Privacy Policy

Last updated: October 2026. This is a general summary and should be reviewed by legal counsel before launch.

This policy explains what personal data kiko.ai processes, why, and what rights you have under the GDPR.

1. Data we process and who processes it

Supabase (authentication, database, and file storage): your email address, account ID, profile details, generation records, and the media you upload or generate.
Stripe (payments): payment details and billing identifiers. Card data is handled by Stripe; kiko.ai does not store card numbers.
Fal.ai and other AI model providers: the prompts and input media (such as reference images and videos) you submit, which are processed to produce your generation.
Basic technical and security logs needed to operate and protect the service.

2. Why we process it

To provide the service you request (contract), process payments and meet accounting duties (legal obligation), keep the service secure and prevent abuse (legitimate interest), and show content you chose to share publicly.

3. Private generations and storage

Generations you keep private are stored in Supabase Storage and are accessible only to your account. Content becomes visible to others only when you make it public.

4. Your rights

Under the GDPR you have the right to access, correct, and delete your data (including your account), to restrict or object to processing, and to receive a copy of your data. To exercise these rights, write to us using the contact below. You can also lodge a complaint with your local data protection authority.

5. Retention and age limits

We keep data while your account is active and for as long as legal or accounting obligations require. Deleting your account removes your personal data and stored media, except records we must retain by law.

The service is intended for users who are at least 18, or 16 with parental consent.

6. Contact

Privacy requests: support@kiko.ai.