Privacy Policy

1. Introduction

Welcome to Kitovo. We are committed to protecting your privacy and ensuring transparency about how we handle data. This Privacy Policy explains our practices regarding data collection, usage, and storage.

Effective Date: August 31, 2026

2. Data Controller Information

The data controller for Kitovo is:

3. Information We Collect

We do NOT collect, store, or transmit any of your personal or business data.

Kitovo is designed as a client-side application that runs entirely in your web browser. Any information you enter into our tools (business details, customer information, receipt data, uploaded images) is processed locally on your device and never transmitted to our servers.

Analytics Data

We use Google Analytics to collect anonymous, aggregated usage statistics that help us improve the site, including:

• Page views and navigation patterns
• Browser type and operating system
• Device type (mobile, desktop, tablet)
• General geographic location (country/city level)
• Referral sources

This analytics data never includes the receipt content, business details, or customer information you enter into our tools.

Product Analytics (PostHog)

We use PostHog, an EU-hosted product analytics service, to record anonymous page views and tool-usage events. This helps us understand which generators are used most often so we can prioritize improvements. PostHog receives:

• The page path (for example, /receipt-generator/)
• The receipt category for our generators (for example, gas, rent, bill)
• Browser type, viewport size, and referrer source

PostHog does NOT receive the receipt content, business details, customer information, uploaded logos, signatures, or stamps you enter into our tools. Autocapture of form input and session recording are explicitly disabled in our PostHog configuration. You can read PostHog's data-handling practices at posthog.com/privacy.

4. How We Use Information

Since we do not collect your personal or business data, there is no usage of such data by Kitovo.

Analytics data (if collected) is used solely for:

• Understanding which tools are most popular
• Improving user experience and site performance
• Identifying technical issues
• Making informed decisions about product development

5. Data Storage

Local Storage

Kitovo uses your browser's localStorage to save draft receipts and user preferences. This data:

• Stays on your device only
• Is never transmitted to our servers
• Can be cleared at any time through your browser settings
• Persists between browser sessions for your convenience

IndexedDB

We may use IndexedDB (a browser database) to store larger data such as uploaded images or complex receipt templates. Like localStorage, this data:

• Remains entirely on your device
• Is never uploaded to external servers
• Can be deleted through browser settings

How to Clear Your Data

To delete all locally stored data:

• Chrome/Edge: Settings → Privacy and Security → Clear Browsing Data → Cookies and Site Data
• Firefox: Settings → Privacy & Security → Cookies and Site Data → Clear Data
• Safari: Preferences → Privacy → Manage Website Data → Remove All

6. Third-Party Services

Kitovo uses the following third-party services and libraries:

Client-Side Libraries

These libraries run in your browser and do not transmit data externally:

• html-to-image: For PNG export generation
• jsPDF: For PDF export generation
• date-fns: For date formatting
• cropperjs: For image cropping functionality
• interactjs: For drag-and-drop interactions

External Services

• Google Fonts: We load fonts from Google Fonts CDN. Google may collect usage data.
• PostHog: Anonymous product analytics hosted in the European Union. Receives only page paths and tool-usage events; never receives receipt content. See section 3 above for what is and isn't collected.
• Google Analytics: Used for anonymous, aggregated usage statistics.

Important: None of these services have access to the receipt content or business and customer data you enter into our tools.

7. Cookies and Tracking

Kitovo itself does not set cookies to track you. However, the third-party services we use do set cookies:

• Google Analytics cookies, for anonymous, aggregated usage measurement.
• PostHog uses first-party cookies to record anonymous page views and tool-usage events. You can read PostHog's cookie practices at posthog.com/privacy.
• Google Fonts may set cookies when loading font resources.

You can disable cookies in your browser settings without affecting the core receipt-generation functionality of Kitovo. Both Google Analytics and PostHog honor the "Do Not Track" browser signal where supported.

8. Data Export Behavior

When you download a receipt as PDF or PNG:

• The file is generated entirely in your browser using JavaScript
• The download happens directly to your device
• No data is uploaded to Kitovo servers or any third-party service
• You have complete control over where the exported file is saved

The exported files contain only the information you explicitly entered. We never inject tracking pixels, hidden metadata, or external links into your exported documents.

9. Your Rights (GDPR)

If you are located in the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation (GDPR):

• Right to Access: Since we don't collect your data, there is no data to access from our servers.
• Right to Deletion: All your data is stored locally on your device. You can delete it at any time through browser settings.
• Right to Data Portability: Your data is already portable—it exists only on your device and in exported files.
• Right to Object: You have complete control over what information you enter and export.
• Right to Rectification: You can edit any data you've entered at any time before exporting.

10. Your Rights (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with rights regarding your personal information:

• Right to Know: We do not collect or sell your personal information.
• Right to Delete: Since we don't collect your data, there is nothing to delete on our end. You control all data locally.
• Right to Opt-Out: We do not sell your personal information. You can opt out of personalized advertising cookies via Google Ads Settings.
• Right to Non-Discrimination: You will receive equal service regardless of exercising privacy rights.

11. Security

Security measures in place:

• HTTPS Enforcement: All pages are served over HTTPS to ensure encrypted communication.
• Client-Side Processing: All sensitive data processing happens in your browser, never on external servers.
• No Backend: With no backend infrastructure, there is no server to be compromised.
• No Data Transmission: Your receipt data never leaves your device unless you explicitly export it.
• Browser Security: We rely on modern browser security features to protect your data locally.

Your Responsibility: Since data is stored locally on your device, please ensure your device is secure (use passwords, encryption, up-to-date software).

12. Children's Privacy

Kitovo is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has used our services, please contact us at privacy@kitovo.app.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Your continued use of Kitovo after changes constitutes acceptance of the updated policy.

For significant changes, we may display a notice on the homepage or send communications if we have a means to contact users.

14. Contact Information

If you have any questions about this Privacy Policy or our privacy practices, please contact us: