Privacy Disclosure for Kiss Files

Last updated August 2026

Understanding This Privacy Notice

This Privacy Notice sets out the practices governing how Kiss Files ("Kiss Files," "we," "us," or "our") collects, uses, shares, and otherwise processes personal data. In this Notice, "Personal Data" includes information that identifies a person, or that can reasonably be associated, directly or indirectly, with a particular person, as well as parallel concepts recognized under applicable law, including "personal information" and "personally identifiable information." Information that does not identify a person on its own may still be treated as Personal Data if it is combined with other Personal Data and remains associated, or can reasonably be associated, with a specific individual. Please review this Notice carefully before downloading, installing, accessing, or using the Product.

The purpose of this Notice is to explain, in a transparent way, the types of information we handle, the reasons we handle it, the ways in which it may be used or disclosed, the protections we apply, and the choices and rights you may have in relation to that processing.

This Notice applies to Personal Data we process in connection with Kiss Files and our website used to make Kiss Files available, including when you download, install, activate, access, or use those offerings (together, the "Product"). Unless the context indicates otherwise, references to "you" and "your" include the individual user of the Product and, where applicable, the company, business, or other organization that user represents.

Any Personal Data you submit to us, or that we otherwise process in connection with the Product, is handled within our systems in accordance with this Notice. We do not disclose Personal Data to outside parties except as described in this Notice or where applicable law requires us to do so. You are not required by law to provide Personal Data to us. That said, if certain information is not provided, some parts of the Product may not function properly, and we may be unable to address particular questions or requests. By downloading, installing, accessing, or using the Product, you acknowledge and agree that we may collect, use, disclose, and retain Personal Data as described in this Notice. If you do not agree to the practices described here, you should not download, install, access, or use the Product.

Under applicable privacy and data protection laws, we are the party that decides why and how Personal Data processed through the Product will be handled. As a result, we act as the "data controller," or the equivalent concept recognized under the law that applies.

For more information about this Notice, our handling of Personal Data, or the Product, please email us at [email protected].

Additional Information for U.S. Residents

If you are a resident of certain U.S. states, you should also review the U.S. State Residents Annex below. That annex provides supplemental disclosures and may describe privacy rights available to you under applicable state law. For purposes of the CCPA, the annex also operates as a Notice at Collection and Privacy Notice.

Privacy Information for Children Under 16

The Product is not intended for use by children under 16, and we do not knowingly collect or process Personal Data from children. If we become aware that a child has provided us with Personal Data, we will take reasonable steps to delete that information promptly. If you believe that Personal Data relating to a child has been shared with us, please contact us without delay.

Revisions to This Privacy Notice

We may update this Notice from time to time to reflect changes to the Product, adjustments to our data practices, or developments in applicable law. Any revised version will be posted on our website and, unless we specify otherwise, will become effective when posted. You should review this Notice periodically to stay informed about the current version.

Information We Process and the Reasons for That Processing

We may collect or otherwise process Personal Data when you download, install, activate, access, or use the Product, as well as when you contact us or otherwise interact with us in connection with the Product.

The Product is not built to collect or process Sensitive Data, and, to the best of our knowledge, it does not do so. In this Notice, "Sensitive Data" refers to information treated as sensitive under applicable law, including equivalent concepts such as special category data, sensitive personal information, or highly sensitive information. You should not send, transmit, upload, or otherwise provide Sensitive Data through the Product. Depending on the law that applies, Sensitive Data may include information concerning racial or ethnic origin, religious or philosophical beliefs, sexual orientation, health information, and certain financial information.

The particular Personal Data and Non-Personal Data we process will depend on how you use the Product. The categories below describe the types of data that may be involved, the reasons we process that data, and, where relevant, the legal bases on which we rely. We may also process Personal Data where necessary to detect, investigate, prevent, or address fraud, misuse, infringement, identity theft, security incidents, unlawful or unauthorized conduct, or violations of our terms governing access to the Product; to protect the Product and our systems; and to establish, exercise, or defend legal claims or otherwise manage legal risk. Where applicable, we rely on our legitimate interests for these processing activities.

