Klip is made by Kohala AI, LLC ("we", "us"). This policy explains what Klip stores, what leaves your phone, and who else sees it. It covers the Klip iOS app and its share extension.
Klip is a shoebox for links. Almost everything in it is content you deliberately put there, and we have tried to keep the rest to a minimum: there is no advertising in Klip, no analytics or tracking software of any kind, and we do not sell or share your information with anyone for their own purposes.
What Klip stores
Your account. When you sign in with Google or with Apple, we receive and store your email address, your name, a user id, and — for Google — the profile picture URL on your account. We do not receive or store your password; sign-in is handled entirely by Google or Apple. If you use Sign in with Apple and choose to hide your email, we only ever see the private relay address Apple gives us.
You also choose a username in Klip, and you may upload a profile picture from your photo library. Uploading one is optional and Klip does not otherwise read your photos.
What you save. For each link you save, Klip stores the URL, its title, the website it came from, a thumbnail image, the date you saved it, any note you write, and which collection you filed it in. Collections are stored by name. This is the content of the product, and it is the great majority of what we hold.
Facts about a saved link. Klip may store a small number of factual details about a link — how long a video runs, the day an article was published — so it can show them under the title. Where these come from is described below.
That is the complete list. Klip does not collect your location, your contacts, your browsing history outside the app, your device identifiers, or anything used to profile or advertise to you.
When Klip contacts other services
The sites you save. When you save a link, Klip fetches that page in order to read its title and preview image. This request goes from your phone or from our server to the site itself, so that site can see it was asked for — including your IP address when the request comes from your phone. This is the same thing that happens when any app shows a link preview.
YouTube. For YouTube links, Klip asks YouTube for the video's title, preview image and running time. Anything we store from YouTube's API is deleted within 30 days, as YouTube's terms require; Klip fetches it again if it is still needed.
Google and Apple. Signing in sends you to Google or to Apple, who authenticate you and tell us who you are. Their handling of that is covered by their own privacy policies, not this one.
Anthropic. See "The gist" below.
The gist
Klip can show a one- or two-sentence summary of what a saved link is. This is the only place a third-party AI model is involved, and it is worth being precise about what happens:
- Your phone sends our own backend nothing but the id of the Klip — not the link, not your name, not your account.
- Our backend fetches that public web page and sends its content to Anthropic's API, with the instruction to summarise it.
- The summary comes back and is stored on your Klip.
Your identity is not part of that request. Anthropic is asked to summarise a page; it is not told who saved it, or that anybody saved it. The only user-derived fact in the whole transaction is which page — and it arrives separated from who you are.
We do not train any model on your information, and we do not permit anyone else to. Anthropic's handling of API content is governed by their own terms and privacy policy at anthropic.com.
If a page has nothing worth summarising, or is behind a paywall or a login, Klip simply shows no summary. That is normal and it is not an error.
Where your information lives, and who can reach it
Klip's database, sign-in and file storage run on Supabase, our hosting provider, on servers in US West. Supabase processes this data on our behalf and under our instructions.
Every row in Klip's database is protected by row-level security, which means the database itself enforces that you can only ever read and write your own Klips, collections and profile. Your sign-in session is held in your device's Keychain. Traffic is encrypted in transit.
One exception you should know about. Profile pictures and link thumbnails are stored as files with long, unlisted web addresses. Anyone who has the exact address of one of those files can open it without signing in. The addresses are not published or guessable, but they are not individually access-controlled either. Do not treat a Klip thumbnail as private.
Operational reporting. Once a week our systems send us an internal summary of which website domains are represented in saved links and how many have a usable fact — for example, nytimes.com 3/5. It contains no links, no titles, no notes and no account identifiers, and it exists so we know which sites Klip still reads badly.
How long we keep things, and how to delete them
We keep your account and everything in it for as long as your account exists.
You can delete your account from inside Klip, under You → Delete account. Deleting is not instant, on purpose: your account is scheduled for deletion and held for 30 days, and signing back in during that window restores everything exactly as it was. After 30 days it is permanently deleted — your profile, your Klips, your collections, your notes and your uploaded images — and cannot be recovered. We do not need you to email us to do this, and there is no step where a person has to approve it.
Data held by YouTube's API — running times — is deleted within 30 days regardless, as described above.
Your rights
You can see everything Klip holds about you inside the app, change your username and picture at any time, and delete your account as described above.
Depending on where you live, you may also have the right to request a copy of your information, to have it corrected, to object to how we handle it, or to complain to your local data protection authority. If you are in California, you have the right to know what we collect and to have it deleted; we do not sell or share personal information as those terms are defined by the CCPA, and we do not offer any financial incentive in exchange for it.
To exercise any of these, email klip@kohala.ai and we will respond within 30 days.
The legal bases we rely on, where they apply: we handle your account information and your saved links to perform the contract of providing Klip to you, and we rely on our legitimate interest in keeping the product working for the operational reporting described above.
Children
Klip is not directed to children under 13, and we do not knowingly collect information from them. If you believe a child has given us information, email us and we will delete it.
Changes to this policy
If we change how Klip handles your information, we will update this page and move the "last updated" date. If a change is significant, we will say so in the app before it takes effect.
Contact
Kohala AI, LLC
klip@kohala.ai