Last updated: May 4, 2026
1. Introduction
Pikkizy ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.
We process your personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable data-protection laws.
2. Data Controller
Pikkizy — Carrer de Bailen 2, 08010 Barcelona, Spain. General privacy contact: privacy@pikkizy.com. Data Protection Officer: dpo@pikkizy.com.
3. Personal Data We Collect
Information You Provide
- Account information (name, email, password)
- Profile information (preferences, interests, quiz answers)
- Communication data (messages, feedback)
- Subscription billing data (held by Stripe; we receive only metadata)
Automatically Collected Information
- Device information (IP address, browser, OS)
- Usage data (pages visited, interactions)
- Cookies and similar technologies
4. How We Use Your Data — Legal Basis
- Consent: for marketing emails and non-essential cookies
- Contract: to provide our services and process subscriptions
- Legitimate interest: to improve the product, prevent fraud, and secure the service
- Legal obligation: to comply with applicable laws
5. Your Rights (GDPR)
Under GDPR, you have the following rights:
Right of Access
Request a copy of your personal data
Right of Rectification
Correct inaccurate or incomplete data
Right of Erasure
Request deletion of your data
Right of Portability
Receive your data in a portable format
Right to Object
Oppose processing based on legitimate interest
Right to Restrict
Limit processing in certain cases
6. Exercising Your Rights
Email privacy@pikkizy.com or use the Data Rights Portal. We respond within one month.
7. International Data Transfers
Some service providers are based outside the European Economic Area. Transfers are covered by Standard Contractual Clauses (Decision 2021/914) and, where applicable, the EU-US Data Privacy Framework. The full sub-processor list is published at /subprocessors.
8. Right to Lodge a Complaint
You may lodge a complaint with your national supervisory authority. In Spain: Agencia Española de Protección de Datos (AEPD). In France: CNIL. For other EU countries, contact your national DPA.
9. Data Security
- Encryption of data in transit (TLS) and at rest
- Access controls, MFA for staff
- Regular security assessments
- Staff training on data protection
10. Contact Us
Email privacy@pikkizy.com · Data Protection Officer: dpo@pikkizy.com · Address: Carrer de Bailen 2, 08010 Barcelona, Spain.