This page explains what data Kleido (“we”, “us”) collects, how we use it, and how you can control it. It applies to kleido.app and the Kleido iOS and Android apps. We're a small team. If anything here is unclear, email contact@kleido.app and we'll answer like a human.
What we collect
- Account information, including your email address, name when provided, and account ID, collected through our authentication provider Clerk. We use it to manage sign-in, identify your account, and respond to support requests.
- Payment information, handled entirely by our payment processors. On the web that is Stripe. In the iOS and Android apps, subscriptions are purchased through Apple's App Store or Google Play and managed for us by RevenueCat. Card numbers and CVCs never touch our servers. We receive customer and transaction identifiers and subscription details such as product, purchase and renewal dates, and access status. RevenueCat associates mobile purchases with your Kleido account ID to manage subscription access.
- Usage analytics via PostHog: screen and page views, searches, button clicks, errors, and device or browser information. When you sign in, these events are associated with your account ID and may include your email, name, and account creation date. We use this information to understand product use, diagnose problems, and improve Kleido. Our servers also record request and usage logs to operate the service and prevent abuse.
- Saved jobs and customer information: details you enter or save, including customer names, phone numbers, email and street addresses, vehicle information and VINs, key codes and bittings, job notes, dates, amounts charged, and payment-method labels. We store these with your account so you can retrieve and manage your work. This does not give Kleido access to your device's contact list.
- Optional location: when you choose to detect a job location and grant permission, Kleido reads your device location, which may include precise coordinates. You can also type an address. Address searches or coordinates are sent to geocoding providers to find an address or map position; saved job locations are stored with your account. Kleido does not continuously track your location in the background. You can decline location permission and enter an address manually.
- Community notes and photos: we store the notes you submit and photos you choose from your library or take with the camera. Selected photos upload when you attach them, before you publish the note. Published notes and their author attribution are visible to other users. Uploaded images use publicly accessible URLs; anyone with an image link can view it. Only upload photos you have permission to share, and avoid including private customer details. Camera and photo permissions can be changed in your device settings.
- Submitted code corrections: if you email us about a bad code, we keep that thread for quality control.
What we don't collect
- No access to your device's contact list
- No automatic upload of your entire photo library or device files
- No third-party advertising trackers or pixels
- No biometric data
- No browsing history outside of pages you visit on Kleido itself
Cookies
Kleido uses two categories of cookies. Essentialcookies from Clerk keep you signed in. Without these, the app can't function. Analytics cookies from PostHog record session-level usage for product improvement. We do not use cookies for advertising or cross-site tracking.
Data retention
Account data is retained for as long as your subscription is active and for 90 days after cancellation, then deleted. You can request earlier deletion at any time. Stripe, Apple, Google, and RevenueCat retain billing and transaction records under their own retention policies and applicable requirements; we do not override those policies. Deleting a Kleido account does not cancel an App Store or Google Play subscription. Cancel it through the store where you purchased it.
Third parties
Kleido relies on a small set of vendors to operate. Each handles data under its own privacy policy:
- Clerk : authentication and account management
- Stripe : subscription billing and payment processing on the web
- RevenueCat : subscription management for in-app purchases
- Apple & Google : in-app purchase processing on iOS and Android
- PostHog : product analytics
- Vercel : application hosting and uploaded image storage (Vercel Blob)
- Location and mapping providers : Apple's location services on iOS, and Photon (Komoot) or OpenStreetMap Nominatim for address lookup and fallback geocoding. These services receive the address search or coordinates needed to answer the request.
- Turso : database hosting
We don't sell or rent personal data to anyone, and we don't share it with third parties beyond what these vendors need to provide their service.
Your rights
Under GDPR (if you're in the EU/UK) and CCPA (if you're in California), you can request a copy of the personal data we hold on you, request that it be corrected, or request that it be deleted. Email contact@kleido.app from your account email. We respond within 30 days.
Children
Kleido is a tool for working professionals and is not directed at children under 13. We don't knowingly collect data from anyone under 13. If you believe a child has signed up, email us and we'll delete the account.
Changes to this policy
When we change this policy in any meaningful way, we'll update the date at the top of the page and send a notice to the email on file before the change takes effect.
Contact
Questions about your data, this policy, or anything else? Email contact@kleido.app.