Privacy Policy

Kusihhu Kitlist Privacy Policy

Last updated: 20 August 2026

Data controller: Kusihhu

1. Introduction

This Privacy Policy explains how Kusihhu collects, uses, stores and protects personal information when you use Kusihhu Kitlist, including the Android app with the package name `com.kusihhu.packlist` and the web app at `https://packlist.kusihhu.com`.

Kusihhu is based in the United Kingdom. Kusihhu Kitlist helps users choose a bike and bags, organise cycling equipment into Kitlists, save loadouts and create downloadable PDF Kitlists.

If you have any questions about this Privacy Policy or how your personal information is handled, please email support@kusihhu.com.

2. Information We Collect

We collect only the information reasonably needed to provide, secure and support Kusihhu Kitlist.

Account information

When you create or use an account, we may process:

- your email address;
- a unique account identifier;
- account authentication and session information; and
- account creation and last sign-in information.

Account authentication is provided through Supabase. Login credentials are processed securely by Supabase, and Kusihhu does not receive or store your password in plain text.

Kitlist and saved-loadout information

When you save a loadout, we may store information you choose to enter, such as:

- saved-loadout names;
- the bike and bags you select;
- equipment or item names;
- quantities, weights, volumes and similar Kitlist details; and
- the organisation of items between your selected bags.

Saved loadouts are associated with your account so that they can be retrieved and edited when you sign in.

Please avoid entering sensitive personal information in loadout names or item descriptions.

Trial and access-entitlement information

To provide the seven-day trial, included PDF allowance and lifetime-access purchase, we may store:

- trial start and expiry information;
- whether the included PDF allowance has been used;
- whether lifetime access has been unlocked;
- the access product associated with your account; and
- limited purchase-verification information received from or checked with Google Play.

Google Play purchase information

If you purchase Lifetime Access through the Android app, payment processing is handled by Google Play. Kusihhu does not receive or store your full payment-card or bank-account details.

To verify the purchase and unlock access, Kusihhu may process limited transaction information such as the Google Play product ID, purchase token, purchase status, purchase time and transaction or order reference. This information is used to verify the purchase, prevent fraud, restore access and maintain the entitlement associated with your Kusihhu Kitlist account.

PDF generation

Kusihhu Kitlist can generate completed or blank Kitlist PDFs. These PDFs are generated locally in the app or browser and downloaded directly to your device. Kusihhu does not upload or store the generated PDF file on its servers.

Information already stored in a saved cloud loadout remains subject to the other sections of this Privacy Policy.

Support communications

If you contact us for help or to exercise your data-protection rights, we may collect:

- your name, if provided;
- your email address;
- the content of your message; and
- any other information you choose to include.

Please do not send passwords, full payment-card details or other unnecessary sensitive information in a support message.

Technical and security information

When you use the app or website, our hosting, authentication and infrastructure providers may automatically process limited technical information needed to deliver and secure the service. This may include:

- IP address;
- browser and device type;
- operating system;
- access times and requested pages;
- authentication and security events; and
- diagnostic or error information.

Kusihhu Kitlist does not require access to your device's precise location and does not use your personal information for third-party advertising.

3. How We Use Your Information

We may use personal information to:

- create, authenticate and manage your account;
- save, retrieve, edit and delete your cloud loadouts;
- provide and track the seven-day trial and included PDF allowance;
- verify Google Play purchases and provide or restore Lifetime Access;
- generate PDFs on your device;
- respond to support enquiries and account-deletion requests;
- maintain security and prevent fraud, misuse and unauthorised access;
- diagnose faults and improve the reliability of the service; and
- meet legal, accounting, tax and regulatory obligations.

Under UK data-protection law, we generally rely on:

- performance of a contract where processing is needed to provide the app, account, trial, cloud storage or purchased access;
- legitimate interests to support users, secure the service, prevent fraud and improve reliability;
- legal obligations where records must be retained or disclosed by law; and
- consent where we specifically ask for it, such as for optional marketing communications.

4. Local Storage, Cookies and Similar Technologies

Kusihhu Kitlist may use cookies, browser storage or similar technologies for:

- essential sign-in and account sessions;
- remembering app settings and preferences;
- holding unsaved or locally saved packlist information; and
- security and fraud prevention.

