Kloey Privacy Policy

Effective date: 13 October 2026 Operator: Boustta Mohamed, El Oulfa, Casablanca, Morocco Privacy contact: contact@trykloey.com Policy URL: https://trykloey.com/privacy

1. About this policy

This policy explains what information Kloey processes, why we process it, who receives it, and the choices you have.

Kloey is an iPhone app for adults aged 18 or older. It offers AI chat, daily mood check-ins, a personal journal with text, optional photos, tags and activities, voice-to-text journaling, breathing and reflection exercises, mood charts, weekly journal recaps, month and year reports, optional AI mood reflections, reminders, a Home Screen widget, and weekly and yearly Premium subscriptions.

Kloey supports personal reflection. It is not a medical provider, therapist, diagnostic service or emergency service.

2. Information we process

Account and sign-in. When you sign in with Apple or Google, we receive the identifier your provider gives us and the profile details you choose to share, such as your name or email address. We create a Kloey account identifier for you. We do not receive your Apple or Google password. We record whether you confirmed you are an adult, and how.

Onboarding and preferences. We process the goals, interests, routines, activities, reflection preferences, optional written goals, character choice, language, time zone and reminder settings you provide during setup. Onboarding context may be used to personalise AI chat. Your starting-mood preview is calculated on your device. It is not saved as a mood entry and is not sent to an AI provider.

Mood, journal and practice. We process your daily mood check-ins and their dates, the feelings, activities and tags you attach, journal titles and text, journal photos, and breathing or reflection sessions and your progress.

Voice journaling. If you use voice journaling, the recording you submit is sent to Meta for transcription (see section 4). We process the audio in a temporary, memory-backed workspace, delete it when processing finishes, and clean up any abandoned request folders within 10 minutes. We do not save the recording as a journal attachment. You can read the transcript before you save it as journal text.

AI chat. We process the messages you send, Kloey's replies, recent conversation context, and the onboarding context needed to reply. Conversation history is stored in your account. Chat accepts text only. Photo, file and voice uploads are not available in chat.

Weekly recaps and mood reflections. A weekly recap is created only when you ask for one. It uses the journal entries you wrote in the selected week, including their dates and any moods or activities attached to them. A mood reflection is created only when you ask for one, and only when you have at least three check-ins in the period you choose. It uses your mood categories and dates for that period. It does not use journal text or chat history. Week, month and year reports show summaries and progress from your saved data. Month and year reports are built from saved information and existing weekly recaps. They do not send a new request to an AI provider.

Subscriptions. Kloey and RevenueCat process your subscription status, entitlement, renewal and expiry dates, and transaction identifiers so that we can provide Premium access. Apple processes App Store purchases and payment details. We process the contact details and contents you include in a support or privacy request.

Device and service information. Reminders are scheduled on your device. A limited copy of today's mood and streak may be stored in widget data on your device. Kloey does not request your GPS location, HealthKit data or contacts. Kloey and its service providers process IP address, device, account, security and operational information needed to run and protect the service.

3. How we use information

We use information to create and secure your account; provide the features you use; save and display your journal, mood history, chats and practice progress; create the recaps and reflections you request; personalise chat with the onboarding context you provide; send reminders; manage subscriptions; answer support and privacy requests; prevent abuse; keep the service running; and meet our legal obligations.

We do not show targeted advertising. We do not sell your information. We do not use your journal entries or chat messages to train AI models.

The iOS app uses product analytics from PostHog. It may send your account identifier and a small set of event and screen names, along with coarse categories such as answer length, practice activity or purchase status. The app does not send raw journal text, chat messages, written goals or selected mood values to analytics. Automatic screen capture, interaction capture and session replay are turned off. Server-side analytics are turned off in the current production configuration.

4. AI providers and your permission

Kloey uses third-party AI providers for some features. These are OpenAI and Meta.

Your permission comes first. Kloey does not send your information to an AI provider until you have allowed AI data sharing. This is a separate choice from accepting the Terms of Use and this Privacy Policy. It is shown during setup, and you can change it at any time in Settings under AI data sharing. If you turn it off, Kloey stops sending information to these providers, and the AI features will not work until you turn it on again. Turning it off does not recall information already sent, and it does not remove records that a provider keeps under its own safety or legal rules.

OpenAI provides:

• replies in AI chat;
• safety checks of journal photos before they are saved;
• weekly journal recaps you request; and
• mood reflections you request.

When you use chat, Kloey sends your message, recent conversation context and the onboarding context needed to reply. For a weekly recap, Kloey sends the journal entries you wrote in the selected week, with their dates and any moods or activities attached to them. For a mood reflection, Kloey sends the mood categories and dates from your check-ins for the period you choose. It does not send journal text or chat history. For a journal photo, Kloey sends the photo for a safety check.

