Klike Privacy Policy

Version: 1.1
Effective Date: 03/05/2026
Last Updated: 06/05/2026

1. Introduction

Welcome to Klike ("the App", "the Service"). This Privacy Policy describes how Klike ("Klike", "we", "us", "our"), with registered office in Catanzaro (CZ), Calabria, Italy, collects, uses, stores and protects your personal data when you use our mobile application, our promotional landing page, and our website.

Klike takes the protection of your personal data very seriously. This policy has been drafted in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and applicable data protection legislation.

We invite you to read this document carefully before using the Service. By using Klike, you confirm that you have read and acknowledged this Privacy Policy.

2. Data Controller

The Data Controller of your personal data is:

Francesco Granata
Registered office: Sellia Marina (CZ), Calabria, Italy
Contact email: support@klikeapp.com

For any questions regarding the processing of your personal data, you may contact us at any time at the email address indicated above.

3. Personal Data Collected

We collect personal data in two ways: directly from you and automatically through your use of the Service.

3.1 Data Provided Directly by the User

When you create an account or use Klike's features, we collect the following information:

Full name: provided at the time of registration.
Email address: used for the creation and management of your account.
Password: stored in encrypted and protected form; it is never readable in plain text by us.
Uploaded photos: the images you choose to upload to the App in response to the daily theme. These photos will be publicly visible to other registered users within the platform.

3.2 Automatically Collected Data

When you access and use the App, our systems automatically collect certain technical information necessary for the proper functioning of the Service:

IP address: the number that identifies your device's network connection.
Device data: device type, operating system (iOS or Android), App version, technical device identifiers.
Usage logs: data about your interactions with the App (e.g., access dates and times, features used, errors).

3.3 Data Processed via Single Sign-On (SSO)

If you choose to register or sign in using your Apple account (Sign in with Apple) or Google account (Google Sign-In), we will receive from these providers only the data strictly necessary for the creation of your Klike account (typically name and email address). The processing of your data by Apple and Google is governed by their respective privacy policies, which we invite you to consult.

3.4 Data from the Promotional Landing Page (Netlify)

Klike's promotional landing page is hosted on the servers of Netlify, Inc. (San Francisco, CA, USA). When you access this web page, Netlify automatically processes certain basic browsing data, including IP addresses and network logs, solely to ensure the security and proper functioning of the website. This data is managed by Netlify as Data Processor, in compliance with its privacy policies. For more information, please consult the Netlify Privacy Policy.

3.5 Website Data Collection — Waitlist Registration Form

Scope: This section applies exclusively to personal data collected through the HTML form present on the Klike website (the "Website"), and is entirely separate from the data processing activities carried out within the mobile application described in the preceding sections.

3.5.1 Data Collected

Through the waitlist registration form on the Website, we collect exclusively the following personal data:

Email address: the only piece of information requested and processed for the purpose of waitlist registration.

No other personal data (such as name, telephone number, or any other identifier) is collected through this form.

3.5.2 Method of Collection and Active Consent

The email address is collected via an HTML form present on the Website's landing page. Prior to submitting the form, the user is required to actively select a dedicated checkbox explicitly confirming that they have read and accepted this Privacy Policy. Submission of the form without activating this checkbox is technically prevented. The registration, therefore, constitutes a freely given, specific, informed and unambiguous act of consent pursuant to Article 6(1)(a) and Article 7 of the GDPR.

3.5.3 Purpose of Processing

The email address collected is processed exclusively for the following purpose:

Waitlist management and service notifications: to include the user in the Klike pre-launch waitlist and to send them informational communications regarding the official publication and availability for download of the App on the relevant distribution platforms (App Store, Google Play Store).

The email address will not be used for commercial marketing campaigns, behavioural profiling, or any purpose other than those described above.

3.5.4 Legal Basis for Processing

The processing of the email address collected via the waitlist form is based on the consent of the data subject pursuant to Article 6(1)(a) of the GDPR, freely expressed by the user through the explicit activation of the acceptance checkbox prior to submitting the form.

3.5.5 Data Sharing and Third-Party Transfers

The email addresses collected through the waitlist form:

Are not sold, rented, or transferred to third parties for marketing, advertising or commercial profiling purposes.
Are stored securely in a cloud database managed by Supabase, Inc., which acts as Data Processor pursuant to Article 28 of the GDPR, processing the data exclusively on our instructions and in accordance with appropriate contractual safeguards.
May be transferred outside the European Economic Area (EEA) to the extent that Supabase's infrastructure requires such transfers. In such cases, we ensure that the transfer is carried out in compliance with the GDPR, including through the use of Standard Contractual Clauses approved by the European Commission.

3.5.6 Data Retention

Email addresses collected via the waitlist form will be retained for the time strictly necessary to fulfil the purposes for which they were collected — specifically, until the App is officially published and the waitlist communication has been sent — and, in any case, for a period not exceeding 12 (twelve) months from the date of registration, unless a shorter retention period is required by applicable law or requested by the user pursuant to the rights described in Section 7 of this Policy.

At the end of the retention period, the data will be permanently and irreversibly deleted from our systems.

3.5.7 Right to Withdraw Consent

The user may withdraw their consent at any time and request the deletion of their email address from the waitlist by sending a request to: support@klikeapp.com. Withdrawal of consent shall not affect the lawfulness of processing carried out prior to the withdrawal. Following a valid request, the email address will be permanently deleted without undue delay.

4. Purposes and Legal Bases for Processing

We process your personal data exclusively for the purposes described below, each grounded in a specific legal basis pursuant to Article 6 of the GDPR.

