or Google Play.
• Mailchimp (Intuit), which sends our tips and news emails: it receives your name and email, never the content you record.
• Authorities, when the law, a court order or the duty to report child sexual abuse requires it (section 13).
• Successor company, in the event of a merger, acquisition or sale of assets, which becomes bound by this Policy.

We require suppliers that receive data to provide protection equal or equivalent to this Policy and to what the law requires.

8. Ads, analytics and diagnostics

Ads. The free plan shows ads from Google AdMob. They may be personalized based on your device’s advertising identifier. This only happens with your consent, which the app asks for first; on iPhone, through the system tracking permission. Without your consent, ads are not personalized, and you can withdraw it whenever you want. On any device, you can reset or delete your advertising identifier in the system settings. Koit Pro has no ads. Google explains how it uses data from partner apps at https://policies.google.com/technologies/partner-sites (a Google page).

Analytics. We use Firebase Analytics to understand how the app is used and improve it: which screens are opened, where sign-up gets stuck, which features are used. The events do not carry the content you record. You can object to this use by writing to dpo@koitapp.com.

Crashes. We use Firebase Crashlytics to find and fix errors.

Do Not Track. The app does not respond to browser “Do Not Track” signals. Choices about ads are in the controls described above. On the website, analytics only runs if you accept it (section 16).

9. Your choices

• Personalized ads: withdraw your consent in Account → Settings → App permissions; on iPhone, also in iPhone Settings → Privacy & Security → Tracking.
• Advertising identifier (Android): in your device’s Google ads settings.
• Tips and news emails: Account → Settings → Notifications, or the “unsubscribe” link in any email.
• Notifications: Account → Settings → Notifications, or your device settings.
• Device permissions: in Account → Settings → App permissions you see the status of access to contacts, camera, photos and, on iPhone, tracking for ads. From there you grant access or open your device settings to change or revoke it.
• Trusted friends: choose, for each date, whether it is shared, and remove links whenever you want.
• Your entries: edit or delete any person, date, note or photo.
• Your account: Account → Settings → Delete Account.

10. How long we keep data and how to delete it

We keep your data while your account exists. What you delete in the app stops appearing immediately. Shared dates stay visible to your trusted friends only for a limited time after they end.

Account deletion. In Account → Settings → Delete Account, you request deletion. For 30 days, you can reactivate the account by signing in to the app. After that, the account is closed and we delete your data within the limits allowed by law. Deleting your account does not cancel your Koit Pro subscription: cancel it first in the App Store or Google Play.

If you no longer have access to the app, request deletion at support@koitapp.com, using your account email.

We may keep some data after deletion when the law requires or allows it: to comply with a legal obligation or an order from an authority, to preserve evidence in cases of child sexual abuse and to defend rights. We may close accounts not accessed for more than 12 months, as stated in the Terms of Use.

11. International transfers

Our suppliers (Google and Mailchimp) process data on servers outside Brazil, including in the United States. These transfers are necessary to provide the service you signed up for (LGPD, art. 33, IX, with art. 7, V) and are made with the contractual safeguards of these suppliers. If you live outside Brazil, your data is also processed in Brazil and in the United States.

12. Security

We protect your data with technical and administrative measures:

• encrypted connection (HTTPS) between the app and the servers;
• access rules that make your content and photos accessible only to your account, with the exceptions you choose for your trusted friends;
• app integrity verification (App Check);
• two-step verification by SMS code for email-and-password accounts. When you sign in with Google or Apple, identity verification is done by those providers, with their own protections;
• app lock on your device with a PIN and biometrics, if you turn it on;
• internal access restricted to those who need it, with a duty of confidentiality.

No system is infallible. Keep your password safe, do not share your access and let support@koitapp.com know if you suspect misuse. If there is an incident that may cause relevant risk or harm, we will notify you and the authorities, as the law requires.

13. Minors and child safety

Koit is exclusively for people aged 18 or over:

• we ask for your date of birth at sign-up and do not accept anyone under 18;
• we may use the age range signal offered by the App Store or Google Play, when available, only to confirm that you are 18 or over. If we use it, this data serves no other purpose;
• on the App Store, Koit is rated 18+, and we inform the stores that Koit is exclusively for people aged 18 or over;
• our marketing communication is aimed only at people aged 18 or over;
• the Terms of Use prohibit recording people under 18, and the app does not accept an age under 18 when you enter a contact’s birthday or age.

