Calypto for Business
Privacy Policy
Last updated: August 2, 2026
Calypto Inc. ("Calypto," "we," "us," or "our") operates the Calypto for Business application (the "App"). This policy explains what personal information we collect, why, who we share it with, and the rights you have over it.
This policy applies to the App and to calypto.ai.
1. Who We Are
Calypto Inc. is a Delaware corporation headquartered in Los Angeles, California, United States. For the purposes of the EU and UK General Data Protection Regulation ("GDPR"), Calypto Inc. is the data controller for the personal information described in this policy.
Contact: Calypto Inc., 901 S. Sherbourne Dr, Los Angeles, CA 90035, United States. Email: hello@calypto.me
2. Information We Collect
2.1 Information you provide
| Category | Examples | Why |
|---|---|---|
| Account information | Email address, password (stored hashed) | To create and secure your account |
| Business information | Venue type (café, restaurant, gym, retail, hotel, bar, spa, salon), business name, location | To deliver your subscription and identify your Licensed Location |
| Support correspondence | Messages you send us | To respond to your requests |
2.2 Information collected automatically
| Category | Examples | Why |
|---|---|---|
| Subscription and purchase data | Subscription status, plan, renewal and trial dates, transaction identifiers | To provision access and manage billing |
| Usage data | Tracks and playlists played, playback history, session timing, in-app navigation | To operate playback features such as Recently Played, and to improve the catalog and product |
| Device and technical data | Device model, operating system version, app version, IP address, crash and diagnostic logs | To deliver audio, diagnose faults, and maintain security |
We do not collect payment card numbers. Purchases are processed by Apple, and we never receive your full payment details.
We do not access your microphone, camera, contacts, photos, or precise location.
3. Why We Use Your Information (and Our Legal Bases)
| Purpose | GDPR legal basis |
|---|---|
| Providing the App and streaming the Catalog to you | Performance of a contract (Art. 6(1)(b)) |
| Creating and administering your account | Performance of a contract (Art. 6(1)(b)) |
| Processing subscriptions, trials, and renewals | Performance of a contract (Art. 6(1)(b)) |
| Providing customer support | Performance of a contract (Art. 6(1)(b)) |
| Maintaining security and preventing fraud or abuse | Legitimate interests (Art. 6(1)(f)) |
| Diagnosing crashes and improving the App and Catalog | Legitimate interests (Art. 6(1)(f)) |
| Sending service and billing notices | Performance of a contract (Art. 6(1)(b)) |
| Sending marketing communications | Consent (Art. 6(1)(a)), where required |
| Complying with legal obligations | Legal obligation (Art. 6(1)(c)) |
4. Who We Share Information With
We do not sell your data. We share limited information with the service providers and partners described below and in Section 5 to operate the App, understand how it is used, and measure our own advertising.
We share information with the following service providers, who process it only on our instructions and only to deliver the App:
| Provider | Role |
|---|---|
| Apple Inc. | App distribution, payment processing, subscription management |
| RevenueCat, Inc. | Subscription state management and entitlement verification |
| Supabase, Inc. | Authentication and database hosting |
| Cloudflare, Inc. | Audio file storage and delivery |
We may also disclose information where required by law, to enforce our Terms of Use, or in connection with a merger, acquisition, financing, or sale of assets, in which case we will notify you and any acquirer will remain bound by this policy or a policy at least as protective.
5. Analytics, Advertising and Third-Party Services
Calypto uses a small number of third-party services to operate the App, understand how it is used, and measure our advertising. We do not sell your data.
| Service | What they receive |
|---|---|
| Google (Firebase Analytics and Crashlytics) | App usage events, screens viewed, venue type, subscription state, and crash diagnostics |
| RevenueCat | Manages your subscription; receives your purchase history and subscription status |
| Apple | Processes in-app subscription payments |
| Meta (Facebook) | Advertising measurement data, so we can tell which ads brought venues to Calypto |
| Our hosting provider | Stores your account, venue profile, locations, playlists, favorites, and recently played history |
5.1 Identifiers We Use
To keep analytics and subscription records consistent, Calypto uses a Firebase app-instance identifier, a RevenueCat customer identifier, and Apple's advertising identifier (IDFA) and vendor identifier (IDFV).
5.2 Advertising Measurement and Your Choice
With your permission, Calypto measures which advertisements led you to download the App. You can grant or withdraw this permission at any time in iOS Settings → Privacy & Security → Tracking. Declining does not limit any Calypto feature.
6. International Transfers
We are based in the United States, and your information is processed there. If you are in the European Economic Area, the United Kingdom, or Switzerland, we transfer your personal information outside your jurisdiction.
Where we do so, we rely on the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum, where applicable) with our processors, together with supplementary measures where appropriate. You may request a copy of the relevant safeguards by writing to hello@calypto.me.
7. How Long We Keep Information
| Data | Retention |
|---|---|
| Account information | For the life of your account; deleted within 30 days of account deletion |
| Playback and usage history | For the life of your account; deleted within 30 days of account deletion |
| Subscription and transaction records | Up to 7 years after your last transaction, to meet tax and accounting obligations |
| Support correspondence | Up to 3 years after the matter is closed |
| Crash and diagnostic logs | Up to 90 days |
8. Deleting Your Account
You can delete your account at any time from within the App, in Settings. Deletion removes your account and associated personal information, subject to the retention periods in Section 7.
Deleting your account does not cancel your subscription. Billing continues through Apple until you cancel it. Cancel at apps.apple.com/account/subscriptions before deleting your account.
9. Your Rights
9.1 If you are in the EEA, UK, or Switzerland
You have the right to: access your personal information; correct inaccurate information; request erasure; restrict processing; object to processing based on legitimate interests; receive your information in a portable format; and withdraw consent at any time where processing is based on consent.
You also have the right to lodge a complaint with your local supervisory authority. In Sweden, this is Integritetsskyddsmyndigheten (IMY). A full list is available at edpb.europa.eu.
9.2 If you are a California resident
Under the California Consumer Privacy Act as amended ("CCPA/CPRA"), you have the right to: know what personal information we collect, use, and disclose; correct inaccurate personal information; delete your personal information; and not be discriminated against for exercising these rights.
We do not sell your personal information, and we have not done so in the preceding 12 months. We may share limited identifiers with advertising partners solely to measure the performance of our own advertising, as described in Section 5; you can opt out at any time through your device Tracking settings. We do not use or disclose sensitive personal information for purposes other than those permitted under the CCPA.
9.3 Exercising your rights
Delete your account in-app, or email hello@calypto.me for access to, correction of, or deletion of your data, including under GDPR and CCPA. We will respond within the timeframes required by applicable law (generally 30 days under GDPR, 45 days under CCPA). We may need to verify your identity before acting.
10. Security
We use industry-standard technical and organizational measures to protect your information, including encryption in transit (TLS), encryption at rest, hashed password storage, and access controls limiting employee access to what is necessary.
No system is perfectly secure. If we become aware of a breach affecting your personal information, we will notify you and the relevant authorities as required by law.
11. Children
Calypto for Business is a commercial product intended for businesses and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, contact hello@calypto.me and we will delete it.
12. Changes to This Policy
We may update this policy. Material changes will be notified through the App or by email before they take effect. The "Last updated" date above reflects the most recent revision.
13. Contact
Questions, requests, or complaints:
Email: hello@calypto.me
Post: Calypto Inc., 901 S. Sherbourne Dr, Los Angeles, CA 90035, United States