OpenAI states that it does not use data sent through its API to train its models unless the customer opts in. Kloey has not opted in. OpenAI may keep API inputs and outputs in abuse-monitoring logs for up to 30 days. It may keep them longer where the law requires or where needed to address a safety issue. OpenAI's moderation endpoint, which Kloey uses for photo safety checks, is not kept for abuse monitoring under OpenAI's current published terms.

Meta provides voice transcription. When you submit a voice recording for journaling, Kloey sends the recording to Meta's Model API, receives the transcript, and discards the audio as described in section 2. Kloey uses Meta's zero data retention setting for this service. Meta states that under this setting, prompts and responses are not stored after the response is returned, except for legal or misuse-related cases. Meta may keep inputs and outputs linked to a flagged policy violation for up to two years, and it keeps limited account and usage information needed to run its service. Meta's current terms say that content processed through its standard services is not used to train Meta's models. Voice transcription is only offered where Meta's service is available.

These provider terms may change. We review them regularly and will update this section if they change in a way that affects you.

5. Service providers and locations

Kloey relies on these service providers:

• Apple and Google for sign-in. Apple also distributes Kloey and processes App Store purchases.
• Supabase for sign-in and our main account database. The database is hosted in Frankfurt, Germany.
• Fly.io for hosting Kloey's API and background services. These run in Frankfurt, Germany.
• Upstash for temporary Redis data used for service protection and recent chat context. Recent chat context is kept for up to 7 days.
• Cloudflare R2 for private storage of journal photos. Photos are stored in the European Union.
• RevenueCat for Premium subscription status and purchase identifiers.
• PostHog for the limited iOS product analytics described in section 3.
• OpenAI and Meta for the AI features described in section 4.

Some providers may process information outside Germany, outside the European Union and outside your country, including in the United States. Where required, we rely on the transfer safeguards those providers make available.

6. Retention, export and deletion

We keep your account information and saved content while your account is active, unless a shorter period applies as set out below.

Download your data. Go to Settings and choose Download my data. The export contains the account data available through that feature.

Delete your account. Go to Settings and choose Delete account. This starts an erasure process that removes your account content from active Kloey systems as processing completes. It also asks RevenueCat to delete your subscriber record. Deleting your Kloey account does not cancel your Apple subscription. To cancel, use your Apple Account subscription settings.

Specific periods:

• Voice recordings are deleted from our temporary workspace when processing finishes. Abandoned request folders are cleaned up within 10 minutes. A transcript is kept as journal text only if you save it.
• Recent chat context stored in Redis is kept for up to 7 days.
• Records of recap and mood reflection jobs that did not complete are deleted after 30 days.
• Saved recaps, reports and other content stay in your account until you delete them, delete your account, or a feature rule makes them unavailable.
• Journal photos are removed from storage through our deletion process after you delete them or your account.
• Backup copies are overwritten on their normal schedule.

OpenAI and Meta keep information under the periods described in section 4. Deleting your Kloey account does not remove records that a provider must keep for safety, abuse-monitoring or legal reasons.

7. Your choices and rights

You can:

• download your data and delete your account in Settings;
• turn AI data sharing on or off in Settings;
• change or turn off reminders in Settings or in iOS notification settings; and
• stop using any feature at any time.

Depending on where you live, you may have rights to access, correct, delete, export, restrict or object to some processing, to withdraw consent for future processing, and to complain to a data protection authority. To use these rights, email contact@trykloey.com. We may ask you to confirm your identity before we respond. We respond within the time required by the law that applies to you. This includes, where it applies, Moroccan Law No. 09-08 on the protection of individuals with regard to the processing of personal data.

8. Adults only

Kloey is for people aged 18 and older. Where it is available, Kloey uses Apple's Declared Age Range to confirm age. Otherwise, you confirm that you are an adult. If we learn that an account belongs to someone under 18, we will restrict the account and delete the person's information.

9. Personal reflection, not professional care

Kloey is not a medical provider, therapist, diagnostic service or emergency service. AI replies, recaps and reflections can be wrong or incomplete. They are not a diagnosis, treatment or professional advice. For an emergency, contact your local emergency service. In the United States, call or text 988. Elsewhere, find local support at https://findahelpline.com.

10. Security

Kloey uses HTTPS and TLS between the app and our services. Access to services is limited to the roles that need it. Journal photos are kept in private storage. Voice recordings are processed in a temporary, memory-backed workspace. No online service can guarantee that transmission or storage is completely secure.

11. Disclosures

We may share information with the service providers listed above. We may also disclose information where the law requires it or in response to valid legal process, to protect people, rights, property or the security of the service, or in connection with a merger, acquisition, financing or transfer of all or part of our business, subject to applicable law.

12. Changes to this policy

We will post any changes on this page and update the effective date. For material changes, we will tell you in the app and, where the law requires, ask for your consent again. If a change affects how we share information with AI providers, we will ask for your permission again before that sharing begins.

13. Contact

Operator: Boustta Mohamed, El Oulfa, Casablanca, Morocco Privacy contact: contact@trykloey.com Website: https://trykloey.com