Purpose	Legal basis (Art. 6 GDPR)
Creation and management of your user account	Performance of a contract (Art. 6.1.b)
Provision of the Service (photo uploads, feed, voting, leaderboards)	Performance of a contract (Art. 6.1.b)
Account authentication and security	Performance of a contract (Art. 6.1.b)
Collection of consent at the time of registration	Consent of the data subject (Art. 6.1.a)
Responding to your support requests	Performance of a contract / Legitimate interest (Art. 6.1.b and 6.1.f)
Compliance with legal obligations	Legal obligation (Art. 6.1.c)
Waitlist management and App launch notifications (Website only)	Consent of the data subject (Art. 6.1.a)

Klike does not process your data for marketing purposes, commercial profiling or behavioural advertising. Your data is not sold to third parties, nor shared for advertising purposes.

5. Sharing of Data with Third Parties

Your personal data is not sold, rented or transferred to third parties for commercial or marketing purposes. We may share your data only in the following limited circumstances:

5.1 Technical Service Providers (Data Processors)

For the technical operation of the App, we rely on the following external providers, who process your data exclusively on our instructions and in compliance with the GDPR:

Supabase, Inc.: provider of our database and backend infrastructure (data storage, authentication). Supabase acts as a Data Processor pursuant to Art. 28 of the GDPR. This provider also stores email addresses collected via the Website waitlist form.
Apple Inc. and Google LLC: as providers of the Single Sign-On service, they receive only the information strictly necessary for authentication.
Netlify, Inc.: hosting of the App's promotional landing page.

5.2 Legal Obligations

We may disclose your personal data where required by applicable law, by a judicial authority or by a public security authority, or where necessary to protect our legal rights.

5.3 International Data Transfers

Some of our providers (e.g. Supabase, Netlify, Apple, Google) may process data outside the European Economic Area (EEA). In such cases, we ensure that transfers take place in compliance with the GDPR, through the use of appropriate transfer mechanisms (e.g. Standard Contractual Clauses approved by the European Commission).

6. Data Retention

We retain your personal data for the time strictly necessary for the purposes described in this policy:

Account data (name, email, password): retained for the entire duration of your active account. Upon a request for account deletion by the user, all associated personal data is deleted instantly and permanently from our servers. We do not retain backup copies of account data after deletion.
Uploaded photos: after the daily reset at 00:00, photos are removed from the public feed, but remain saved in our databases to allow you to view them as a history in your personal profile. These photos will be permanently and instantly deleted should you choose to delete an individual photo (where the app permits) or upon deletion of the entire account.
Usage logs and technical data: automatically retained by our cloud infrastructure providers for the time strictly necessary for security monitoring and resolution of technical errors, for a period generally not exceeding 30 days.
Landing page browsing data (Netlify): subject to Netlify's retention policies.
Email addresses collected via the Website waitlist form: retained for a maximum period of 12 (twelve) months from the date of registration, or until the App launch notification has been sent, whichever occurs first. The user may request deletion at any time (see Section 3.5.7).

7. Rights of Data Subjects (GDPR)

As a data subject, you have the right to exercise the following rights against Klike at any time, as provided for by Articles 15–22 of the GDPR:

Right of access (Art. 15): you have the right to obtain confirmation as to whether or not personal data concerning you is being processed and, if so, to receive a copy of it.
Right to rectification (Art. 16): you have the right to obtain the correction of inaccurate or incomplete personal data concerning you.
Right to erasure / "right to be forgotten" (Art. 17): you have the right to obtain the erasure of your personal data, for example when it is no longer necessary for the purposes for which it was collected, or when you withdraw your consent.
Right to restriction of processing (Art. 18): you have the right to request the restriction of the processing of your data in specific circumstances (e.g. during the verification of a potential challenge to the accuracy of the data).
Right to data portability (Art. 20): you have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, and to transmit it to another Data Controller.
Right to object (Art. 21): you have the right to object to the processing of your personal data based on the legitimate interest of the Data Controller.
Right to withdraw consent (Art. 7.3): you have the right to withdraw your previously given consent at any time, without affecting the lawfulness of processing carried out prior to withdrawal.
Right to lodge a complaint (Art. 77): you have the right to lodge a complaint with the competent supervisory authority. In Italy, the competent authority is the Garante per la Protezione dei Dati Personali (www.garanteprivacy.it).

To exercise any of these rights, please contact us at: support@klikeapp.com. We will respond to your request within 30 days of receipt, except in cases of particular complexity.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data from unauthorised access, alteration, disclosure or destruction. These measures include password encryption, data transmission via the HTTPS protocol and restricted access to data by authorised personnel only.

However, no data transmission or storage system can be guaranteed as 100% secure. In the event of a personal data breach that poses a high risk to your rights and freedoms, we will notify you without undue delay, in compliance with the obligations set out in the GDPR.

9. Minors

Klike is intended for users aged 14 years or older. We do not knowingly collect personal data from minors under the age of 14. If you are a parent or guardian and believe that your child has created an account on Klike, we invite you to contact us immediately at support@klikeapp.com to proceed with the deletion of the account and associated data.

10. Cookies and Tracking Technologies

The Klike mobile App does not use cookies. The promotional landing page hosted on Netlify may make use of basic tracking technologies strictly necessary for the technical functioning of the website (e.g. browsing logs). [TO BE SUPPLEMENTED WITH A SEPARATE COOKIE POLICY IF NECESSARY.]

11. Changes to the Privacy Policy

We reserve the right to modify this Privacy Policy at any time. In the event of material changes, we will inform you through a visible notification in the App or via email to the address associated with your account, with reasonable notice before the changes take effect. Your continued use of the Service after such notification will constitute acceptance of the updated Privacy Policy.

12. Contact

For any questions, concerns or requests regarding the processing of your personal data, you may contact us at:

Email: support@klikeapp.com
Postal address: Sellia Marina (CZ), Calabria, Italy