Legal
Privacy Policy
How Kloy collects, uses, and protects your information across the macOS app and website.
Last updated: July 31, 2026
This Privacy Policy describes how Strum Technology Corp, a Delaware corporation doing business as Kloy ("we", "us", or "our"), collects, uses, and shares information when you use the Kloy macOS app, the website at kloyapp.com, and related services (together, the "Service").
Kloy is designed to be local-first: most activity data stays on your Mac. This policy explains what stays local, what optionally leaves your device for AI classification or sharing, and what the website collects.
1. Overview of Kloy's architecture
| Surface | What happens |
|---|---|
| macOS app (default) | Tracks which apps and windows are active; stores activity and reports in a local database under ~/.kloy/ |
| Screen Analysis (optional, off by default) | May capture the focused window, run on-device OCR, mask personal data, then send a classification request |
| AI classification | Sends structured metadata (and, if Screen Analysis is on, masked OCR text) to an AI provider via Kloy's API proxy |
| PDF export | Generated entirely on your Mac; nothing is uploaded |
| Published report link | Only if you choose Share — a report snapshot is stored on our infrastructure and readable by anyone with the link |
| Website / waitlist | Email (and optional name) for early access; optional Google Analytics |
We do not operate a traditional cloud account for your activity history. There is no Kloy cloud sync of your full activity log.
2. Information processed on your device
2.1 Activity metadata (always, while tracking)
While tracking is on, the app records locally:
- App name and window title of the focused application
- Active browser URL when available
- Time spent and derived focus / relevance scores
- Project and task definitions you create (name, criteria, status)
- Generated report markdown and activity tables
This data is stored in a local SQLite database at ~/.kloy/kloy.db (and related files under ~/.kloy/). It is not encrypted at rest by Kloy. Deleting the app does not always remove this folder; you can delete ~/.kloy/ yourself to wipe local data.
2.2 Screen Analysis (opt-in; off by default)
Screen Analysis is disabled by default. When off:
- The app does not take screenshots
- The app does not request Screen Recording permission for capture
- Classification uses app name, window title, and browser URL only (plus the other non-OCR fields listed in §3)
When you turn Screen Analysis on, the app may:
- Capture the focused window (macOS Screen Recording permission required)
- Run on-device OCR using Apple's Vision framework
- Delete the sharp screenshot immediately after OCR
- Optionally keep a privacy-blurred JPEG preview under
~/.kloy/screenshots/for your own review (default on; you can clear this cache in Settings) - Apply PII masking to OCR text before any network call or local persistence of OCR preview text
Capture is typically triggered on a timer (default about every 15 seconds while tracking) and when the focused window has been stable for a short period. Exact intervals are configurable in Settings.
Blurred preview screenshots are not uploaded. There is currently no automatic expiry for the local screenshot cache; use Settings → clear screen cache, or delete files under ~/.kloy/screenshots/.
2.3 Input telemetry (local metrics, not keystroke logging)
For classification context, the app may measure:
- Keyboard and mouse idle time (seconds since last input)
- Coarse mouse movement distance / click presence
It does not record the content of keystrokes. Key identity is not sent; local sampling may store a placeholder rather than actual keys.
2.4 Settings
App and AI preference files are stored locally on your Mac (for example under ~/.kloy/). We do not claim that local settings files are encrypted.
App settings such as capture interval, excluded apps, and Screen Analysis on/off are also stored locally. Classification uses Kloy AI (managed); you do not paste a third-party provider API key into the app.
3. Information sent for AI classification
Classification and related AI features (for example report narrative generation and the sensitive-surface gate) call Kloy's API proxy, which forwards the request to an AI provider. We do not store the full prompt or raw OCR text as a permanent server-side archive. We may log usage metadata (provider, model, token counts, purpose, mode, success/failure) for billing, abuse prevention, and reliability.
3.1 What a typical classification request may include
Depending on your settings and whether Screen Analysis is enabled, a classification call may include:
- App name and window title
- Active browser URL (when available)
- Your project and task text (so activity can be matched to the project you selected)
- A short recent activity flow (a small number of recent labeled activities)
- Input telemetry as described in §2.3 (idle times / click signals — not typed content)
- If Screen Analysis is on: masked OCR text (truncated for the request; on the order of a few thousand characters)
The result returned to the app (category, relevance score, short reason, project match, etc.) is stored locally in your database.
