Privacy Policy

1. Who We Are

Kliplio is a mobile application currently available on iOS that allows users to save, organise, and search posts from Instagram and TikTok. AI technology extracts spoken words, captions, and on-screen text from saved content into readable, searchable form.

The data controller responsible for your personal data is:

Kliplio Ltd
Registered address: 90 Maritime House, Ocean Drive, Gillingham, Kent, ME7 1GT, England, UK
Company number: 17409696
Email: privacy@kliplio.com

2. What This Policy Covers

This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you use the Kliplio app ("the App") or visit our website at kliplio.com. It also describes your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By creating an account or using the App, you confirm you have read this policy. If you do not agree, please do not use the App.

3. Data We Collect

3.1 Account Data

When you create an account we collect your email address, your password (stored in hashed, encrypted form, so we never see your plain-text password), and, if you sign in with Apple or Google, your name and email address as provided by those services plus an OAuth token to authenticate you. You may optionally add a display name at any time.

3.2 Content You Save (Post Data)

When you save a post via the share sheet, we store the URL of the original post, any caption text associated with it, AI-extracted text (spoken audio transcription, on-screen text, and captions), the folder and tags you assign, and the date and time of saving. We do not download or permanently store the original video or image file. The source content remains hosted on Instagram or TikTok, and extracted text is stored separately from any original media.

3.3 Organise Data

Folder names and structure, tags you create and apply, and push notification preferences and scheduled reminder times.

3.4 Technical & Usage Data

Device type, OS version, app version, an anonymised device identifier, crash reports and error logs (via Sentry), and aggregated usage analytics. We do not use advertising identifiers or sell your data to advertisers.

4. How and Why We Use Your Data

Purpose	Data used	Legal basis (UK GDPR)
Create and manage your account	Account data	Performance of contract (Art. 6(1)(b))
Provide the App: saving, organising and digesting posts	Post data, folder data	Performance of contract (Art. 6(1)(b))
Run our AI extraction pipeline	Video/image URLs, extracted audio, captions, OCR	Performance of contract (Art. 6(1)(b))
Send push notifications and reminders	Account data, notification preferences	Consent (Art. 6(1)(a)), controlled in device settings
Respond to support requests	Account data, relevant post data	Legitimate interests (Art. 6(1)(f))
Improve and debug the App	Technical/usage data (aggregated)	Legitimate interests (Art. 6(1)(f))
Comply with legal obligations	As required by law	Legal obligation (Art. 6(1)(c))

5. Third-Party Content and Platform Terms

Kliplio saves URLs and extracted text from content hosted on Instagram (Meta Platforms) and TikTok (ByteDance). We are not affiliated with, endorsed by, or partnered with either platform. You are responsible for ensuring your use of Kliplio complies with the terms of service of any platform you save content from. Kliplio is a personal organiser and does not facilitate the public sharing, redistribution, or re-publication of third-party content. If a post is removed from Instagram or TikTok, the original link will no longer work, though text extracted before removal remains in your library.

6. AI Processing

Our AI extraction pipeline processes content to produce text stored in your account: the public post content fetched from the source platform through our content provider (TikHub), audio transcription (Whisper by OpenAI, operated via our backend), on-screen text recognition (OCR) for reels, carousels, and static image posts, and a synthesis pass using Claude (by Anthropic) to classify, structure, and produce Digests. Audio and image data are processed transiently and are not retained beyond the processing window. Only the resulting extracted text is stored. Only post content (transcriptions, captions, and OCR text) is sent to AI processors. Your account data, email address, and identity are never shared with them.

We use Supabase to host our database and run backend functions, under a data processing agreement. You can review Supabase's privacy practices at supabase.com/privacy.

7. Who We Share Your Data With

We do not sell your personal data. We share data only with:

Service providers acting as data processors: Supabase (database and backend hosting); Apple (authentication and in-app purchases); OpenAI (audio transcription via Whisper); Anthropic (AI content classification, extraction synthesis, and Digest generation); Sentry (crash reporting and error logging); Fly.io (hosting for our processing servers); TikHub (fetching the public post content you save); RevenueCat (managing subscriptions and purchases); Resend (sending sign-in and account emails); and Tally (our beta sign-up form). All act under data processing agreements.

Law enforcement or regulators where legally required, or a successor entity if Kliplio is acquired or merged, with advance notice to you.

8. International Data Transfers

Our service providers may process data outside the UK or EEA. Where this occurs we use appropriate safeguards: UK International Data Transfer Agreements, Standard Contractual Clauses, or transfers to countries with an adequacy decision.

9. Data Retention

Account data and your post library are retained while your account is active. If you delete your account, we delete your personal data within 30 days, except where retention is legally required (e.g. financial records, up to 6 years). Technical/crash logs are retained up to 90 days; aggregated anonymised analytics are retained indefinitely. You can delete individual posts and folders in the App at any time, and ask us to delete your account by emailing support@kliplio.com.

10. Your Rights Under UK GDPR

Contact privacy@kliplio.com to exercise any of the following: right of access, rectification, erasure, restriction, data portability, objection to processing based on legitimate interests, and withdrawal of consent (e.g. for push notifications) at any time via device settings. We do not make automated decisions with a legal or similarly significant effect on you. You may also complain to the UK's Information Commissioner's Office at ico.org.uk or 0303 123 1113.

11. Children

The App is not directed at children under 13, and we do not knowingly collect personal data from anyone under 13. Contact privacy@kliplio.com if you believe we have and we will delete it promptly. Users aged 13 to 17 may use the App with parental consent; we follow the UK Children's Code for younger users.

12. Security

We use encrypted data transmission (TLS), hashed password storage, and access controls limiting who can see personal data. Crash reports and error logs are collected via Sentry to help us identify and fix issues quickly. No system is completely secure. Contact privacy@kliplio.com immediately if you believe your account has been compromised.

13. Changes to This Policy

We may update this policy from time to time. Significant changes are notified via the App or by email. The "Last updated" date above reflects the most recent revision; continued use after notice constitutes acceptance.