1 · The short version
In the Mac, iPhone, and iPad apps, imported footage and local projects live on your device. When you ask the agent for an edit, the pieces needed to fulfill that request are sent to our servers, passed to our AI providers, processed, and returned. That means your prompt, your timeline's metadata, and where relevant, compressed audio for transcription or individual frames so the agent can see what it's grading. Cloud MCP also stores the media you upload or import, project timelines, transcripts, job results, and exports on our cloud infrastructure so editing can continue across sessions and connected agents. We don't sell your data and we don't use your content to train models.
2 · What we collect
Account: your account identifier, email, and name provided by Google sign-in. Native Apple sign-in requests only your email, including a private relay address if you choose Hide My Email. We do not receive your Apple or Google password. Billing: handled by Stripe; we store your plan, credit balance, and a Stripe customer reference. We never see your card number. Usage: per-request token counts and costs (so credits and pricing stay honest), your credit ledger, and basic diagnostics. Product analytics: PostHog receives an installation identifier, account identifier when signed in, app interactions, device and app information, approximate location derived from IP address, and diagnostic events. We use these to understand and improve Klo, not for advertising or tracking across other companies’ apps. Analytics events do not include your prompt text, media, or file paths. Media: local caches stay on your device; requested AI processing sends relevant media to providers. Cloud uploads, transcripts, projects, and exports persist between requests. Expiration of an export download link does not delete the stored file.Run traces: to improve how well the agent edits, we keep the text prompts you send it and the text of its replies, tied to your account. Never your footage, frames, transcripts, or file contents, only the conversation. Opting out of analytics in the app (defaults write com.klo.video klo.analyticsOptOut -bool YES) also stops trace collection in the Mac app. Cloud jobs also retain their instructions, tool activity, and results with the project; the Mac analytics setting does not disable those operational cloud records.
3 · Who touches your data
Supabase hosts our accounts database, sign-in, and API services. Railway hosts Cloud MCP, its project and media storage, and rendering. Vercel hosts our website. PostHog processes product analytics and diagnostics. Stripe processes payments. Anthropic processes agent requests, including the frames the agent captures to see your footage. Requests may be routed through OpenRouter and its model-serving providers. Google Gemini processes media submitted for video understanding. ElevenLabs processes audio for transcription, dictation, voice isolation, and, only when you ask for it, generated music, sound effects, voiceover, and voice cloning from clips you choose. fal.ai receives the two boundary frames of a cut, or a still you pick, only when you ask for a generated transition or shot. OpenAI is a legacy transcription route we are retiring. Which providers receive content depends on the tools you use. Their processing, retention, and international-transfer terms also apply; we do not represent every provider route as having identical retention or training settings. Our current Cloud MCP and account database deployments are in the United States. Providers may process or access data in other countries.
4 · What stays on your device
In the native apps: your imported media, local project files and autosaves, transcript caches, waveforms, and thumbnails. Cloud copies are separate. Deleting a native app or its local data does not delete uploaded cloud projects or media.
5 · Retention and deletion
Account and billing records are kept while your account exists (and as required for tax and accounting). Want everything gone? Use Settings → Delete account in the app to delete your account and cancel Klo web subscriptions, or email support@getklo.com to request deletion of your account and associated cloud data, minus what the law requires us to keep. Cloud projects and their referenced media have no fixed automatic expiry; unused temporary working files may be cleaned separately. Cloud-file deletion currently requires operator handling, so an in-app account-deletion action should not be treated as confirmation that every cloud file has already been removed. If you used Apple sign-in, you can also remove Klo under Settings → your name → Sign in with Apple on your Apple device.
6 · Security
Model keys live server-side, requests are authenticated per-user, and payment credentials never pass through us. No system is perfect; if a breach affects you, we'll tell you promptly.
7 · Children
klo isn't directed at children under 13, and we don't knowingly collect their data.
8 · Changes
If we change this policy in a way that matters, we'll say so in the app or by email before it takes effect.
9 · Contact
Klorah, Inc. · support@getklo.com