1. Who we are
Koala UI ("we", "us", "our") makes the Koala UI design system, its React components and its Figma library, and sells it at koalaui.com (the "Site"). Koala UI is run by Jordi Espinosa, who is responsible for the personal data described here. You can reach us at info.koalaui@gmail.com.
2. What we collect
We collect only what we need to sell you a license, deliver what you bought and keep the Site running:
- When you buy: Lemon Squeezy runs the checkout as the merchant of record. It collects your name, email, billing address and payment details. We receive your name, email, country, the order and the license key it issues. We never see your card.
- When you use your license: the koalaui CLI and the Account page send your license key to our server, which checks it with Lemon Squeezy. Activating a seat with the CLI also sends a name for that seat, which is your computer's name unless you choose another one; Lemon Squeezy stores it so you can tell your seats apart.
- When you install Pro files: each file carries a short code derived from your license key (never the key itself, nor your email), so a leaked file can be traced back to the license it was installed with.
- When you sign in on the Site: an encrypted session cookie keeps your license signed in (see the Cookies Policy).
- When you use the roadmap: the ideas you suggest and the votes you cast, linked to an anonymous id derived from your license, not to your name or email.
- When you visit: our hosting provider records technical logs (IP address, browser, page and time) to keep the Site secure and working, and our server briefly holds your IP address in memory to limit abusive requests.
- When you write to us, by email or through the contact form: your message, your email address, the topic you pick and, if you give it, your name.
3. What we don't do
The Site runs no analytics, no advertising and no tracking of any kind. We never sell your data, never share it for advertising, and never use it to train AI models.
4. How we use it
We use your data to:
- deliver the product and its updates, and check that a license is valid (to perform our contract with you);
- answer your support requests and send you the emails your purchase needs, such as receipts (to perform our contract with you);
- protect the Site and the Pro source from abuse, for example by rate-limiting requests (our legitimate interest);
- keep the records that tax and accounting law require (a legal obligation).
5. Who handles it
A few providers process data on our behalf, only for the purposes above:
- Lemon Squeezy, for payments, taxes, receipts and license keys. Its privacy policy governs the data it collects at checkout.
- Vercel, which hosts the Site and its server.
- Upstash, which stores the roadmap's ideas and votes, and the messages sent through the contact form.
- Google, which hosts our support email.
6. Content from other sites
Some pages show content served by other sites, which then receive your IP address, as any site you load something from does: example photos and avatars in the component and section previews come from Unsplash, Pravatar and Picsum, and videos in the blog from YouTube, in its privacy-enhanced mode. None of them receives anything else from us, and the YouTube player sets no cookie until you press play.
7. International transfers
Some of these providers are based in the United States. Where your data leaves the European Economic Area, it is protected by the safeguards the GDPR requires, such as the European Commission's Standard Contractual Clauses.
8. How long we keep it
We keep your order and license details for as long as your license exists, and billing records for as long as tax law requires. A sign-in session ends after 30 days without use. Support emails and contact form messages are deleted once they are no longer needed. Hosting logs are kept by our provider for a short period.
9. Your rights
You can ask us to access, correct, export or delete your personal data, or object to how we use it, by writing to info.koalaui@gmail.com. We answer within 30 days. You can also find your orders and license keys yourself in the Lemon Squeezy customer portal. If you think we have not handled your data properly, you have the right to complain to your local data protection authority.
10. Changes to this policy
If we change this policy, we will update the date at the top of this page. If a change affects how we use data you have already given us, we will tell you by email.
11. Contact
Questions about this policy or your data? Write to info.koalaui@gmail.com or use the contact page.