Privacy Policy

1. Who we are

Kleus is operated by Strade SMIP S.R.L., a company registered in Romania, with its registered office at Strada Tâmpei 16D, Brașov, Romania (VAT / CUI RO54286700, Trade Register No. J8/1481/2023). We are the data controller for the personal data described here. For any privacy question or to exercise your rights, contact support@kleus.ai.

2. What Kleus does (in one line)

Kleus is an accountability and coaching tool. You tell it what you want to learn; it builds a plan, checks in with you on your chosen channel, and holds you to it. To do that it has to store what you tell it and send some of it to the AI and messaging providers listed in section 6.

3. The data we collect

You give us

• Account: email address, and either a password (stored only as a secure hash by our auth provider) or a Google / Apple sign-in identifier.
• Profile & goals: your name (optional), the goal you want to reach, your reason / motivation ("why"), learning preferences, your timezone, and the days and hours you want to be contacted.
• Phone number: to send verification codes and to message you on your chosen channel, together with the fact that it has been verified.
• Content you create or submit: messages you send the coach, your answers in verification checks, and any topics or materials (e.g. a book, paper, or podcast) you tell us you want to be coached on.

We generate or record as you use Kleus

• Learning data: your plan, chapters and assignments, verification scores and feedback, check-in history, and consistency statistics.
• Channel identifiers: your Telegram chat ID and / or WhatsApp number, so we can reach you.
• Payment data: a Stripe customer and subscription identifier and your subscription status. Card payments are handled entirely by Stripe. We never see or store your full card number.
• Technical & usage data: log data, IP address, basic device / browser information, and metering of the AI and messaging usage tied to your account (for billing limits and abuse prevention).

If you join the waitlist

Before launch we may collect your email, phone number, the topic you want to learn, and any specific material you mention, solely to contact you about early access.

4. Why we use it, and our legal basis

• To provide the service: generating your plan, running check-ins and verifications, and messaging you. Legal basis: performance of our contract with you.
• To verify your phone and secure your account: sending one-time codes, preventing duplicate or fraudulent sign-ups. Legal basis: contract and our legitimate interests in security.
• To take payment: via Stripe. Legal basis: contract.
• To operate, debug, and protect Kleus: logging, abuse and cost control, and improving the service. Legal basis: legitimate interests.
• To meet legal obligations: e.g. keeping billing and tax records. Legal basis: legal obligation.

We do not send marketing emails at this time, and we do not sell your personal data. If we ever introduce marketing messages we will ask for your consent first and give you a way to opt out.

5. Automated processing & AI

Kleus uses AI to generate your plan and to write the coach's replies. To do this, the inputs you provide (your goal, messages, materials and check-in answers) are sent to the third-party AI providers listed below, which return generated text. This processing is automated, but it does not produce legal or similarly significant effects on you: you remain free to accept, ignore, edit, or delete anything Kleus produces. AI output can be wrong; see our Terms for how you should treat it.

6. Who we share data with (processors)

We share the minimum necessary with the providers that run Kleus. Each acts as our processor (or an independent controller for payments) under contract:

• Supabase: database & authentication hosting (EU region). Stores your account and learning data.
• Vercel: hosting of the website and app.
• AI providers (Google Gemini, xAI Grok, and Groq): generate your learning plan, write the coach's replies, produce short phrasings, and transcribe voice notes. We may route any of these tasks to any of these providers.
• Twilio: sends phone verification codes by SMS.
• Stripe: processes card payments and manages your subscription (independent controller for payment data).
• Telegram and Meta (WhatsApp): deliver messages on the channel you choose.
• Retell: places accountability phone calls, where and when that feature is enabled.

We may also disclose data where required by law, to enforce our terms, or in connection with a business transfer (e.g. merger or acquisition).

7. Content and materials you submit

You are responsible for what you put into Kleus. By submitting a topic, material, or any other content you confirm you have the right to do so and that it does not infringe anyone else's rights or any law. Kleus is a coaching and accountability tool, and it does not host, reproduce, or distribute third-party courses or copyrighted works on your behalf. See the Terms for the full position.

8. International transfers

Your data is stored in the EU. Some processors above (for example Google, xAI, Groq, Twilio, Stripe) operate in the United States or other countries outside the European Economic Area. Where data is transferred outside the EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision.

9. How long we keep it

We keep your personal data for as long as your account is active. If you delete your account, we delete your personal data, except where we are required to keep certain records (for example billing and tax records for the period required by law) or need limited data to resolve disputes or prevent abuse. Waitlist data is kept until you ask us to remove it or until it is no longer needed.

10. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased;
• restrict or object to certain processing;
• receive your data in a portable format;
• withdraw any consent you have given, at any time.

To exercise any of these, email support@kleus.ai. You also have the right to complain to the Romanian supervisory authority, the National Supervisory Authority for Personal Data Processing (ANSPDCP, dataprotection.ro), or to your local authority in the EU.

11. Security

We protect your data with encryption in transit, hashed passwords, access controls, and EU-hosted infrastructure. No online service can be completely secure, so we cannot guarantee absolute security, but we take reasonable measures to protect your information and will notify you and the relevant authority of a breach where the law requires it.

12. Cookies & local storage

Kleus uses essential cookies to keep you signed in, and browser local storage to save your progress through onboarding so you can resume it. These are always on, because the product does not work without them.

On this marketing site we also use the Meta pixel, an advertising and analytics cookie that tells us which ads and posts bring people here, and whether they join the waitlist. It is on by default and you can turn it off at any time, here. Your choice is stored in this browser, so set it again on other devices.

Turning it off does not change anything about how the site works, and it does not affect your waitlist signup or your account. We do not use advertising cookies anywhere inside the product itself.

13. Children

Kleus is intended for adults. It is not directed at anyone under 18, and you must be at least 18 to create an account. If you believe a minor has provided us data, contact us and we will delete it.

14. Changes to this policy

We may update this policy as the product evolves. When we make a material change we will update the date at the top and, where appropriate, notify you. Continuing to use Kleus after a change means you accept the updated policy.

15. Contact

Strade SMIP S.R.L., Strada Tâmpei 16D, Brașov, Romania. VAT RO54286700, Trade Register No. J8/1481/2023. support@kleus.ai.