🥝 kiiviPrivacy Policy

Terms of Service

Last updated: 8 October 2026

In short. Kiivi is a team game for companies. The company that opens an account (the Customer) is responsible for using it fairly: participation is voluntary, people are told how it works, and results are never used to judge individual performance. We run the service, keep the data in the EU and process it only on the Customer's instructions.

1. The parties

These terms are an agreement between Good Days OÜ (registry code 12627359, Tallinn, Estonia, support@kiivi.team, "we") and the organisation that creates a Kiivi account (the "Customer"). The person who signs up confirms they may act for the Customer. Kiivi is a business service and is not intended for consumers.

Employees and other people invited by the Customer ("Participants") use the Kiivi app and their personal page under the Customer's account. Their use is governed by these terms as far as they apply to them, and their data is described in the Privacy Policy.

2. The service

Kiivi consists of a website for administrators (HR), a Windows app for Participants and a server that turns activity counts into team games: activity games, rest games, short games, thank-yous between teams, messages and an office screen. The app counts only the number of clicks, key presses and mouse distance per minute, as described in the Privacy Policy.

We may improve and change features. If a change substantially reduces a paid feature, we will tell the Customer in advance.

3. Fair use rules for the Customer

The Customer agrees to:

  1. Keep participation voluntary. Do not require employees to install or run Kiivi, and do not penalise anyone for not taking part, leaving a game or deleting their data.
  2. Inform Participants about the game, what is counted and the Privacy Policy before they join, and involve employee representatives where local law requires it.
  3. Not use Kiivi for monitoring or evaluation. Game results must not be used to assess performance, working time, attendance, discipline, pay or employment decisions about individuals.
  4. Invite only its own employees or contractors, and keep administrator passwords safe.
  5. Not try to modify, reverse engineer, overload or break the service, and not use it to collect data beyond what Kiivi is designed to collect.
  6. Write messages, game texts and prizes that respect people; prizes are provided and paid for by the Customer.

We may suspend an account that seriously breaks these rules, after a warning where reasonable.

4. Plans, prices and payment

5. Data and privacy

The Customer owns its data. We use it only to provide Kiivi, as described in the Privacy Policy and the data processing terms below. We do not sell data and do not use it for advertising. We may use aggregated, anonymous statistics (for example, average game length) to improve the service.

6. Data processing terms (GDPR Article 28)

For personal data of Participants, the Customer is the controller and we are the processor. These terms form the data processing agreement between us.

  1. Subject and duration: providing Kiivi for as long as the Customer's account exists, plus the deletion period below.
  2. Data and people: Participants' names, optional emails, device information, per-minute activity counts, game results, thank-you notes and messages; administrators' account data.
  3. Instructions: we process data only on the Customer's documented instructions, which are these terms and the Customer's settings in Kiivi, unless EU or Estonian law requires otherwise.
  4. Confidentiality: people with access to the data are bound by confidentiality.
  5. Security: we use appropriate technical and organisational measures, including encrypted connections, hashed passwords, access limited to people who run the service, EU hosting and the data minimisation built into the app.
  6. Sub-processors: Hetzner Online GmbH (hosting, Finland, EU) and OpenAI (only the game idea text an administrator enters in "Create with AI", no Participant data). The Customer authorises these. We will announce new sub-processors at least 30 days in advance, and the Customer may object and terminate if it does.
  7. Assistance: we help the Customer answer data subject requests (Participants can also delete their own data in the app), and with security and data protection impact assessments where reasonable.
  8. Breaches: we notify the Customer without undue delay, and where possible within 48 hours, after becoming aware of a personal data breach affecting its data.
  9. Deletion: per-minute activity counts are deleted automatically after 12 months. When the account is closed, all Customer data is deleted within 30 days, unless the Customer asks for an export first.
  10. Audit: we provide the information needed to show compliance with this section on reasonable request.
  11. Transfers: data is stored in the EU. Any transfer outside the EU (such as the AI feature above) is covered by EU Standard Contractual Clauses.

7. Availability and support

We aim to keep Kiivi available at all times but do not guarantee uninterrupted service; planned maintenance is done outside business hours where possible. Support is provided by email at support@kiivi.team. Enterprise customers may agree a separate service level in writing.

8. Liability

Kiivi is a game and is provided "as is". To the extent the law allows, neither party is liable for indirect or consequential losses, such as lost profit or data, and our total liability in any 12-month period is limited to the fees the Customer paid us in that period (or EUR 100 on the Free plan). These limits do not apply to wilful misconduct, gross negligence or liability that cannot be limited by law.

9. Term and termination

These terms apply from sign-up until the account is closed. The Customer can close its account at any time by writing to us. We may close Free accounts that have been inactive for 12 months after notice, and may terminate paid accounts with 60 days' notice. Data is then deleted as described in section 6.

10. Changes to these terms

We may update these terms. For material changes we will notify the Customer by email at least 30 days in advance. If the Customer does not agree, it may close the account before the change takes effect.

11. Law and disputes

These terms are governed by the laws of the Republic of Estonia. Disputes are settled by negotiation first and, if that fails, by Harju County Court (Harju Maakohus) in Tallinn.