Privacy Policy

Last updated: May 2026 · Effective immediately

Kylo AI ("we", "us", "our") provides real-time AI video and audio transformation services. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use kyloai.online and related services.

1. Information We Collect

We collect the following categories of information:

• Account information: Email address, password (encrypted), and profile details you provide on signup.
• Payment information: Transaction references and amounts processed through Korapay or Paystack. We do not store card numbers or bank details — these are handled entirely by our payment processors.
• Usage data: Sessions started, duration streamed, stream type selected, and features used.
• Camera and microphone data: Your camera feed and microphone input are processed in real time by our AI provider (Decart AI). We do not record, store, or retain your video or audio streams.
• Technical data: IP address, browser type, device type, and error logs for debugging and security.
• Communications: Messages you send to our support team.

2. How We Use Your Information

• To provide, operate, and improve the Kylo AI service
• To process payments and maintain your account balance
• To send transactional emails (session confirmations, payment receipts)
• To detect and prevent fraud, abuse, and unauthorized access
• To respond to support requests
• To comply with legal obligations

3. Data Storage and Security

Your data is stored securely using Supabase (hosted on AWS). We implement the following security measures:

• Row-level security on all database tables — users can only access their own data
• Encrypted connections (HTTPS/TLS) for all data in transit
• Authentication tokens verified server-side on all sensitive operations
• Rate limiting to prevent abuse
• Passwords are never stored in plain text

4. Third-Party Services

We use the following third-party services which may process your data:

• Decart AI — processes your camera and microphone streams in real time for AI transformation. No data is retained after your session ends.
• Korapay / Paystack — payment processing. Governed by their own privacy policies.
• Deepgram — real-time speech-to-text for voice stream feature. Audio is not stored.
• Cartesia — text-to-speech for voice transformation. Not stored.
• Magic Hour — AI Studio video and image processing. Files are temporarily processed and then deleted.
• Brevo — transactional email delivery.
• Sentry — error monitoring. May capture anonymized technical error data.
• Vercel — hosting and serverless functions.

5. Data Retention

• Account data is retained while your account is active
• Transaction records are retained for 7 years for legal compliance
• Session metadata (duration, type) is retained for billing and analytics
• Support messages are retained for 2 years
• You may request deletion of your account and personal data at any time by emailing admin@kyloai.online

6. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Object to processing of your data
• Receive a copy of your data in a portable format

To exercise any of these rights, contact us at admin@kyloai.online.

7. Cookies

We use only essential cookies required for authentication and session management. We do not use advertising or tracking cookies.

8. Children's Privacy

Kylo AI is not intended for users under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with their data, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. Continued use of Kylo AI after changes constitutes acceptance of the updated policy.

10. Contact

For privacy-related questions or requests, contact us at:
admin@kyloai.online