Privacy Policy

1. Introduction

Welcome to Kitovo. We are committed to protecting your privacy and ensuring transparency about how we handle data. This Privacy Policy explains our practices regarding data collection, usage, and storage.

Effective Date: September 18, 2026

2. Data Controller Information

The data controller for Kitovo is:

3. Information We Collect

Receipt content is processed locally in your browser, not collected by our analytics services.

Kitovo is designed as a client-side application that runs entirely in your web browser. Any information you enter into our tools (business details, customer information, receipt data, uploaded images) is processed locally on your device and never transmitted to our servers.

This local-processing statement applies to receipt inputs, not all information associated with a visit. Hosting and analytics providers process connection and usage information, which can include IP addresses, browser information, page URLs, referrers, and cookie or device identifiers. These identifiers can constitute personal data; aggregated reports do not mean all underlying data is anonymous. Emails you send us also contain the information you choose to share. Do not send receipt details or other sensitive data in support messages unless necessary.

Analytics Data

We use Google Analytics to collect aggregated usage statistics that help us improve the site, including:

• Page views and navigation patterns
• Browser type and operating system
• Device type (mobile, desktop, tablet)
• General geographic location (country/city level)
• Referral sources

This analytics data never includes the receipt content, business details, or customer information you enter into our tools.

Product Analytics (PostHog)

We use PostHog, an EU-hosted product analytics service, to record page views and tool-usage events. This helps us understand which generators are used most often so we can prioritize improvements. PostHog receives:

• The page path (for example, /receipt-generator/)
• The receipt category for our generators (for example, gas, rent, bill)
• Browser type, viewport size, and referrer source

PostHog does NOT receive the receipt content, business details, customer information, uploaded logos, signatures, or stamps you enter into our tools. Autocapture of form input and session recording are explicitly disabled in our PostHog configuration. You can read PostHog's data-handling practices at posthog.com/privacy.

4. How We Use Information

Receipt content stays in your browser. Separately, analytics providers process usage information, and we use information you send by email to respond to your request.

Analytics data (if collected) is used solely for:

• Understanding which tools are most popular
• Improving user experience and site performance
• Identifying technical issues
• Making informed decisions about product development

5. Data Storage

Local Storage

Kitovo uses your browser's localStorage to save draft receipts and user preferences. This data:

• Stays on your device only
• Is never transmitted to our servers
• Can be cleared at any time through your browser settings
• Persists between browser sessions for your convenience

Your advertising consent choice, set through Google's certified consent platform for visitors in the EEA, UK, and Switzerland (see section 7), is also stored on your device — it is read back on your next visit so the message does not ask again.

IndexedDB

We may use IndexedDB (a browser database) to store larger data such as uploaded images or complex receipt templates. Like localStorage, this data:

• Remains entirely on your device
• Is never uploaded to external servers
• Can be deleted through browser settings

How to Clear Your Data

To delete all locally stored data:

• Chrome/Edge: Settings → Privacy and Security → Clear Browsing Data → Cookies and Site Data
• Firefox: Settings → Privacy & Security → Cookies and Site Data → Clear Data
• Safari: Preferences → Privacy → Manage Website Data → Remove All

6. Third-Party Services

Kitovo uses the following third-party services and libraries:

Client-Side Libraries

These libraries run in your browser and do not transmit data externally:

• html-to-image: For PNG export generation
• jsPDF: For PDF export generation
• date-fns: For date formatting
• cropperjs: For image cropping functionality
• interactjs: For drag-and-drop interactions

External Services

• Google Fonts: We load fonts from Google Fonts CDN. Google may collect usage data.
• PostHog: Product analytics hosted in the European Union. Processes page views, tool-usage events, and associated device and usage information; receipt inputs are not included in these events. See section 3 above for what is and isn't collected.
• Google Analytics: Used for aggregated usage statistics.
• Google AdSense (planned, not yet enabled): To keep Kitovo free, we plan to display non-intrusive advertising. Ads are not currently served. When enabled, Google and its advertising partners may use cookies or similar technologies to serve and measure ads. Google's advertising practices: policies.google.com/technologies/ads.

Important: None of these services have access to the receipt content or business and customer data you enter into our tools.

7. Cookies and Tracking

Kitovo itself does not set cookies to track you. However, the third-party services we use do set cookies:

• Google Analytics cookies, for aggregated usage measurement.
• PostHog uses first-party cookies to record page views and tool-usage events. You can read PostHog's cookie practices at posthog.com/privacy.
• Google Fonts may set cookies when loading font resources.
• Advertising (planned): Advertising is not enabled yet. When enabled, Google AdSense may use advertising cookies, including the DoubleClick cookie, to serve ads based on your prior visits to this or other websites. You can opt out of personalized advertising at adssettings.google.com.

Your choice (EEA/UK/Switzerland visitors): if your browser indicates you are in the European Economic Area, the United Kingdom, or Switzerland, no Google Analytics or PostHog scripts or cookies are loaded at all — not before consent and not after it. Advertising consent in those regions is collected separately through Google's certified consent management platform. Outside those regions, analytics load without a prompt.

You can also disable cookies in your browser settings without affecting the core receipt-generation functionality of Kitovo.

8. Data Export Behavior

When you download a receipt as PDF or PNG:

• The file is generated entirely in your browser using JavaScript
• The download happens directly to your device
• No data is uploaded to Kitovo servers or any third-party service
• You have complete control over where the exported file is saved

The exported files contain only the information you explicitly entered. We never inject tracking pixels, hidden metadata, or external links into your exported documents.

9. Your Rights (GDPR)

If you are located in the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation (GDPR):

• Right to Access: Contact privacy@kitovo.app about personal data processed in connection with your use of Kitovo. Receipt inputs remain on your device.
• Right to Deletion: Clear locally saved receipt data through browser settings. Contact privacy@kitovo.app to request deletion of other personal data, subject to applicable requirements.
• Right to Data Portability: You can export receipts from your browser. Contact privacy@kitovo.app about portability of other personal data where this right applies.
• Right to Object: You have complete control over what information you enter and export.
• Right to Rectification: You can edit any data you've entered at any time before exporting.

10. Your Rights (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with rights regarding your personal information:

• Right to Know: You can request information about personal information processed in connection with your use of Kitovo by contacting privacy@kitovo.app.
• Right to Delete: Clear locally saved receipts in your browser. Contact privacy@kitovo.app to request deletion of other personal information, subject to applicable requirements.
• Right to Opt-Out: We do not sell your personal information. You can opt out of personalized advertising cookies via Google Ads Settings.
• Right to Non-Discrimination: You will receive equal service regardless of exercising privacy rights.

11. Security

Security measures in place:

• HTTPS Enforcement: All pages are served over HTTPS to ensure encrypted communication.
• Client-Side Processing: Receipt inputs are processed in your browser, separately from analytics and any correspondence you send us.
• Local Receipt Processing: Receipt generation does not require uploading receipt inputs to an application server. Site hosting and analytics still use external infrastructure.
• No Data Transmission: Your receipt data never leaves your device unless you explicitly export it.
• Browser Security: We rely on modern browser security features to protect your data locally.

Your Responsibility: Since data is stored locally on your device, please ensure your device is secure (use passwords, encryption, up-to-date software).

12. Children's Privacy

Kitovo is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has used our services, please contact us at privacy@kitovo.app.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Your continued use of Kitovo after changes constitutes acceptance of the updated policy.

For significant changes, we may display a notice on the homepage or send communications if we have a means to contact users.

14. Contact Information

If you have any questions about this Privacy Policy or our privacy practices, please contact us: