Privacy Policy

Interpretation and Definitions

Interpretation

The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

For the purposes of this Privacy Policy:

• Application refers to Klippa, the software program provided by the Company.
• Company (referred to as either "the Company", "We", "Us" or "Our" in this Agreement) refers to MDEVSA (PTY) LTD, Gauteng, South Africa.
• Device means any device that can access the Service such as a cellphone or a digital tablet.
• Personal Data is any information that relates to an identified or identifiable individual.
• Service refers to the Application and the website https://myklippa.com.
• Service Provider means any natural or legal person who processes data on behalf of the Company. It refers to third-party companies employed by the Company to facilitate the Service, provide the Service on behalf of the Company, or assist the Company in analyzing how the Service is used (specifically Apple, RevenueCat, and PostHog).
• Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself.
• You means the individual accessing or using the Service.

Collecting and Using Your Data

Privacy at a Glance

• In the App (default): Your spend history, bank alerts, map locations, and AI chats stay on Your Device. Klippa does not upload your personal financial data to Our servers.
• Website / Support: We may receive Your email address if You voluntarily join our waitlist at https://myklippa.com or email us for support.
• TestFlight beta rewards (when offered): If You choose to submit testing feedback through the in-app survey in a TestFlight or development build, that survey may collect Your email address solely so We can deliver a promotional voucher or similar third-party credit of whatever face value and issuer We state for that programme, if Your submission is approved. That email is not used to create an account, is not used for marketing identify, and is not attached to anonymous product analytics events.

What Stays on Your Device (Default)

Klippa is designed to process your financial information locally on your Device. It reads Apple Pay and Wallet taps, as well as bank SMS or email alerts already on your Device.

The following information never leaves your Device and is not stored on our servers:

• Your transactions, merchant names, and spend amounts.
• Bank alerts and spend totals.
• Maps of your taps and detected subscriptions.
• Questions and answers from the optional on-device conversational AI feature.

Types of Data Collected

Personal Data (Website, Support, and optional beta reward survey)

While using Our Service, We may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You. Personally identifiable information is limited to:

• Email Address: Collected if You join our website waitlist (to send launch notices), if You contact support, or if You voluntarily submit it in a TestFlight / development testing-feedback survey for delivery of an approved promotional voucher only (value and issuer as stated for that programme).

Usage Data and Analytics (Anonymous)

Usage Data is collected automatically when using the Service.

• Product Analytics: We use a Service Provider (PostHog) to collect anonymous, aggregated product events (such as onboarding screens viewed). Product analytics events contain no names, no email addresses, no transaction amounts, no merchant names, and no Apple ID identifiers. We do not record or replay sessions of your spend screens.
• Testing-feedback survey (TestFlight / development only): When a beta reward programme is active, feedback text and an email you enter in that survey are stored as survey responses so We can review feedback and, if approved, send a voucher. We do not call PostHog identify() or attach email to ordinary product events.

Purchases

If You subscribe to the Application, payments are processed directly by Apple. We use a Service Provider (RevenueCat) to receive anonymous purchase and entitlement status data. We do not receive Your full card numbers or spend journal.

Use of Your Data

We use the collected information only for the following purposes:

• To send waitlist notifications and TestFlight invitations.
• To analyze anonymous Usage Data to improve the Application.
• To manage anonymous subscription statuses.
• To provide customer support when You contact Us.
• To review TestFlight testing feedback and deliver approved promotional vouchers to the email You provided for that purpose (and related operational emails such as "under review").

Data Retention and International Data Transfers

• App Data: On-device data is retained until You delete the Application from Your Device.
• Waitlist and Support Data: We retain your email until you unsubscribe, ask to be removed, or your support inquiry is resolved.
• Beta reward survey Data: Feedback and voucher-delivery emails are retained for the duration of the programme and a reasonable period afterward for fraud prevention, accounting, and to honour deletion requests, then deleted or anonymised.
• International Processing: As a global service, We and Our Service Providers (like Apple, RevenueCat, and PostHog) may store or process information outside of your home country. By using the Service, You acknowledge that your data may be transferred to international servers operating under strict privacy safeguards.

Security of Your Personal Data

The security of Your Personal Data is important to Us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While We strive to use commercially acceptable means to protect Your Personal Data, We cannot guarantee its absolute security. Because your primary financial data (spend history, transactions) is stored exclusively on Your Device, its security is heavily reliant on your Device's built-in security features.

Children's Privacy

Our Service is a financial tool and does not address anyone under the age of 18. We do not knowingly collect personally identifiable information from anyone under the age of 18. If You are a parent or guardian and You are aware that Your child has provided Us with Personal Data, please contact Us so We can take steps to remove that information.

Your Global Privacy Rights

Depending on your jurisdiction (including under POPIA, GDPR, UK GDPR, CCPA/CPRA, and other privacy laws), You have rights regarding your Personal Data, including:

• Right to Access / Know: You may request details about the limited Personal Data We hold about You.
• Right to Deletion: You can ask us to delete your waitlist email, support history, or beta reward survey email (deleting the Application automatically deletes all on-device financial data).
• Right to Correction: You may request that We update any inaccurate Personal Data.
• Right to Object / Restrict: You may request that We limit how We process your waitlist or voucher-delivery email.
• Right to Complain: You have the right to lodge a complaint with your local data protection regulator.

To exercise any of these rights, please contact Us at hello@myklippa.com.

Changes to this Privacy Policy

We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top of this Privacy Policy. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

If you have any questions about this Privacy Policy, You can contact us:

• By email: hello@myklippa.com