If we learn that an account belongs to a person under 18, we close the account and delete the data, except what the law requires us to keep. If you are an adult and believe we assessed your age incorrectly, write to legal@koitapp.com.

In cases of sexual abuse or exploitation of children and adolescents, we preserve the data involved and report it to the competent authorities, in Brazil and abroad, as the law requires, even without a court order when the law so determines. See the Child Safety Policy.

14. Your rights

Under Brazil’s General Data Protection Law (Law No. 13,709/2018), you can request:

• confirmation that we process your data and access to it;
• correction of incomplete, inaccurate or outdated data;
• anonymization, blocking or deletion of unnecessary or excessive data, or data processed in breach of the law;
• portability of your data;
• deletion of data processed with your consent;
• information about whom we share your data with;
• information about the possibility of not giving consent and its consequences;
• withdrawal of consent;
• review of decisions made solely on the basis of automated processing.

You can also object to processing carried out without your consent, when it breaches the law.

How to request: through the Data Rights Center or by writing to dpo@koitapp.com from your account email. We may ask for information to confirm the request is yours. Requests are free of charge and follow the time limits set by law; for example, the complete statement about your data is provided within 15 days (LGPD, art. 19, II).

You can also complain to Brazil’s National Data Protection Authority (ANPD), at gov.br/anpd, and to consumer protection agencies.

15. Rights by country

The rights in section 14 apply to all users. Depending on the country where you live:

• United States. We do not sell your personal data and we do not use sensitive data for advertising. Personalized ads on the free plan use your device’s advertising identifier, which some state laws call “targeted advertising”. This only happens with your consent. To prevent it, simply decline or withdraw your consent, reset or delete your advertising identifier, or subscribe to Koit Pro. Depending on your state’s law, you can request access to, correction, deletion and a copy of your data, and appeal a refusal, by writing to dpo@koitapp.com. Koit is not directed to children under 13 and does not knowingly collect their data; if that happens, we delete the data.
• Philippines. Under the Data Privacy Act (Republic Act No. 10173), you have the right to be informed, to access, correct, erase or block your data, to object, to data portability and to complain to the National Privacy Commission.
• Singapore. Under the Personal Data Protection Act 2012, you can request access and correction and withdraw your consent. Our data protection officer can be reached at dpo@koitapp.com. You can complain to the Personal Data Protection Commission.
• Malaysia. Under the Personal Data Protection Act 2010, you can request access and correction, withdraw your consent and complain to the Personal Data Protection Commissioner.
• Argentina. Under Law No. 25,326, you can request free access to your data every six months, as well as correction, updating and deletion. “LA AGENCIA DE ACCESO A LA INFORMACIÓN PÚBLICA, en su carácter de Órgano de Control de la Ley N° 25.326, tiene la atribución de atender las denuncias y reclamos que interpongan quienes resulten afectados en sus derechos por incumplimiento de las normas vigentes en materia de protección de datos personales.” (In English: the Agency for Access to Public Information, the supervisory authority under Law No. 25,326, handles complaints from anyone whose data protection rights have been violated.)
• Uruguay. Under Law No. 18,331, you can request access, rectification, updating, inclusion and deletion and complain to the Unidad Reguladora y de Control de Datos Personales (URCDP).
• Chile. You can request access, rectification and deletion. From December 1, 2026, under Law No. 21,719, also objection, portability and blocking, and you can complain to the Agencia de Protección de Datos Personales.

In all cases, requests are made at dpo@koitapp.com.

16. Our website

The koitapp.com website stores in your browser only what it needs to work:

• your privacy choice, for up to 180 days;
• the light or dark theme, if you choose one;
• browsing session information.

With your permission, the website uses Google Analytics to measure visits. You accept or decline in the website notice and can change your choice at any time in “Cookie preferences”, in the footer. The website choice does not apply to the app.

17. Changes to this Policy

We may update this Policy when the app, the law or our practices change. The date of the version in force is at the top of this page. When a change is relevant, the app shows the new version and asks for your acceptance before you continue.

If translations differ, the Portuguese version prevails for people living in Brazil and the English version for people living outside Brazil. In Filipino, the English text applies.