Depending on how the Product is used, the categories of Personal Data we may process include the following:

Communications with Us and Our Team. If you contact us for assistance or otherwise reach out to us about the Product, we may process your contact information, the substance of your request or message, and any other information you choose to include. We use that information to communicate with you, respond to your inquiry, provide support, and maintain records of our support interactions. We may also keep those records for future reference, training, and support quality improvement. Where support is provided as part of the Product, we rely on performance of our contract with you. In other cases, we rely on our legitimate interests in maintaining support records and improving our support operations.
Product Operation and Diagnostic Data. We may process Personal Data relating to how the Product operates and how you use it, whether that information is collected directly by us or through service providers acting on our behalf. This may include information such as the features you use, timestamps, session duration, clickstream data, technical events, and logs or records connected to errors, debugging, or troubleshooting. We use this information to monitor and assess performance, support development work, identify and correct issues, improve the Product, and maintain security, relying on our legitimate interests in operating, supporting, and enhancing the Product.
User-Provided Materials. Content you submit is not retained on our servers and is not uploaded to our systems for storage. Once the requested processing has been completed and the resulting output has been generated, the output is returned to you and remains stored locally on your device. Where permitted, materials you submit may contain Personal Data relating to individuals other than you, such as names or descriptions of other persons (each, a "Non-User"). You should not provide Personal Data about another person unless you have the authority to do so and have obtained any consent required for that disclosure. To the extent the Product processes Personal Data included in submitted materials, we rely on our legitimate interests in making the Product available and maintaining its functionality for users.
Device and Online Identifiers. We may process technical identifiers connected to your device or associated with your use of the Product, including your Internet Protocol (IP) address, device identifiers, browser-related identifiers, Google advertising ID (GAID), and comparable identifiers. Where these identifiers are used to operate the Product, preserve functionality, maintain security, or prevent fraud, we rely on our legitimate interests. Where they are used for marketing, targeted advertising, or tracking-related activities, we rely on your consent, as described elsewhere in this Notice.

We rely on Personal Data and related information for a number of business, operational, and compliance-related functions, including the following:

Operating, Reviewing, and Improving the Product. We use information to run, support, maintain, evaluate, and improve the Product and its features. This may include reviewing performance, addressing technical issues, assessing usability and compatibility, understanding the user experience, and developing updates, enhancements, or new capabilities consistent with our business and operational requirements.
Delivering the Product. We process information to the extent needed to provide the Product and support its available features and functionality.
Protecting the Product and Responding to Misuse. We may use information to help preserve the security, reliability, and integrity of the Product, our systems, and our users. This includes using information to detect, investigate, and help prevent fraud, misuse, unauthorized conduct, and other behavior that may breach our terms or violate applicable law, and to enable us to take protective measures for our services and technical environment.
Advertising, Personalization, and Related Outreach. We may use Personal Data in connection with marketing, advertising, personalization, and similar communications, including to make content, messages, and advertisements more relevant to your interests and your use of the Product.

Your Rights and Choices Concerning Personal Data

Depending on the law that applies to your circumstances, you may be entitled to exercise certain rights in relation to the Personal Data we process about you. Where applicable law requires it, we will support and comply with those rights.

Access Right. You may ask us to confirm whether we process Personal Data relating to you and, where applicable, request access to that Personal Data or a copy of it.
Right to Request Deletion. In certain situations, you may request that we delete specific Personal Data about you that we maintain.
Rights to Rectification, Erasure, and Restriction. You may have the right to ask us to correct Personal Data that is inaccurate or incomplete, delete Personal Data in circumstances recognized by applicable law, or restrict our processing of Personal Data where such a right is available.
Rights to Portability and to Object. Where these rights are available under applicable law, you may object to certain processing of your Personal Data and request that we provide your Personal Data in a portable format, or transmit it to another recipient where technically feasible.
Other Rights That May Be Available. Depending on the law that governs the processing, you may also have the right to appeal and to lodge a complaint with the relevant supervisory or regulatory authority.

To exercise any of these rights, or if you have questions about data protection matters, please contact us at [email protected]. If you are a resident of certain U.S. states, you should also review the U.S. State Residents Annex below, which contains additional disclosures and rights that may apply to you.

Circumstances in Which Personal Data May Be Shared and Transferred Internationally

We may disclose Personal Data processed in connection with the Product in limited circumstances only, including where this Notice contemplates the disclosure, where the disclosure is reasonably necessary for our operations, or where applicable law requires or permits it.

Disclosures to Service Providers, Affiliates, and Commercial Counterparties. We may provide Personal Data to our affiliates, subsidiaries, vendors, advertising partners, and other third parties that support us in operating, administering, maintaining, promoting, supporting, or improving the Product.
Disclosures in Connection with Corporate Events. Personal Data may be shared, transferred, or otherwise made available as part of, or in preparation for, a merger, acquisition, financing, investment, restructuring, asset transfer, consolidation, or another significant business transaction or organizational change involving our business.
Disclosures for Legal, Compliance, and Protection Purposes. We may disclose Personal Data if we believe such disclosure is necessary or appropriate to comply with applicable law, legal procedures, subpoenas, warrants, court orders, or other binding requests from governmental, regulatory, or judicial authorities, or where disclosure is needed to investigate, prevent, or respond to unlawful activity, misuse of the Product, security incidents, or risks to the rights, property, or safety of any person or organization.
Disclosures to Analytics and Measurement Partners. We may share information with analytics providers and similar partners that assist us in understanding Product usage, evaluating performance, measuring effectiveness, and generating aggregated reporting, analytics, and metrics.

International Processing and Transfer of Personal Data

Personal Data may be processed, accessed, or disclosed across national borders and may be handled in jurisdictions other than the one in which you are located, including, where relevant, jurisdictions outside the EEA. When Personal Data is transferred internationally, we take measures intended to ensure that recipients are subject to privacy and security commitments consistent with this Notice and applicable law. Where required, we implement appropriate safeguards for cross-border transfers, including contractual protections and other recognized legal transfer tools, to help protect Personal Data that is processed internationally.

Protection of Personal Data

We maintain reasonable measures designed to safeguard the Personal Data we process in connection with the Product and to support the confidentiality, integrity, and availability of our systems and services.

In designing and implementing those measures, we consider the nature and sensitivity of the relevant information. We apply generally accepted technical, administrative, and organizational safeguards intended to reduce the likelihood of unauthorized access, misuse, loss, alteration, or disclosure.

Our security framework includes technical, administrative, and operational controls intended to help protect information assets. Nevertheless, no transmission method, storage system, or security control can be guaranteed to be completely secure, and we therefore cannot promise absolute security.

Cookies, SDKs, and Comparable Technologies

When you access or use the Product, we may employ cookies and similar technologies, including software development kits ("SDKs"). Depending on the relevant interface, these tools may be stored on your device, operate through your device, or otherwise interact with your device in connection with browsing, accessing, or using the Product. In general, cookies are small text files commonly used in web environments, while SDKs are tools used in application environments that can serve similar functions.

We use these technologies to help operate the Product effectively and efficiently, including to support navigation, enable certain functionality automatically, retain preferences and settings, and make your interactions with our services smoother and more responsive.

Retention of Personal Data

Except where this Notice states otherwise, we keep Personal Data only for as long as reasonably necessary to fulfill the purposes for which it was collected, and thereafter only as permitted or required by applicable law. We may retain Personal Data for longer periods where needed to comply with legal, regulatory, tax, or accounting requirements, preserve appropriate business records, resolve disputes or complaints, or establish, exercise, or defend legal claims.

Subject to applicable law, you may in some cases have the right to ask that your Personal Data be deleted. At the same time, unless a legal obligation or a particular agreement requires otherwise, we are not obligated to keep Personal Data for a fixed retention period and may securely delete it, anonymize it, or restrict access to it once it is no longer needed for legitimate business purposes.

Contact Information

If you want to contact us about this Notice, our privacy practices, or the Product, including with questions, concerns, or requests, please email us at [email protected].

Additional Privacy Terms for Residents of Certain U.S. States

This section supplements the remainder of this Notice and should be read together with it. It applies to residents of certain U.S. states and provides additional information about our collection, use, disclosure, and other processing of Personal Data when state privacy laws require supplemental disclosures.

Privacy laws in certain U.S. states may grant residents specific rights with respect to Personal Data processed in an individual or household context. In general, those rights do not apply where the individual is acting in a commercial or business capacity, in an employment-related context, as a job applicant, as a beneficiary of a person acting in an employment-related context, or as a representative of a business, to the extent those categories fall outside the scope of applicable law.

