Klic Privacy Policy

1. Introduction

Welcome to Klic ("Klic", "we", "our", or "us").

Klic is a mobile application that allows users to scan products in participating physical retail stores, manage a shopping cart, complete supported checkout flows, access purchase history, receive digital receipts, rate purchased products, and use related retail services.

This Privacy Policy explains how Klic collects, uses, stores, shares, and protects information when you use the Klic mobile application, website, and related services (collectively, the "Services").

By using the Services, you acknowledge that you have read and understood this Privacy Policy.

2. Information We Collect

2.1 Account Information

We may collect and store the following information:

• Full name
• Email address
• Phone number, if provided
• Date of birth, if provided
• Account settings and preferences

2.2 Authentication Information

Klic currently supports Google Sign-In, Sign in with Apple, and guest access.

When you sign in with Google or Apple, we may receive information from that provider, such as your name, email address, and authentication identifiers. Apple lets you hide your real email address; in that case we receive a private relay address.

Guest users may use limited app functionality without creating a full account.

2.3 Purchase and Cart Information

We may collect and store information related to your shopping activity, including:

• Cart items
• Products purchased
• Product names
• Product prices
• Product quantities
• Store or branch name
• Purchase history
• Digital receipts
• Approval codes or QR codes used for in-store purchase verification

This information is used to provide the Services, show purchase history, generate receipts, and support in-store purchase flows.

2.4 Product Ratings

Klic may allow users to submit numeric ratings for products they purchased.

At this stage, Klic does not support public written reviews, comments, or user-uploaded images.

2.5 Payment Information

Klic does not store full credit card numbers, CVV codes, or full payment card data.

If saved-card functionality is available, Klic stores only limited display metadata, such as:

• Last four digits
• Card brand
• Expiration month and year
• Cardholder name, if provided
• Random local card identifier

Klic may use third-party payment services, such as Google Pay or future payment providers. Payment processing is subject to the terms and privacy policies of the relevant payment provider.

Klic does not treat simulated, demo, or development payment flows as real completed payments in production.

2.6 Camera Access

Klic may request access to your device camera to scan QR codes and product barcodes.

Camera frames are used for scanning functionality and are not stored by Klic as user images.

2.7 Biometric Authentication

Klic may allow users to protect access to the app using device-level biometric or device-credential authentication.

Biometric information is processed by your device operating system. Klic does not receive, store, or transmit biometric data.

2.8 Device and Technical Information

We may process limited technical information necessary for app functionality and security, including:

• Device type
• Operating system
• App version
• IP address, which may be processed by backend service providers
• Local app preferences
• Security-related logs

At this stage, Klic does not use advertising identifiers, third-party advertising SDKs, analytics SDKs, or crash-reporting SDKs.

2.9 Location

With your permission, Klic may access your device location to show nearby participating stores in the store directory and to help select a relevant store during sign-up.

Location is accessed only while you actively use these features. Klic does not track your location in the background and does not use location data for advertising.

You may deny or revoke location permission at any time in your device settings; store-discovery features may then be limited.

2.10 Notifications

With your permission, Klic may send notifications on your device, such as purchase or service updates.

You can manage notifications in the app settings or your device settings. Klic does not use notifications for third-party advertising.

3. Information We Do Not Currently Collect

Based on the current implementation, Klic does not currently collect:

• Background or continuous location tracking
• Bluetooth data
• NFC data
• Contacts
• Microphone recordings
• User-uploaded photos
• Advertising ID / IDFA
• Cross-app tracking data
• Third-party advertising data
• Third-party analytics events
• Crash-reporting SDK data

If Klic introduces these features in the future, this Privacy Policy will be updated as required.

4. How We Use Information

We use information to:

• Create and manage user accounts
• Authenticate users
• Provide shopping and checkout-related functionality
• Manage cart and purchase history
• Generate and display digital receipts
• Support in-store approval or QR-code verification flows
• Allow users to rate purchased products
• Provide customer support
• Protect user accounts
• Prevent fraud and abuse
• Maintain app security
• Comply with legal obligations
• Improve app functionality

5. Legal Bases for Processing

Where applicable, Klic processes personal information based on:

• Performance of a contract with the user
• User consent
• Legitimate interests, such as fraud prevention and service security
• Compliance with legal obligations

6. Third-Party Services

Klic may use third-party services, including:

• Supabase, for authentication, database, backend services, and storage infrastructure
• Google Sign-In, for authentication
• Sign in with Apple, for authentication
• Google Pay, if enabled and properly configured
• Operating system services for biometric authentication

These third-party services may process information according to their own terms and privacy policies.

7. Sharing Information

Klic does not sell personal information.

We may share information with:

• Backend infrastructure providers
• Authentication providers
• Payment providers
• Legal authorities, if required by law
• Service providers acting on our behalf

Participating stores may receive information necessary to complete or verify a transaction. Klic may also provide stores with aggregated or anonymized business insights, such as product popularity, sales trends, sizes, or colors, where such information does not identify individual users.

8. Aggregated and Anonymized Data

Klic may use aggregated, anonymized, or de-identified data for:

• Business analysis
• Product improvement
• Store insights
• Research
• Benchmarking
• Commercial purposes

This information does not identify individual users.

9. Data Retention

Klic retains personal information for as long as reasonably necessary to:

• Provide the Services
• Maintain purchase history
• Comply with legal obligations
• Resolve disputes
• Prevent fraud
• Enforce our rights

Some information may be retained after account deletion where required or permitted by law, such as tax, accounting, security, fraud-prevention, or legal records.

Aggregated and anonymized information may be retained indefinitely.

10. Account Deletion

Users may request or initiate account deletion through the app or by contacting Klic.

When an account is deleted, Klic will take steps to delete or anonymize personal information, subject to legal, security, accounting, fraud-prevention, and technical limitations.

Local sensitive user data, including saved card display metadata, should be removed from the device when the user signs out or deletes the account.

For deletion requests, contact: klic.pay@gmail.com

11. Security

Klic uses reasonable technical and organizational measures designed to protect personal information.

However, no system can guarantee absolute security. Users are responsible for protecting their devices and account access.

12. Children and Minors

Klic may be used by users of different ages.

However, payment-related features and purchases must only be used by minors with the permission and supervision of a parent or legal guardian, where required by law.

Parents or guardians may contact us regarding a minor's account or information.

13. International Data Processing

Information may be processed in Israel, the United States, or other countries where Klic or its service providers operate.

By using the Services, you understand that your information may be processed outside your country of residence, subject to applicable law.

14. Your Privacy Rights

Depending on your location and applicable law, you may have rights to:

• Access your personal information
• Correct inaccurate information
• Request deletion
• Object to certain processing
• Restrict certain processing
• Request a copy of your information

To submit a request, contact: klic.pay@gmail.com

15. Business Transfers

If Klic is involved in a merger, acquisition, investment, sale of assets, financing, restructuring, or similar transaction, user information may be transferred as part of that transaction, subject to applicable law.

16. Changes to This Privacy Policy

Klic may update this Privacy Policy from time to time.

Updated versions will be posted in the app, on our website, or through another appropriate method.

Continued use of the Services after an update means you acknowledge the updated Privacy Policy.

17. Contact Us

For privacy questions, legal requests, or data-related requests, contact:

Klic
Email: klic.pay@gmail.com