Privacy Policy
Klyo (“Klyo,” “we,” “us”) operates klyoapp.com and the Klyo mobile application (collectively, the “Service”). This Privacy Policy explains what information we collect, how we use it, and the choices you have. Words capitalized but not defined here have the meanings given in our Terms of Service.
1. Information we collect
We collect only what we need to deliver the Service.
- Account information. Email address, and (if you create a chart) the birth date, birth time, and birthplace you provide.
- Conversation content. Messages you exchange with Klyo, stored so Klyo can carry context forward between sessions.
- Device and usage data. Standard log data such as IP address, device type, app version, and timestamps, used to operate and secure the Service.
- Payment data. Handled by our payment processor. We never see or store full card numbers.
2. Birth data and natal charts
To generate your natal chart, Klyo collects the birth date, birth time, and birthplace (city and country) that you enter. This data is used exclusively to perform astrological calculations—specifically to compute planetary positions and house cusps at the moment and place of your birth. It is not used for any other profiling, scoring, or inference purpose.
Birth data is stored in Klyo’s database (hosted on Supabase) associated with your account record. It is retained for as long as your account is active. If you delete your account, your birth data is removed from production systems on the same schedule as the rest of your account data (see section 8 below). You may also update or correct your birth data at any time from your account settings.
Birth time and birthplace are optional. If you do not provide them, Klyo generates an approximate chart using defaults; accuracy of house placements depends on how complete the information is. Birth data you provide is never shared with advertisers or used to train AI models (see sections 4 and 5 below).
3. How we use information
- To calculate your birth chart and generate readings.
- To maintain conversation memory across sessions, which is core to how Klyo works.
- To send service emails (account, billing, security) and, only if you opt in, the launch and product updates list.
- To detect, prevent, and respond to fraud, abuse, or security incidents.
- To comply with legal obligations.
4. What we do not do
Your chart stays yours. We do not sell your personal information. We do not use your chart, conversation history, or birth data to train any third-party AI model. We do not share your data with advertisers, brokers, or affiliates for marketing.
5. AI processing and disclosure
Klyo’s readings are generated by AI. When you exchange messages with Klyo, your message content is processed by a third-party large language model under a business agreement that prohibits training on your data and limits retention to what is necessary to return a response. Klyo is the proper noun we use for the character; the underlying technology is a generative AI system.
6. How we share information
We share personal information only with:
- Service providers who host, process, secure, or support the Service under written agreements (hosting, email delivery, payments, customer support, the AI inference provider noted above).
- Legal and safety recipients, when required by law, valid legal process, or to protect the rights, property, or safety of Klyo, our users, or the public.
- Successor entities in connection with a merger, acquisition, or sale of assets, subject to this Policy.
7. Your choices and rights
- Access and export. You can request a copy of your account data at any time.
- Deletion. You can delete your account and all associated chart and conversation data from Settings. Deletion is one click and is permanent.
- Marketing email. Every marketing email contains an unsubscribe link. Service emails are required and cannot be opted out of while your account is active.
- Regional rights. Depending on where you live (for example, the EU/UK, California, or other US states with comprehensive privacy laws), you may have additional rights such as portability or objection. Contact us to exercise them.
8. Retention
We keep your account information and conversation history for as long as your account is active and for a short period afterward to comply with legal and accounting obligations. Deleted accounts are removed from production systems within thirty (30) days, with longer retention only in encrypted backups that age out on a fixed cycle.
9. Security
We use industry-standard administrative, technical, and physical safeguards to protect your information, including encryption in transit and at rest. No system is perfectly secure; if we become aware of a breach affecting you, we will notify you as required by law.
10. Children
The Service is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us so we can delete it.
11. International users
Klyo is operated from the United States. If you access the Service from outside the U.S., you understand that your information will be transferred to and processed in the U.S. and other jurisdictions where our service providers operate, under appropriate safeguards.
12. Changes to this Policy
We may update this Privacy Policy from time to time. The “last updated” date at the top reflects the most recent version. If changes are material, we will notify account holders by email and post a notice in the app before the change takes effect.
13. Analytics
Klyo uses Vercel Web Analytics to understand how visitors find and use the site. It is cookieless: no tracking cookies are set, no cross-site identifiers are stored, and no personal data (your name, email, birth date, birth time, or city) is sent to it. Anonymous, aggregated visit data is processed by Vercel Inc. as our service provider. You can read Vercel’s privacy notice at https://vercel.com/legal/privacy-policy.
14. Source attribution
When you arrive at klyoapp.com, your browser captures the page you landed on and any UTM parameters in the URL (for example utm_source=tiktok). This information stays in your browser’s session storage and is never sent anywhere unless you join the waitlist, at which point it is written to your waitlist record so we know which channel brought you in. No personal data is included; only the source, medium, campaign, term, content, referring host, and landing path strings.
15. Contact us
Questions or requests: privacy@klyoapp.com.