Privacy

The short version

We collect your name and email so we can sell you something and send it to you. Stripe handles the payment and we never see or store your card number. This site sets no cookies and runs no analytics scripts. You can have your data deleted by emailing hello@kaevolabs.com.

The rest of this page is the detail. Kaevo Labs LLC, 30 N Gould St Ste N, Sheridan, WY 82801, United States, is the controller of the data described here.

What we collect

• Your name and email address. Taken at checkout, and when you email us. Used to deliver what you bought, send receipts, and reply to you.
• Payment details. Entered into Stripe, processed by Stripe, and never stored by Kaevo Labs. We receive back the last four digits of the card, the card brand, the country and whether the charge succeeded. That is all we can see.
• Purchase records. What you bought, when, how much you paid, and the subscription status if you have one. We keep these because tax and accounting rules require it.
• App account data. If you use Khidr, the email you signed up with, your subscription status, and the settings you choose in the app, including the location you set for prayer times.
• Server logs. Cloudflare, which hosts this site, keeps standard request logs. These include IP addresses, timestamps, the page requested and the browser's user agent. They exist for security and reliability and we do not use them to build a profile of you.

We do not buy data about you from anyone, and we do not sell or rent your data to anyone.

Cookies and analytics

This site sets no cookies of its own and loads no analytics or advertising scripts. Fonts on this site are loaded from Google Fonts, which means Google receives the IP address of the request in order to serve the font file. Stripe's checkout pages set their own cookies for fraud prevention and to keep the checkout working; Stripe's own privacy policy covers those.

If we add analytics later, we will name the provider on this page before turning it on, and we will pick a provider that does not track people across other websites.

Why we are allowed to hold it

We process your name, email and purchase records because we need them to perform the contract you entered into when you bought something. We keep tax and payment records because the law requires it. We rely on our legitimate interest in running a secure service for server logs and fraud prevention. Where we ask for consent, such as for a marketing email list, you can withdraw it at any time.

Who else processes it

These are the third parties that touch your data, and what each one does.

• Stripe, Inc. Payment processing, card storage, subscription billing, receipts, invoices and fraud checks.
• Cloudflare, Inc. Hosting and delivery of this website, plus the security layer in front of it.
• Google LLC. Serves the web font used on this site. Google receives the IP address of the font request.
• Our email provider. Sends your download links, receipts and any reply we write, and stores that correspondence. The provider is named in the current version of this page whenever it changes.

Each of these acts as a processor on our instructions, apart from Stripe, which is also a controller in its own right for payment and anti-fraud purposes. Some of them are based in the United States, so your data may be processed there. Where transfers out of the UK or EEA are involved, they are made under the standard contractual clauses those providers publish.

How long we keep it

Purchase and tax records are kept for seven years, which is the outside edge of what tax authorities ask for. App account data is kept while your account exists, and deleted within 30 days of you closing it. Email correspondence is kept for two years. Cloudflare's server logs are kept on Cloudflare's own retention schedule, which is short and measured in days.

Your rights

Wherever you live, you can ask us to do any of the following, and we will not charge you for it or treat you differently for asking.

• Get a copy of the data we hold about you.
• Correct anything that is wrong.
• Delete your data, subject to records we are legally required to keep.
• Get your data in a portable format.
• Object to processing, or ask us to restrict it.
• Opt out of marketing email, which you can also do from the unsubscribe link in any of it.

To use any of these, email hello@kaevolabs.com from the address you bought with, or tell us the address you used. We reply within five business days and complete the request within 30 days. If you are in the UK or EEA and you think we have handled your data badly, you can complain to your national data protection authority.

Deleting your account

Ask us at hello@kaevolabs.com and we will delete your app account and its settings within 30 days. Deleting your account does not cancel a live subscription, so cancel that first from the account page in the app, or ask us to do both in the same email. Purchase records tied to tax filings stay in our accounts for the seven years described above.

Children

Nothing we sell is aimed at children under 13, and we do not knowingly collect data from them. If you believe a child has given us data, email us and we will delete it.

Security

The site is served over HTTPS. Card data never reaches our systems. Access to our accounts and records is limited to people who need it and protected by two-factor authentication. No system is perfectly secure, and if a breach affects your data we will tell you and the relevant regulator as the law requires.

Changes

If we change this policy we will update the date at the top of this page. For changes that materially affect how we use your data, we will email people who have bought from us.

Contact

Privacy questions go to hello@kaevolabs.com, or write to Kaevo Labs LLC, 30 N Gould St Ste N, Sheridan, WY 82801, United States.