Privacy Policy

Calypto for Business

Last updated: July 15, 2026

Calypto Inc. (“Calypto,” “we,” “us,” or “our”) operates the Calypto for Business application (the “App”). This policy explains what personal information we collect, why, who we share it with, and the rights you have over it.

This policy applies to the App and to calypto.me.

1. Who We Are

Calypto Inc. is a Delaware corporation headquartered in Los Angeles, California, United States. For the purposes of the EU and UK General Data Protection Regulation (“GDPR”), Calypto Inc. is the data controller for the personal information described in this policy.

Contact: Calypto Inc., 901 S. Sherbourne Dr, Los Angeles, CA 90035, United States. Email: calyptoai@gmail.com

2. Information We Collect

2.1 Information you provide

Category

Examples

Why

Account information

Email address, password (stored hashed)

To create and secure your account

Business information

Venue type (café, restaurant, gym, retail, hotel, bar, spa, salon), business name, location

To deliver your subscription and identify your Licensed Location

Support correspondence

Messages you send us

To respond to your requests

2.2 Information collected automatically

Category

Examples

Why

Subscription and purchase data

Subscription status, plan, renewal and trial dates, transaction identifiers

To provision access and manage billing

Usage data

Tracks and playlists played, playback history, session timing, in-app navigation

To operate playback features such as Recently Played, and to improve the catalog and product

Device and technical data

Device model, operating system version, app version, IP address, crash and diagnostic logs

To deliver audio, diagnose faults, and maintain security

We do not collect payment card numbers. Purchases are processed by Apple, and we never receive your full payment details.

We do not access your microphone, camera, contacts, photos, or precise location.

3. Why We Use Your Information (and Our Legal Bases)

Purpose

GDPR legal basis

Providing the App and streaming the Catalog to you

Performance of a contract (Art. 6(1)(b))

Creating and administering your account

Performance of a contract (Art. 6(1)(b))

Processing subscriptions, trials, and renewals

Performance of a contract (Art. 6(1)(b))

Providing customer support

Performance of a contract (Art. 6(1)(b))

Maintaining security and preventing fraud or abuse

Legitimate interests (Art. 6(1)(f))

Diagnosing crashes and improving the App and Catalog

Legitimate interests (Art. 6(1)(f))

Sending service and billing notices

Performance of a contract (Art. 6(1)(b))

Sending marketing communications

Consent (Art. 6(1)(a)), where required

Complying with legal obligations

Legal obligation (Art. 6(1)(c))

4. Who We Share Information With

We do not sell your personal information. We do not share it for cross-context behavioral advertising. We do not use it for advertising at all.

We share information with the following service providers, who process it only on our instructions and only to deliver the App:

Provider

Role

Apple Inc.

App distribution, payment processing, subscription management

RevenueCat, Inc.

Subscription state management and entitlement verification

Supabase, Inc.

Authentication and database hosting

Cloudflare, Inc.

Audio file storage and delivery

We may also disclose information where required by law, to enforce our Terms of Use, or in connection with a merger, acquisition, financing, or sale of assets — in which case we will notify you and any acquirer will remain bound by this policy or a policy at least as protective.

5. International Transfers

We are based in the United States, and your information is processed there. If you are in the European Economic Area, the United Kingdom, or Switzerland, we transfer your personal information outside your jurisdiction.

Where we do so, we rely on the European Commission’s Standard Contractual Clauses (and the UK International Data Transfer Addendum, where applicable) with our processors, together with supplementary measures where appropriate. You may request a copy of the relevant safeguards by writing to calyptoai@gmail.com.

6. How Long We Keep Information

Data

Retention

Account information

For the life of your account; deleted within 30 days of account deletion

Playback and usage history

For the life of your account; deleted within 30 days of account deletion

Subscription and transaction records

Up to 7 years after your last transaction, to meet tax and accounting obligations

Support correspondence

Up to 3 years after the matter is closed

Crash and diagnostic logs

Up to 90 days

7. Deleting Your Account

You can delete your account at any time from within the App, in Settings. Deletion removes your account and associated personal information, subject to the retention periods in Section 6.

Deleting your account does not cancel your subscription. Billing continues through Apple until you cancel it. Cancel at https://apps.apple.com/account/subscriptions before deleting your account.

8. Your Rights

8.1 If you are in the EEA, UK, or Switzerland

You have the right to: access your personal information; correct inaccurate information; request erasure; restrict processing; object to processing based on legitimate interests; receive your information in a portable format; and withdraw consent at any time where processing is based on consent.

You also have the right to lodge a complaint with your local supervisory authority. In Sweden, this is Integritetsskyddsmyndigheten (IMY). A full list is available at https://edpb.europa.eu/about-edpb/board/members_en.

8.2 If you are a California resident

Under the California Consumer Privacy Act as amended (“CCPA/CPRA”), you have the right to: know what personal information we collect, use, and disclose; correct inaccurate personal information; delete your personal information; and not be discriminated against for exercising these rights.

We do not sell or share your personal information, as those terms are defined under the CCPA/CPRA, and we have not done so in the preceding 12 months. We do not use or disclose sensitive personal information for purposes other than those permitted under the CCPA.

8.3 Exercising your rights

Delete your account in-app, or email calyptoai@gmail.com for any other request. We will respond within the timeframes required by applicable law (generally 30 days under GDPR, 45 days under CCPA). We may need to verify your identity before acting.

9. Security

We use industry-standard technical and organizational measures to protect your information, including encryption in transit (TLS), encryption at rest, hashed password storage, and access controls limiting employee access to what is necessary.

No system is perfectly secure. If we become aware of a breach affecting your personal information, we will notify you and the relevant authorities as required by law.

10. Children

Calypto for Business is a commercial product intended for businesses and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, contact calyptoai@gmail.com and we will delete it.

11. Changes to This Policy

We may update this policy. Material changes will be notified through the App or by email before they take effect. The “Last updated” date above reflects the most recent revision.

12. Contact

Questions, requests, or complaints:

Email: calyptoai@gmail.com

Post: Calypto Inc., 901 S. Sherbourne Dr, Los Angeles, CA 90035, United States