This page explains what data Kleido (“we”, “us”) collects, how we use it, and how you can control it. It applies to kleido.app and any current or future Kleido apps. We're a small team — if anything here is unclear, email contact@kleido.app and we'll answer like a human.
What we collect
- Email address, collected when you create an account through our auth provider Clerk. We use it to identify your account, send billing receipts, and respond to support requests.
- Payment information, handled entirely by Stripe. Card numbers and CVCs never touch our servers; we receive only a Stripe customer ID and subscription metadata.
- Usage analytics via PostHog: page views, button clicks, search queries, and similar product interactions. Tied to your authenticated user ID so we can fix bugs and prioritize features. No data beyond that user ID is collected to identify you.
- Submitted code corrections: if you email us about a bad code, we keep that thread for quality control.
What we don't collect
- No GPS or device location
- No contact list, photos, or device files
- No third-party advertising trackers or pixels
- No biometric data
- No browsing history outside of pages you visit on Kleido itself
Cookies
Kleido uses two categories of cookies. Essentialcookies from Clerk keep you signed in — without these, the app can't function. Analytics cookies from PostHog record session-level usage for product improvement. We do not use cookies for advertising or cross-site tracking.
Data retention
Account data is retained for as long as your subscription is active and for 90 days after cancellation, then deleted. You can request earlier deletion at any time. Stripe retains payment records on its own schedule for tax and compliance reasons; we don't override that.
Third parties
Kleido relies on a small set of vendors to operate. Each handles data under its own privacy policy:
- Clerk — authentication and account management
- Stripe — subscription billing and payment processing
- PostHog — product analytics
- Vercel — application hosting
- Turso — database hosting
We don't sell or rent personal data to anyone, and we don't share it with third parties beyond what these vendors need to provide their service.
Your rights
Under GDPR (if you're in the EU/UK) and CCPA (if you're in California), you can request a copy of the personal data we hold on you, request that it be corrected, or request that it be deleted. Email contact@kleido.app from your account email. We respond within 30 days.
Children
Kleido is a tool for working professionals and is not directed at children under 13. We don't knowingly collect data from anyone under 13. If you believe a child has signed up, email us and we'll delete the account.
Changes to this policy
When we change this policy in any meaningful way, we'll update the date at the top of the page and send a notice to the email on file before the change takes effect.
Contact
Questions about your data, this policy, or anything else? Email contact@kleido.app.