Klymo Privacy Policy

Effective: July 17, 2026 · Version: 1.0

This Privacy Policy explains how Klymo ("Klymo," "we," "us," "our") collects, uses, and shares information when you use Klymo. By using Klymo you agree to this Policy.

1. Who this applies to

Klymo is intended for users 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has given us information, contact us and we will delete it.

2. Information we collect

• Account information. When you sign in (for example, with Google), we receive your email address and a provider account identifier. You may start using Klymo anonymously before signing in; anonymous sessions are identified by a random identifier, not by you personally.
• Learning and usage data. Your progress, answers, XP, streaks, league standing, spaced-review schedule, and settings — the data needed to run the product and save your place.
• Onboarding responses. The games, role, rank, goals, and preferences you provide during onboarding.
• Billing information. If you subscribe, our payment processor (Stripe) collects and processes your payment details. We receive subscription status and limited billing metadata, not your full card number.
• Product analytics and device data. We collect usage events (for example, lessons started/completed) and standard technical data (such as device/browser type and approximate location from IP) to understand and improve the product.
• Communications. If you email us or set notification preferences, we keep what's needed to respond and to send the messages you've opted into.

3. How we use information

We use information to: provide and personalize the Service (your path, reviews, leagues, streaks); process subscriptions and prevent abuse; send transactional and (with your settings) reminder emails; measure and improve the product; provide support; and comply with legal obligations. We do not sell your personal information, and we do not use it for third-party advertising.

4. How we share information

We share information with service providers ("subprocessors") who process it on our behalf under contract, only as needed to run Klymo. These currently include:

• Supabase — database, authentication, and hosting of your account and learning data.
• Stripe — subscription billing and payment processing.
• Google — sign-in (OAuth), if you choose it.
• Resend — transactional and notification email delivery.
• PostHog — product analytics.
• Vercel — application hosting and delivery.
• Inngest — scheduled background jobs (for example, weekly league resets, reminders).

We may also share information to comply with law, enforce our Terms, protect rights and safety, or in a merger, acquisition, or asset sale (with notice where required). Aggregated or de-identified data that cannot reasonably identify you is not treated as personal information.

5. Cookies and similar technologies

We use cookies and local storage to keep you signed in, remember preferences, and measure usage. You can control cookies through your browser; some features may not work without them.

6. Data retention

We keep personal information for as long as your account is active and as needed to provide the Service, then for a reasonable period to meet legal, accounting, or security needs. Anonymous sessions that are never upgraded to an account may be purged after a period of inactivity.

7. Your choices and rights

You can update your profile and notification settings in the app, cancel your subscription at any time, and unsubscribe from non-essential emails. Depending on where you live, you may have rights to access, correct, delete, or port your personal information, or to object to or restrict certain processing (for example, under California's CCPA/CPRA or the EU/UK GDPR). To make a request, contact us at the address below; we may need to verify your identity first. We will not discriminate against you for exercising these rights.

8. Security

We use reasonable technical and organizational measures (including access controls and row-level security on our database) to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. International users

We operate the Service from the United States. If you use Klymo from outside the U.S., you understand your information may be processed in the U.S. and other countries where our subprocessors operate.

10. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will take reasonable steps to notify you. The "Effective" date reflects the latest version.

11. Contact

Questions or privacy requests: support@klymo.app.