Personal Data. Under applicable U.S. state privacy laws, "Personal Data" generally refers to information that is linked, or can reasonably be linked, to an identified or identifiable individual. It generally does not include lawfully obtained publicly available information, deidentified information, aggregated information, or other categories of data excluded from the scope of the applicable state law.
Sensitive Data. For purposes of applicable U.S. state privacy laws, "Sensitive Data" may include Personal Data revealing racial, ethnic, or national origin; religious beliefs; information concerning an individual's medical history or mental or physical health condition, diagnosis, or treatment; neural data; transgender or non-binary status; sex life or sexual orientation; status as a victim of crime; citizenship or immigration status; genetic or biometric information; Personal Data collected from a known child; and precise geolocation data.

Some U.S. state privacy laws require that consumers receive a notice describing, among other things, the categories of Personal Data processed, the purposes for that processing, the categories of third parties to which Personal Data is disclosed, whether any categories of Personal Data are sold or used for targeted advertising, the categories of third parties involved in those activities, the rights available to consumers, the methods for exercising and appealing those rights, and the ways consumers may contact us. This Notice, together with the supplemental information set out below, is intended to provide those disclosures.

Additional State Privacy Rights

In addition to the rights described above in the section titled "Your Rights and Choices Concerning Personal Data," residents of certain U.S. states may have further rights under applicable privacy laws, subject to the conditions, limitations, and exclusions contained in those laws. Those rights may include the following:

You may have the right to confirm whether we process your Personal Data and to obtain access to that information in a portable format that is readily usable where technically feasible.

You may also have the right to request correction of inaccurate Personal Data, deletion of Personal Data that you provided to us or that we collected about you, and, in some circumstances, a list identifying the specific third parties to which we have disclosed Personal Data relating to you or any Personal Data.

Where applicable law provides this right, you may opt out of certain processing activities, including the "sale" of Personal Data, targeted advertising, and profiling carried out in furtherance of decisions that produce legal or similarly significant effects. We do not engage in profiling in furtherance of decisions that produce legal or similarly significant effects.

If we decline to act on your request, you may have the right to appeal that decision. You may also have the right not to receive discriminatory treatment for exercising privacy rights available to you under applicable law.

More information about California privacy rights is available from the California Office of the Attorney General at: https://oag.ca.gov/privacy/ccpa.

Categories of Personal Data We Handle

The section above titled "Information We Process and the Reasons for That Processing" describes the categories of Personal Data we collect or otherwise process in connection with the Product, as well as the purposes for which that information is used, stored, or otherwise handled. We do not process the Personal Data we collect for purposes that are materially different, unrelated, or incompatible with the purposes described in this Notice, and we do not collect additional categories of Personal Data without providing any notice and obtaining any consent required by applicable law, unless otherwise permitted or required by law.

Information About Sale and Targeted Advertising

Certain U.S. state privacy laws may define a "sale" of Personal Data broadly enough to cover making Personal Data available to a third party in exchange for monetary or other valuable consideration, including in connection with targeted advertising. We do not "sell" Personal Data in the ordinary sense of receiving direct payment in exchange for information about you. However, depending on the definition that applies under the relevant law, our use of cookies and similar tracking technologies, third-party advertising tools, and certain disclosures of Personal Data to third parties, including analytics providers, may be treated as a "sale" of Personal Data or as the use of Personal Data for targeted advertising. The categories of Personal Data that may be involved in those activities include unique identifiers, such as device ID and IP address, internet or other electronic network activity information, such as interactions with our services, and geolocation data inferred from IP address information.

You may submit requests to exercise rights available under applicable U.S. state privacy laws by emailing us at [email protected].

To the extent permitted by applicable law, an authorized agent may submit a request on behalf of another individual if the agent provides sufficient documentation establishing authority to act for that person. We may also require the individual who is the subject of the request to verify their identity directly with us and confirm the agent's authority.

We will respond to requests within the timeframe required by applicable law and may extend that period where the law allows, subject to any notice that must be given to you. If we decide not to act on a request, we will notify you of that decision, explain the reasons for it, and, where applicable, provide information about how you may appeal. Any appeal will be reviewed and answered within the period required by applicable law. If your appeal is denied, you may have the right to contact or lodge a complaint with the appropriate supervisory authority, regulator, or Attorney General in your jurisdiction.