Privacy Policy
This policy explains what personal data the CYKI app and the website www.canyoukicksit.com collect, why we collect it, who processes it for us, and the rights you have over it. We have tried to keep it short and in plain language. If anything is unclear, email us at privacy@canyoukicksit.com.
1. Who we are
CYKI ("Can You Kicks It") is a sneaker collection tracker based in Denmark. We are the data controller for the personal data described in this policy. You can reach us at privacy@canyoukicksit.com.
2. This website
www.canyoukicksit.com is a static site. It sets no cookies, runs no trackers or analytics, and has no forms. Our hosting provider may keep standard server logs (including IP addresses) for security and operational purposes, as any web host does.
3. What the app collects, and why
Account data
You sign in with your Google or Apple account (Apple sign-in arrives with the iOS version). From the sign-in provider we receive your email address, which we store together with a unique account ID. Google sign-in also passes the display name on your Google account to Firebase Authentication, which handles sign-in for us, where it is kept on your authentication record. CYKI's own database does not store that name and no screen in the app displays it — but the record sits in a system we control, so we declare it. Sign in with Apple shares your email address with us. Where the app also asks Apple for your name, that name is never stored, never displayed and never sent to our servers — and we are removing the request entirely. You can also choose a username and an avatar photo. We use this data to operate your account — that is the contractual basis under the GDPR.
Your collection
Everything you catalog is stored so we can show it back to you and value it: your pairs (model, size, condition), purchase prices and dates, your grails and watchlist, journal notes (private by default), price alert rules and alert history, and a daily snapshot of your collection's total value so we can draw your charts. This is the core of the service, processed on a contractual basis.
Photos and receipts
You can attach photos and receipts to a pair, and upload an avatar. These are stored in a cloud file-storage bucket and served via their direct link. Anyone who has the exact link can view the file, so please don't upload documents containing sensitive personal information beyond what a receipt normally shows. Uploading is entirely optional (consent basis).
Push notifications
If you enable notifications, we store a device push token (Firebase Cloud Messaging) so we can send you price alerts and daily updates. You can turn notifications off at any time in your device settings or in the app.
Leaderboard and game
The "Beat the CYKI 100" game stores your picks and results. The leaderboard is opt-in: only if you opt in are your username, avatar, and game performance visible to other users. You can opt out again at any time in settings.
Usage analytics
The app uses Google Analytics for Firebase to log a small number of usage events (for example, which sections of the Trending screen get tapped, or when a share card is created). This tells us which features earn their place. These events are tied to device-level identifiers processed by Google, not to your name or email in our own systems. Legal basis: our legitimate interest in understanding and improving the app.
What we do not do
- No advertising and no advertising trackers.
- No sale of personal data — to anyone, ever.
- No location tracking, no contact-list access.
4. App permissions
- Camera — used only while you scan a sneaker barcode. No images from scanning are stored.
- Photos / media — used only when you choose photos to attach to a pair or set an avatar.
5. Who processes data for us
We don't run our own data centers. These providers process data on our behalf under data-processing agreements:
- Google Firebase — sign-in (authentication), push notifications, and app analytics.
- Supabase — our database and file storage (photos, receipts, avatars).
- Railway — hosting for our API servers.
To price sneakers we query market-data providers (KicksDB and The Sneaker Database). Those queries are made from our own servers and contain only sneaker identifiers and search terms — never your identity, email, or device information.
Some of these providers process data in the United States. Where data leaves the European Economic Area, we rely on the safeguards those providers offer under EU law (such as Standard Contractual Clauses or participation in the EU-US Data Privacy Framework).
6. How long we keep data
We keep your data for as long as your account exists. When you delete your account, your account record and everything linked to it — collection, alerts, journal entries, game history, settings — is permanently deleted from our database immediately. There is no soft-delete or anonymised copy.
Photos, receipts, and your avatar are deleted from our file-storage system as part of that same account-deletion process — you don't need to take any extra steps or contact us separately for this. Any residual copies that may exist in routine backups or system logs are not kept indefinitely and are purged in the ordinary course of our backup rotation. If you have any question or request about your data, email privacy@canyoukicksit.com.
7. Your rights
Under the GDPR you have the right to access, correct, delete, and export your personal data, to restrict or object to processing, and to withdraw consent where processing is based on consent.
If you believe we've handled your data improperly, you can complain to the Danish data protection authority, Datatilsynet, or to your local supervisory authority.
8. Children
CYKI is not directed at children under 16, and we do not knowingly collect personal data from them. If you believe a child under 16 has created an account, contact us and we will delete it.
9. Changes to this policy
If we change this policy, we will post the new version here with a new effective date. For material changes we will also notify you in the app before they take effect.
10. Contact
Can You Kicks It · Denmark
privacy@canyoukicksit.com