KIVVO POLICY

Cookie Policy

This policy explains what cookies and similar technologies are, how Kivvo uses them, and how you can control them. It sits alongside our general Privacy Policy, which covers our broader approach to handling personal information.

The short version

Cookies are small files stored on your device when you visit a website. They're used to make websites work and to remember things about your visit.

Kivvo uses cookies to keep you signed in, remember your settings, keep the service secure, and understand how Kivvo is used.

We use as few cookies as we can. We don't use advertising or tracking cookies. We don't sell data from cookies.

You can control cookies through your browser settings. Some cookies are essential — if you block them, parts of Kivvo won't work.

We'll tell you about material changes to this policy.

What are cookies and similar technologies?

When you visit a website, the site can ask your browser to store small text files on your device. These are called cookies. Cookies usually contain a name, a value, and information about where they came from and how long they last.

There are other similar technologies that do similar jobs:

Local storage — data stored in your browser that isn't sent back to the server on every request

Session storage — like local storage, but cleared when you close the browser tab

Pixels and similar tracking — tiny images or scripts that can record when a page is viewed

When we refer to "cookies" in this policy, we mean cookies and these similar technologies.

Cookies can be:

Session cookies — deleted when you close your browser

Persistent cookies — stored on your device for a set period

First-party cookies — set by Kivvo itself

Third-party cookies — set by other services we use

How Kivvo uses cookies

We use cookies for four main purposes.

1. Essential cookies

These cookies are needed for Kivvo to work. Without them, Kivvo can't function properly. They're used for things like:

Keeping you signed in — so you don't have to enter your password on every page

Maintaining your session — so Kivvo can tell it's still you as you move around the app

Security — helping prevent cross-site request forgery and other attacks

Load balancing — making sure requests are routed correctly

Remembering your choices — such as accepting our cookie notice

You can't opt out of essential cookies while using Kivvo. If you block them in your browser, some or all of Kivvo may not work.

2. Functional cookies

These cookies remember your preferences so Kivvo works the way you'd expect. They're used for things like:

Remembering your account settings

Remembering your interface preferences, such as text spacing for accessibility

Remembering your notification preferences

Remembering form values while you're completing a task

If you block functional cookies, some preferences may reset between visits. Kivvo itself will still work.

3. Analytics cookies

These cookies help us understand how Kivvo is being used, so we can improve it. They're used for things like:

Counting visits and page views — so we can see which parts of Kivvo are used most

Understanding how users move through Kivvo — so we can spot confusing flows

Measuring performance — so we can see where Kivvo is slow or unreliable

Understanding device and browser breakdown — so we can prioritise compatibility

Kivvo uses Vercel Analytics and Vercel Speed Insights for this purpose. Vercel Analytics is designed to be privacy-friendly: it doesn't use cookies to build individual user profiles and it doesn't track users across other websites.

We don't use third-party advertising cookies, and we don't share analytics data with advertisers.

4. Payment provider cookies

When you interact with payment features of Kivvo, our payment provider (Stripe) may set cookies to:

Process payments securely

Detect and prevent fraud

Remember payment methods you've chosen to save

These are set by Stripe and are subject to Stripe's own cookie and privacy policies. We recommend reading Stripe's policy if you'd like more detail. These cookies are only set when you interact with payment features.

Cookies we don't use

To be clear about what Kivvo doesn't do:

We don't use advertising cookies. Kivvo doesn't display third-party ads.

We don't use tracking cookies that follow you across other websites. Kivvo doesn't try to build a picture of where else you go online.

We don't use cookies to sell your data. We don't sell data, period.

We don't use social media tracking pixels. There's no Facebook, Twitter, or Instagram pixel on Kivvo.

If this ever changes, we'll update this policy and tell you.

Specific cookies we use

Here's a plain-language list of the main cookies you may encounter when using Kivvo.

Cookie namePurposeTypeDuration
sb-*-auth-tokenKeeps you signed in and maintains your session (set by Supabase)Essential, first-partySession
kivvo-themeRemembers your interface theme (light / dark)Functional, first-party1 year
kivvo-accessibilityRemembers your text spacing and accessibility preferencesFunctional, first-party1 year
kivvo-cookie-noticeRemembers that you've seen the cookie noticeEssential, first-party1 year
_vercel_insightsUsed by Vercel Analytics to count visitsAnalytics, first-partySession
_vercel_speedUsed by Vercel Speed Insights to measure performanceAnalytics, first-partySession
__stripe_midUsed by Stripe to prevent fraud and process paymentsPayment, third-party1 year
__stripe_sidUsed by Stripe to prevent fraud and process paymentsPayment, third-partySession
__Host-stripe-*Used by Stripe to securely process paymentsPayment, third-partySession

This list may change as Kivvo develops. If you want the current list at any time, you can inspect the cookies set on your device using your browser's developer tools.

Your control over cookies

You have several ways to control cookies.

Browser settings

Most browsers let you:

See what cookies are stored

Delete some or all cookies

Block cookies from specific sites

Block all third-party cookies

Block all cookies entirely

The exact steps depend on your browser. Search for "[your browser name] cookie settings" for guidance.

Third-party opt-outs

For analytics and payment cookies, some providers offer their own opt-out mechanisms:

Vercel Analytics — Vercel Analytics is designed to be privacy-friendly. It doesn't use cookies to track individuals across sites. You can block its scripts with a content blocker or browser setting if you prefer.

Stripe — Stripe provides information about its cookies and settings on its own website.

Do Not Track and Global Privacy Control

Some browsers offer a "Do Not Track" or "Global Privacy Control" signal. We aim to respect these signals where technically feasible, but we can't guarantee that every third-party service will.

Blocking cookies

If you block essential cookies:

You may not be able to sign in to Kivvo

Your session may expire immediately

Some or all of Kivvo may not work

If you block functional cookies:

Your preferences may not persist between visits

If you block analytics cookies:

Kivvo will still work

We'll have less information to help us improve

If you block payment cookies:

Payment features may not work

Cookies and your privacy

Cookies can be personal information under the New Zealand Privacy Act 2020, particularly when they can be linked to you as an individual.

We handle information collected through cookies in accordance with our Privacy Policy. That policy describes:

What personal information we collect

Why we collect it

Who we share it with

How long we keep it

Your rights in relation to it

If you want to request access to or correction of personal information we hold about you, you can do so via the Data Requests page or by submitting a support ticket.

Third parties who set cookies through Kivvo

The following third parties may set cookies on your device when you use Kivvo. Each has its own privacy and cookie policy:

ProviderPurposeTheir policy
StripePayment processing, fraud preventionSee Stripe's website
SupabaseAuthentication and session managementSee Supabase's website
VercelHosting, analytics, performance monitoringSee Vercel's website

We choose our providers carefully. We recommend reviewing their policies if you want more detail about how they use cookies.

Changes to this policy

We may update this Cookie Policy from time to time. When we make material changes:

We'll update this page.

We'll notify you where the change materially affects you.

The updated policy takes effect when we publish it.

If we start using new categories of cookies — for example, if we ever introduce advertising or social media tracking — we'll tell you clearly and, where required, ask for your consent before setting them.

Where to find more detail

For more information, see:

Privacy Policy — how we handle your personal information

Terms of Service — the general agreement between you and Kivvo

Data Requests — how to access or correct your data

Complaints Policy — how to raise a concern

Financial Services Disclosures — Kivvo's regulatory position

If you have a question about cookies that isn't answered here, please submit a support ticket via the Support page. We don't use email for support.

This page was last reviewed in October 2026.