Some locally stored information may remain on your device until you clear the app or browser data. Signing out or deleting the app does not by itself delete information saved in your cloud account.

5. How We Share Information

We do not sell your personal information.

We disclose limited information only where necessary to operate and protect Kusihhu Kitlist, including to:

- Supabase, which provides account authentication, database and cloud-storage infrastructure;
- Google Play, which processes Android purchases and provides purchase-verification services;
- Vercel and other hosting or infrastructure providers, which help deliver and secure the web app;
- professional advisers where reasonably necessary; and
- courts, regulators, law-enforcement bodies or other authorities where disclosure is required by law.

Service providers may process information only to provide their services to us or as otherwise permitted by their own terms and applicable law.

You can read the relevant provider privacy information at:

- Supabase: `https://supabase.com/privacy`
- Google: `https://policies.google.com/privacy`
- Vercel: `https://vercel.com/legal/privacy-policy`

6. Data Retention

We keep personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

Typical retention periods include:

- account information: while your account remains active and until the account is deleted;
- saved loadouts: until you delete an individual loadout or your account is deleted;
- trial and entitlement information: while needed to provide, verify or restore access;
- purchase and verification records: for as long as reasonably needed for access restoration, fraud prevention, dispute handling and legal, tax or accounting requirements;
- support communications: for as long as needed to resolve the enquiry and maintain appropriate records;
- technical and security logs: for a limited period needed for security, diagnostics and service reliability.

When information is no longer required, we will delete or anonymise it where appropriate. Deleted information may remain in secure backups for a limited period before being overwritten.

7. Account and Data Deletion

You may delete individual saved loadouts within Kusihhu Kitlist.

To request deletion of your Kusihhu Kitlist account and associated personal data, email support@kusihhu.com from the email address linked to your account and use the subject line “Kusihhu Kitlist account deletion request”.

You can also view the account-deletion instructions at:

`https://www.kusihhu.com/account-deletion`

We will verify that you are the account holder and aim to complete a valid deletion request within 30 days. Account and saved-loadout information will be deleted unless limited information must be retained for legal, tax, accounting, security, fraud-prevention, dispute-resolution or payment-record purposes.

Deleting Kusihhu Kitlist from your device does not automatically delete your account or cloud data. Deleting your account does not reverse or refund a completed Google Play purchase. Refund requests are handled in accordance with Google Play's applicable processes and Kusihhu's terms.

8. Security

We take reasonable technical and organisational measures to protect personal information from loss, misuse, unauthorised access, disclosure or alteration. These measures include secure authentication, access controls and encrypted HTTPS connections for data transmitted between the app and our service providers.

No internet service can be guaranteed to be completely secure. You are responsible for keeping your sign-in details safe and for contacting us if you believe your account has been accessed without permission.

9. International Data Transfers

Some service providers may process personal information outside the United Kingdom. Where required, we use providers and safeguards intended to ensure that personal information receives an appropriate level of protection under applicable data-protection law.

10. Your Data-Protection Rights

Depending on the law that applies to you, you may have the right to:

- request access to your personal information;
- ask us to correct inaccurate or incomplete information;
- ask us to delete your information in certain circumstances;
- ask us to restrict how your information is used;
- object to certain uses of your information;
- withdraw consent where processing is based on consent; and
- request a portable copy of certain information.

To exercise any of these rights, email support@kusihhu.com. We may need to verify your identity before completing a request.

If you are in the United Kingdom, you also have the right to complain to the Information Commissioner's Office. More information is available at `https://ico.org.uk/make-a-complaint/`.

11. Children's Privacy

Kusihhu Kitlist is not specifically directed at children under 13. If you believe a child has provided personal information without appropriate permission, please contact us at support@kusihhu.com so that we can investigate and take appropriate action.

12. Third-Party Links and Services

The app or website may contain links to third-party websites or services. Kusihhu is not responsible for the privacy, security or content practices of third parties. You should review their privacy information before providing personal information to them.

13. Changes to This Privacy Policy

We may update this Privacy Policy when Kusihhu Kitlist, our service providers or legal requirements change. The latest version will be published on this page with a revised “Last updated” date. Where appropriate, we may also notify users of significant changes through the app, website or email.

14. Contact Us

For questions, requests or complaints relating to privacy or personal information, contact:

Kusihhu
Email: support@kusihhu.com