Privacy Policy

1) Who We Are

Kaly provides a platform to discover and redeem mobile game gift codes and to view a calendar of upcoming mobile game releases. We also offer Kaly Premium and may display advertisements to free users.

Data Controller: Kaly (Kaly.gg)
Contact: contact [at] erisia.com

2) Information We Collect

2.1 Information you provide to us

• Account data such as username, email address, and password (stored using industry-standard hashing).
• Premium subscription details (plan, status). Payment processing is handled by our payment provider; we do not store full card details.
• Support communications and preferences (e.g., email opt-ins).

2.2 Information collected automatically

• Device and log data (IP address, device type, operating system, browser, language, referral URLs, app version, timestamps).
• Usage data (pages/screens viewed, features used such as code redemption lists and game calendar, clicks, session duration).
• Cookies and similar technologies used for authentication, analytics, performance, and advertising (see Cookies).

2.3 Information from third parties

• Analytics providers (e.g., app/website analytics) that help us understand usage patterns.
• Advertising partners that may use cookies or identifiers to deliver contextual or personalized ads where permitted by law and consent.
• Payment processors that notify us of transaction status (success/failure, last 4 digits, expiry month/year, no full PAN storage by Kaly).

3) How We Use Information

• Provide, maintain, and improve the Service (including code lists and the mobile game release calendar).
• Authenticate users, manage accounts, and provide customer support.
• Process and manage Premium subscriptions and entitlements.
• Display, measure, and improve advertising for free users, subject to consent.
• Communicate with you about updates, features, security alerts, and administrative messages.
• Monitor, prevent, and detect fraud, abuse, or security incidents.
• Comply with legal obligations and enforce our Terms.

4) Legal Bases for Processing (EEA/UK)

Where the GDPR or UK GDPR applies, we process personal data on the following legal bases:

• Contract – to provide the Service you requested (e.g., your account, Premium access).
• Consent – for optional activities like personalized advertising or non-essential cookies.
• Legitimate interests – to improve the Service, prevent fraud, and ensure security (balanced against your rights).
• Legal obligation – where processing is necessary to comply with laws.

5) Advertising & Premium

• Free users may see ads from third-party networks. Where required, we will request your consent for personalized ads.
• Premium subscribers receive an ad-free experience within the Service.
• You can manage advertising preferences via the Cookies & Similar Technologies section and the “Manage Cookies / Consent” control.

6) Cookies & Similar Technologies

We use cookies, SDKs, and similar technologies for authentication, security, analytics, performance, and advertising. Where required, we obtain your consent through a consent management platform (CMP). You can change your choices any time via the “Manage Cookies / Consent” button above.

• Strictly necessary: essential for core features (e.g., sign-in).
• Performance & analytics: help us understand usage and improve the Service.
• Functional: remember your preferences.
• Advertising: measure ad performance and, where permitted, personalize ads.

7) Sharing & Disclosure

We may share information with:

• Service providers (hosting, analytics, payment processing, customer support, advertising) under appropriate contractual safeguards.
• Affiliates where necessary for operations, subject to this Policy.
• Legal and safety – to comply with law, respond to lawful requests, or protect rights, property, or safety of Kaly, users, or the public.

We do not sell personal information in the traditional sense. For California residents, certain sharing for targeted advertising or cross-context behavioral advertising may be considered a “sale” or “sharing” (see Regional Notices).

8) Data Retention

We keep personal data only as long as necessary for the purposes described in this Policy, including to meet legal, accounting, or reporting requirements, and to resolve disputes. You may request deletion of your account and associated personal data (subject to lawful exceptions).

9) International Data Transfers

We may process and store information in countries outside your own. Where applicable, we implement appropriate safeguards for cross-border transfers (e.g., Standard Contractual Clauses) and take additional measures where required by law.

10) Your Privacy Rights

Your rights depend on your location and applicable law. They may include:

• Access – request a copy of your personal data.
• Correction – request we correct inaccurate data.
• Deletion – request we delete your data.
• Restriction – request we limit certain processing.
• Portability – receive data in a portable format.
• Object – object to processing based on legitimate interests or for direct marketing.
• Withdraw consent – where processing is based on consent.
• Ad choices – manage cookie and advertising preferences (see “Manage Cookies / Consent”).

To exercise rights, contact us at contact [at] erisia.com. We may need to verify your identity before responding.

11) Security

We implement technical and organizational measures designed to protect personal data. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12) Children’s Privacy

The Service is not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal data from children.

13) Third-Party Links & Services

The Service may link to third-party sites or services we do not control. Their privacy practices are governed by their own policies.

14) Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version at kaly.gg/privacy-policy and revise the “Last updated” date above.

15) Contact Us

If you have questions or requests regarding this Policy or your personal data, contact us at contact [at] erisia.com.

16) Regional Notices

EEA/UK

If you are in the EEA/UK, you may lodge a complaint with your local data protection authority. Where applicable, we rely on Standard Contractual Clauses and/or other legal mechanisms for international transfers.

California (CCPA/CPRA)

California residents have the right to:

• Know the categories and specific pieces of personal information collected, used, disclosed, sold, or shared.
• Delete personal information, subject to certain exceptions.
• Correct inaccurate personal information.
• Opt out of “sale” or “sharing” of personal information for cross-context behavioral advertising.
• Limit the use and disclosure of sensitive personal information (we do not use sensitive personal information for purposes that require such a choice).
• Non-discrimination for exercising CCPA rights.

To exercise these rights or to opt out of “sale”/“sharing,” contact us at contact [at] erisia.com and include “CCPA Request” in your subject line. You may also adjust ad/cookie preferences via the “Manage Cookies / Consent” control.