Cookie Policy
This policy explains what cookies and similar technologies are, how Kivvo uses them, and how you can control them. It sits alongside our general Privacy Policy, which covers our broader approach to handling personal information.
The short version
Cookies are small files stored on your device when you visit a website. They're used to make websites work and to remember things about your visit.
Kivvo uses cookies to keep you signed in, remember your settings, keep the service secure, and understand how Kivvo is used.
We use as few cookies as we can. We don't use advertising or tracking cookies. We don't sell data from cookies.
You can control cookies through your browser settings. Some cookies are essential — if you block them, parts of Kivvo won't work.
We'll tell you about material changes to this policy.
What are cookies and similar technologies?
When you visit a website, the site can ask your browser to store small text files on your device. These are called cookies. Cookies usually contain a name, a value, and information about where they came from and how long they last.
There are other similar technologies that do similar jobs:
Local storage — data stored in your browser that isn't sent back to the server on every request
Session storage — like local storage, but cleared when you close the browser tab
Pixels and similar tracking — tiny images or scripts that can record when a page is viewed
When we refer to "cookies" in this policy, we mean cookies and these similar technologies.
Cookies can be:
Session cookies — deleted when you close your browser
Persistent cookies — stored on your device for a set period
First-party cookies — set by Kivvo itself
Third-party cookies — set by other services we use
How Kivvo uses cookies
We use cookies for four main purposes.
1. Essential cookies
These cookies are needed for Kivvo to work. Without them, Kivvo can't function properly. They're used for things like:
Keeping you signed in — so you don't have to enter your password on every page
Maintaining your session — so Kivvo can tell it's still you as you move around the app
Security — helping prevent cross-site request forgery and other attacks
Load balancing — making sure requests are routed correctly
Remembering your choices — such as accepting our cookie notice
You can't opt out of essential cookies while using Kivvo. If you block them in your browser, some or all of Kivvo may not work.
2. Functional cookies
These cookies remember your preferences so Kivvo works the way you'd expect. They're used for things like:
Remembering your account settings
Remembering your interface preferences, such as text spacing for accessibility
Remembering your notification preferences
Remembering form values while you're completing a task
If you block functional cookies, some preferences may reset between visits. Kivvo itself will still work.
3. Analytics cookies
These cookies help us understand how Kivvo is being used, so we can improve it. They're used for things like:
Counting visits and page views — so we can see which parts of Kivvo are used most
Understanding how users move through Kivvo — so we can spot confusing flows
Measuring performance — so we can see where Kivvo is slow or unreliable
Understanding device and browser breakdown — so we can prioritise compatibility
Kivvo uses Vercel Analytics and Vercel Speed Insights for this purpose. Vercel Analytics is designed to be privacy-friendly: it doesn't use cookies to build individual user profiles and it doesn't track users across other websites.
We don't use third-party advertising cookies, and we don't share analytics data with advertisers.
4. Payment provider cookies
When you interact with payment features of Kivvo, our payment provider (Stripe) may set cookies to:
Process payments securely
Detect and prevent fraud
Remember payment methods you've chosen to save
These are set by Stripe and are subject to Stripe's own cookie and privacy policies. We recommend reading Stripe's policy if you'd like more detail. These cookies are only set when you interact with payment features.
Cookies we don't use
To be clear about what Kivvo doesn't do:
We don't use advertising cookies. Kivvo doesn't display third-party ads.
We don't use tracking cookies that follow you across other websites. Kivvo doesn't try to build a picture of where else you go online.
We don't use cookies to sell your data. We don't sell data, period.
We don't use social media tracking pixels. There's no Facebook, Twitter, or Instagram pixel on Kivvo.
If this ever changes, we'll update this policy and tell you.
