We believe in plain English. This policy explains clearly what we collect, why, and what your rights are.
Last updated: January 2025 · Kivo Technologies Ltd
Kivo Technologies Ltd ("Kivo", "we", "us") operates the Kivo platform available at getkivo.co.uk. We are registered in England and Wales (Company number: 16528232), with our registered address at 128 City Road, London, EC1V 2NX, and are the data controller for the personal data we collect.
Our data protection contact is: privacy@getkivo.co.uk
We collect the following categories of data when you use Kivo:
We do not collect sensitive personal data such as racial or ethnic origin, health data, or biometric data.
We use your data to:
Our legal basis for processing is primarily contract performance (providing the service you've requested) and legitimate interests (improving the product, security). Where we send marketing communications, we rely on your consent.
Your Kivo Score itself — the number, the pillar breakdown, and the borrowing estimate — is calculated by a deterministic scoring formula, not by AI. The same inputs always produce the same score.
Separately, we use Anthropic's Claude AI to generate the plain-language explanation of your already-calculated score, and to power optional features like "Explain my score" and the what-if chat. This means a summary of your situation — your income, deposit, credit self-assessment, and any debts you've told us about — is sent to Anthropic to generate this text. Anthropic processes this data under its own data processing terms and does not use it to train its models.
Kivo does not currently offer bank account connection, and no Open Banking data is collected today. This section describes how it will work once the feature launches, so you know what to expect in advance.
Once live: if you choose to connect your bank account, our FCA-regulated Open Banking provider will give Kivo read-only access to your transaction data and account balances. This data will be used solely to improve the accuracy of your Kivo Score.
We will never: see your bank login credentials, initiate payments or transfers, or share your raw transaction data with third parties (including mortgage advisors) without your explicit consent.
You will be able to revoke Open Banking access at any time from your Kivo account settings or directly from your banking app.
We do not sell your personal data. We share it only in the following circumstances:
All third-party processors are required to handle your data securely and in accordance with UK GDPR.
Some of our service providers are based outside the UK, which means your data may be processed internationally. Specifically, Anthropic (which generates the plain-language explanation of your score) is based in the United States.
Where we transfer personal data outside the UK, we rely on legally recognised safeguards — such as Standard Contractual Clauses or an equivalent adequacy mechanism — to ensure your data continues to receive a level of protection equivalent to UK GDPR, regardless of where it's processed.
We retain your personal data for as long as you have an active Kivo account plus a period of up to 3 years for legitimate business and legal purposes. Once Open Banking launches, financial data connected via that feature will be retained for up to 12 months from connection, or until you revoke access and request deletion.
You can request deletion of all your data at any time — see Your Rights below.
Under UK GDPR, you have the following rights:
To exercise any of these rights, email privacy@getkivo.co.uk. We will respond within 30 days.
We use cookies to operate and improve our service:
We do not use advertising or tracking cookies. You can manage cookie preferences via the banner shown on your first visit, or by clearing your browser cookies.
For any privacy questions, contact us at privacy@getkivo.co.uk.
If you're unhappy with how we've handled your data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.
This policy may be updated from time to time. We'll notify you of material changes by email or a prominent notice on our platform.