What we collect
To run your account: your email address, your name, a hashed password, the devices you sign in from, and the plans and credits attached to your account.
Your phone number, which you give us when you register, with the country it belongs to. We use it to reach you about your account or a payment — a failed charge, a refund, a problem only a call or a message can sort out — and for nothing else: not for marketing, and never shared with anyone for theirs.
To bill you: the fact and amount of each payment and the provider that processed it. We never see or store card numbers; Polar and Midtrans hold payment details under their own policies.
To serve model requests through our gateway: which model served each request, how many tokens it used, when, and under which data policy. We keep this so your usage ring and receipts are accurate and so we can reconcile provider costs. We do not keep the content of prompts or completions on the gateway beyond the request itself.
On the public website: no accounts, no cookies for tracking, and no analytics that identify you. Sign-in cookies exist only on account.klarenai.com.
How AI processes your content
Klaren AI products work by sending your content to AI models. When you use a Klaren AI-provided model route, the prompt and whatever it needs from your files, code, documents or messages is transmitted to the model provider that serves that route, which generates the response you receive. This is the core of what the products do, and it cannot happen without that transmission.
Which provider receives it depends on the model you or the product selected, and every model's provider and data policy will be published on our public rate card before launch. Your data policy setting decides which routes a project may use at all: private mode restricts routing to providers we have verified do not train on inputs, and a provider whose policy we have not verified counts as training until it is verified.
We do not train models on your content, and we do not permit providers we route to under private mode to do so. AI output can be wrong, and you remain responsible for reviewing it before you rely on it or ship it.
Two paths send us nothing at all. A model running locally on your own machine transmits nothing to us or to any provider. Your own provider key connects your machine directly to that provider, so the content never passes through Klaren AI.
The companies that process data for us
We use a small set of processors, each handling data only on our instructions and only for the purpose listed:
Cloudflare — hosting, content delivery and network protection for every Klaren AI site and service. Neon — the managed PostgreSQL database holding account, subscription, credit and usage records. Resend — transactional email, including verification, password reset and billing notices. Polar Software Inc. — card payments as merchant of record, which is also who holds card details. PT Midtrans — payment processing for QRIS and other Indonesian methods. OpenRouter — routing model requests to the providers that serve them.
Beyond these, the AI provider serving each model route receives the content of that request, as described in the section above. The list will be published on our rate card before launch, and it changes when the model catalogue changes.
We do not use advertising networks, and we run no third-party analytics or tracking scripts on the public website.
What we do not do
We do not train models on your content. In private mode we send it only to providers we have verified do not train on inputs. We do not sell personal data. We do not read your local files; the desktop products run on your machine and send to the gateway only what a request needs.
Where it lives and who sees it
Account, billing and usage records are stored in a managed PostgreSQL database and served through Cloudflare. Transactional email is sent through Resend. Model requests are routed to the provider named for each model, which will be listed on our rate card before launch. Each of these processors handles data only on our instructions.
We disclose personal data only when the law requires it or to protect the rights and safety of users and the public.
Your rights, your content and deletion
You can export everything we hold about you, including your credit ledger, from your account at any time. You can ask us to erase your account: we remove your email, phone number, sign-in identity, sessions, device names and tokens, and pseudonymise the financial records that tax law requires us to retain. Erasure is not possible while a subscription is still billable, because we could not then cancel it for you; cancel first, then erase.
Content you upload or generate is yours and you may delete it. In the desktop products your files, repositories and sessions live on your own machine, so deleting them there deletes them; we hold no copy. Where a Klaren AI service does store content you supplied — an attachment sent through a hosted product, a file placed in an asset store — deleting it in the product removes it from our active systems, and it is purged from backups within 30 days. Ask us at privacy@klarenai.com if you want that confirmed in writing.
Where you are covered by the GDPR, the UK GDPR, the CCPA or Indonesia's Personal Data Protection Law, you have the rights those laws give you, and the export and erasure tools above are how we honour them. Anything they do not cover, write to privacy@klarenai.com.
Retention and changes
Account data is kept while your account exists. Usage and financial records are retained for the period tax and accounting law requires, then deleted. Email verification and password-reset links expire within hours.
Changes to this policy are dated at the top of this page and announced by email when they are material.