Specific cookies we use
Here's a plain-language list of the main cookies you may encounter when using Kivvo.
| Cookie name | Purpose | Type | Duration |
|---|---|---|---|
| sb-*-auth-token | Keeps you signed in and maintains your session (set by Supabase) | Essential, first-party | Session |
| kivvo-theme | Remembers your interface theme (light / dark) | Functional, first-party | 1 year |
| kivvo-accessibility | Remembers your text spacing and accessibility preferences | Functional, first-party | 1 year |
| kivvo-cookie-notice | Remembers that you've seen the cookie notice | Essential, first-party | 1 year |
| _vercel_insights | Used by Vercel Analytics to count visits | Analytics, first-party | Session |
| _vercel_speed | Used by Vercel Speed Insights to measure performance | Analytics, first-party | Session |
| __stripe_mid | Used by Stripe to prevent fraud and process payments | Payment, third-party | 1 year |
| __stripe_sid | Used by Stripe to prevent fraud and process payments | Payment, third-party | Session |
| __Host-stripe-* | Used by Stripe to securely process payments | Payment, third-party | Session |
This list may change as Kivvo develops. If you want the current list at any time, you can inspect the cookies set on your device using your browser's developer tools.
Your control over cookies
You have several ways to control cookies.
Browser settings
Most browsers let you:
See what cookies are stored
Delete some or all cookies
Block cookies from specific sites
Block all third-party cookies
Block all cookies entirely
The exact steps depend on your browser. Search for "[your browser name] cookie settings" for guidance.
Third-party opt-outs
For analytics and payment cookies, some providers offer their own opt-out mechanisms:
Vercel Analytics — Vercel Analytics is designed to be privacy-friendly. It doesn't use cookies to track individuals across sites. You can block its scripts with a content blocker or browser setting if you prefer.
Stripe — Stripe provides information about its cookies and settings on its own website.
Do Not Track and Global Privacy Control
Some browsers offer a "Do Not Track" or "Global Privacy Control" signal. We aim to respect these signals where technically feasible, but we can't guarantee that every third-party service will.
Blocking cookies
If you block essential cookies:
You may not be able to sign in to Kivvo
Your session may expire immediately
Some or all of Kivvo may not work
If you block functional cookies:
Your preferences may not persist between visits
If you block analytics cookies:
Kivvo will still work
We'll have less information to help us improve
If you block payment cookies:
Payment features may not work
Cookies and your privacy
Cookies can be personal information under the New Zealand Privacy Act 2020, particularly when they can be linked to you as an individual.
We handle information collected through cookies in accordance with our Privacy Policy. That policy describes:
What personal information we collect
Why we collect it
Who we share it with
How long we keep it
Your rights in relation to it
If you want to request access to or correction of personal information we hold about you, you can do so via the Data Requests page or by submitting a support ticket.
Third parties who set cookies through Kivvo
The following third parties may set cookies on your device when you use Kivvo. Each has its own privacy and cookie policy:
| Provider | Purpose | Their policy |
|---|---|---|
| Stripe | Payment processing, fraud prevention | See Stripe's website |
| Supabase | Authentication and session management | See Supabase's website |
| Vercel | Hosting, analytics, performance monitoring | See Vercel's website |
We choose our providers carefully. We recommend reviewing their policies if you want more detail about how they use cookies.
Changes to this policy
We may update this Cookie Policy from time to time. When we make material changes:
We'll update this page.
We'll notify you where the change materially affects you.
The updated policy takes effect when we publish it.
If we start using new categories of cookies — for example, if we ever introduce advertising or social media tracking — we'll tell you clearly and, where required, ask for your consent before setting them.
Where to find more detail
For more information, see:
Privacy Policy — how we handle your personal information
Terms of Service — the general agreement between you and Kivvo
Data Requests — how to access or correct your data
Complaints Policy — how to raise a concern
Financial Services Disclosures — Kivvo's regulatory position
If you have a question about cookies that isn't answered here, please submit a support ticket via the Support page. We don't use email for support.
This page was last reviewed in October 2026.