Privacy Policy
Who we are
Kyouz is a software platform that provides queue management, service coordination, and customer experience infrastructure to businesses globally. This Privacy Policy explains how we collect, use, and protect your information whether you are a customer, business owner, or staff member.
Information we collect
We collect: phone number (required for OTP verification), name and email address (optional), extended profile attributes you choose to share (always opt-in), push notification tokens, device type and OS version, location data for business discovery (not stored persistently), and ticket/order/booking history.
How we use your information
We use your information to: create and manage your Kyouz account, process queue tickets and orders, send service notifications and push alerts, generate Apple Wallet passes and Live Activity updates, enable business discovery, operate loyalty programmes and voucher wallets, and comply with legal obligations. We do not sell your data or use it for advertising.
How we share your information
We share data with the business you are visiting (so they can serve you), and with our service providers: Twilio (SMS/OTP), Stripe (payments), Firebase/Google (push), Apple (APNs), Auth0 (authentication), and Railway/Supabase (hosting). All providers are bound by data processing agreements.
How long we keep your data
We retain customer account data while your account is active. Deletion requests are processed within 30 days. Business tenant data is retained for the subscription duration plus 90 days after termination.
Your rights
Depending on your location, you may have the right to access, correct, delete, restrict, or port your personal data. Email privacy@kyouz.com or use Account → Privacy & Data in the Kyouz app.
Security
We implement TLS 1.3, encryption at rest, strict multi-tenant data isolation (cross-tenant access is architecturally impossible), role-based access controls, and non-deletable audit logging.
Children
The platform is not directed at children under 13. We do not knowingly collect data from children under 13.
Cookies
The business console uses strictly necessary cookies for authentication and CSRF protection only. We do not use advertising cookies. See our Cookie Policy for details.
Contact
For privacy questions or data subject requests, email privacy@kyouz.com. We will respond within 30 days.