YOUR WORDS STAY YOURS
Privacy
Operator: Kailun Pan. Scripts and speech stay on your device. Sign-in, purchase verification, and service operations process the data described below. Each feature shows its availability at its entry.
Speech and recognition
Prompting speech is recognized on your device, through the browser model or Apple’s on-device service. The current local test version does not upload audio, transcripts, or scripts to a speech-recognition server. The website’s feature animation is silent and does not automatically access your microphone.
Scripts and settings
Scripts and reading preferences are stored on your device. Clearing site data, removing the app, or deleting local storage can remove them. Export important scripts first. Cloud script synchronization is not included in the first release.
Models and connections
Obtaining models, pages, and updates requires a connection. Browsers may evict offline caches; removed assets need to be downloaded again. No per-minute local speech fee does not mean the app, network transfer, or purchase is free.
Accounts and sign-in
When you sign in with Apple or Google, we retain that provider’s identifier, the email and display name it supplies, if any, your account identifier, and registration time. We also process session or authorization credentials needed for sign-in, refresh, sign-out, and account deletion. Supabase hosts this product’s database. Matching emails do not merge accounts. Web sign-in tokens use browser session storage. Native apps use their own secure device storage. After purchase verification, the device may separately retain a signed offline access credential, account identifier, and a time record used to detect clock rollback. Lifetime credentials support offline use; subscription credentials remain bounded by their verified expiry. Refunds cannot be detected while fully offline; invalid credentials are cleared when the account is checked online.
Activity and service statistics
After sign-in, activity records are linked to your account identifier and contain the platform, app version, and visit time, and update recent activity. These records support account services and aggregate statistics such as user counts, recent activity, and paid users. When sharing is available, claim accounts, times, and offer status are also processed for eligibility, duplicate prevention, and claim counts. Account and activity requests contain no scripts, audio, transcripts, or camera footage.
Purchases and access verification
Apple native purchases are processed by the App Store. The app submits signed transaction information to this product’s service for verification and uses the transaction’s app-account token to associate it with the current account. We retain verified product, order, and transaction identifiers, amounts and currencies, subscription and expiry status, refunds or revocations, and associated access for verification, restoration, support, and aggregate payment statistics. When web purchasing opens, Creem processes payments and billing; we retain related orders, customer identifiers, and access records. The app does not receive your Apple Account password or full payment-card details. Live purchasing and sharing are not yet open; their entries show the current availability.
Network and service security
When you access the website and account APIs, hosting services process technical information needed to deliver network access, such as IP addresses, request times, status, and errors. The account API hashes the request IP and temporarily retains a rate-limit identifier, time bucket, and request count to prevent abuse; these records are not discarded immediately after a single request. Technical records may be associated with requests, accounts, or devices and are handled for service security, operations, and cleanup needs. We do not use this data for advertising or cross-service advertising tracking.
Camera
Camera preview is opened by the user and remains local. The current product scope does not take photos, record video, or upload camera footage.
Retention and deletion
Sign-in and profile data are retained while you use the account. Sign in on the delete-account page and confirm deletion of this product’s account. Deletion invalidates product sessions and removes linked profile data and other deletable data. Apple authorization is handled using available credentials; the page will explain any action still needed in Apple Account settings. Necessary billing audit records are retained as required by applicable law and cannot be used to sign in. Deletion does not cancel subscriptions with the original purchase provider. Local scripts and site data can be removed separately. For privacy and data questions, contact support@kailoo.net.
Updated November 5, 2026