Kissa

Privacy Policy

EFFECTIVE AUGUST 26, 2026

Kissa is a vinyl request system for listening bars. It has two parts: the Kissa Booth iOS app used by venue owners, and the kissa.live guest pages that guests open by scanning a QR code at a venue. This policy explains what each part collects and why. The short version: we collect the minimum needed to run the service, we don't run ads, and we never sell your data.

If you're a guest

WHAT WE COLLECT

LOCATION

Some venues ask the page to confirm you're actually at the bar. If you allow location access, the distance check happens entirely in your browser — your coordinates are never sent to our servers and are never stored.

WHO SEES WHAT

STORY SHARING

If you tap "share to your story", the image is generated on your device and shared through your phone's own share sheet. We don't post anything on your behalf and never see your social accounts.

TIPS

If a venue shows tip buttons (Venmo, Zelle, Cash App, a bank account, Toss), tapping them opens your own payment app or copies the venue's details. Kissa never processes, sees, or takes a cut of tips — they go directly from you to the venue.

EBAY LINKS

A record's page may show a "Find the vinyl on eBay" link. It opens an eBay search in a new tab. Kissa takes part in the eBay Partner Network: if you buy something on eBay after using one of these links, Kissa may earn a commission, at no extra cost to you. The link only carries the record's title and artist plus the venue's name — no device identifier and nothing about you. Once you're on eBay, eBay's own privacy notice applies, including any cookies eBay sets to attribute the purchase.

If you run a venue

ACCOUNT

You sign in with Sign in with Apple or Google Sign-In. We store your Apple or Google user identifier and, if you share it, your name and email. We use it only to connect you to your venue. Staff members who join your booth with an invite code sign in the same way; we store their identifier and their role.

VENUE DATA

PLANS & PURCHASES

Kissa Pro (subscription or one-time purchase) is bought through Apple's App Store. Apple handles the payment — we never see your card. We receive and store the purchase's status and transaction identifier, only to unlock Pro for your booth.

MICROPHONE (BPM DETECT)

If you turn on BPM detect, the app listens through the microphone and estimates the tempo entirely on your device, in real time. No audio is ever recorded, stored, or sent anywhere. Turning the switch off stops the microphone immediately.

APPLE MUSIC LIBRARY

If you import a playlist, the app asks iOS for permission to read your Apple Music library. Your library is read on your device only — what we store is the resulting album and track metadata that joins your crate, nothing else.

RECEIPT PRINTER

If you connect a receipt printer, its address is stored on your device only, and cue tickets travel over your own local network — never through our servers.

OPTIONAL API KEYS

If you add your own Google Gemini API key for photo recognition, it is stored in your device's Keychain only — it never leaves your phone. Album photos you scan with that feature are sent to Google's Gemini API for recognition under your own key.

DELETING YOUR ACCOUNT

Settings → Delete Account removes your venue, your crate, all guest requests for your venue, and your sign-in record. This is permanent.

Where data lives

Kissa runs on Google Firebase (Firestore database, Cloud Storage, Cloud Functions, and Cloud Messaging), hosted on Google Cloud servers in the United States. Google processes this data as our service provider. See Firebase's privacy documentation.

Third-party services

These services receive only what's needed for the lookup (for example, a barcode number or search text) — never guest names or notes.

What we don't do: no advertising, no third-party analytics trackers, no selling or sharing data with data brokers, no tracking you across other apps or websites. The eBay link above is the one outbound affiliate link, and it carries nothing about you.

Retention

Venue and crate data stays until the venue deletes it or deletes its account. Guest cues stay as part of the venue's play history until the venue removes them or deletes its account. If you want a cue you made removed, ask the venue or contact us.

Children

Kissa is made for bars and is not directed at children under 13. We don't knowingly collect data from children.

Changes

If this policy changes materially, we'll update this page and the effective date above.

Contact

Questions or requests: hello@kissa.live