3.2 PII masking (before anything leaves for OCR-based classification)
When Screen Analysis produces OCR text, the app redacts it on your Mac before the text is:
- Sent to an AI provider
- Written to the offline retry queue
- Stored in the local capture database as OCR preview text
Redaction includes (non-exhaustive):
| Pattern | Replacement |
|---|---|
| Credit / debit card numbers (Luhn-checked) | [CARD] |
| Korean resident registration numbers (heuristic) | [RRN] |
| Email addresses | [EMAIL] |
| Phone numbers (KR mobile / international-style) | [PHONE] |
| Lines with password / OTP / similar keywords (EN/KR) | [REDACTED] (whole line) |
Important limitation: Pattern-based masking is deliberately conservative and is not 100%. Unusual formats or sensitive prose without a clear pattern can pass through. That is why the sensitive-surface gate (§3.3) runs before capture when Screen Analysis is on.
3.3 Sensitive-surface gate (before screenshot)
When Screen Analysis is on, before taking a screenshot the app applies two layers:
- Your exclusion list — apps (or title substrings) you add in Settings. Checked first; stored only on your device.
- AI gate — a separate call that sends only the app name and window title (no OCR, no screenshot) to classify whether the surface looks like banking, password manager, payment/checkout, identity, medical, or other sensitive UI. If marked sensitive, capture/OCR/classification for that moment are skipped; a local "Protected app" activity row may still be recorded so the timeline is honest.
If the AI gate times out or fails, the app currently continues with capture and relies on PII masking (fail-open). Offline conditions may skip the gate at capture time and re-check when the offline queue drains.
3.4 Kloy AI (managed)
All classification, sensitive-surface gating, and report narratives use Kloy AI: requests go through our API proxy using server-configured provider keys. You do not paste an OpenAI, Anthropic, or xAI key into the app.
The AI provider we route to processes the prompt content under that provider's terms. Our proxy may record usage metadata as noted above. We do not store your provider API keys (none are collected from you for this purpose).
Report generation uses the same AI path: local activity is summarized into a prompt; the model returns narrative text; the time-allocation numbers are computed from local logs, not invented by the model.
4. Published public report links
If you choose Share in the app:
- A snapshot of that report (goal, markdown narrative, activity table, focus/active seconds, period, app version, publish time) is stored in our Cloudflare Workers KV storage
- Anyone with the URL can view it without signing in
- The page is intended as a frozen, read-only snapshot (content is not editable after publish)
- Screenshots and raw OCR text are not included in the published snapshot
Unpublish: You can remove the public snapshot from our servers using Unpublish in the app (while the unpublish token is still stored locally). After unpublish, the link returns not found. We cannot erase copies that third parties already downloaded, screenshotted, or archived before you unpublished.
Older reports published before unpublish support may lack a local unpublish token; contact us if you need help removing one of those.
Deleting a report from the app's local list does not by itself unpublish the cloud snapshot — use Unpublish first if you want the link to stop working.
5. Website and waitlist
When you use kloyapp.com:
- Waitlist: We collect your email address and, if you provide them, a name and a short source tag. Entries are stored in Cloudflare Workers KV. We use this to contact you about early access and product updates.
- Contact: If you email us, we process the contents of your message to respond.
- Auto-update checks: The macOS app may periodically fetch a public release manifest (for example
/release/latest.json). That request is a normal HTTPS download of version metadata; the app does not attach your activity data to it. Network providers and our host may see standard connection metadata (IP address, user agent).
6. Payments and subscriptions
Marketing pages may describe Personal pricing or Kloy AI plan pricing. Live payment processing is not integrated in the current product. If and when we introduce paid subscriptions or in-app purchases, payment card data will be handled by a third-party payment processor; we will update this policy and collect only what is needed to provide the paid Service (for example account email and subscription status).
7. Analytics and cookies
The website may load Google Analytics 4 when configured (NEXT_PUBLIC_GA_MEASUREMENT_ID). GA may set cookies and collect usage data (pages viewed, approximate location derived by Google, device/browser information, and custom events such as waitlist signup or download clicks) under Google's terms.
We do not currently show a separate cookie-consent banner. You can block or clear cookies in your browser settings. The macOS app does not embed Google Analytics or similar third-party product analytics / crash SDKs.
8. How we use information
We use information to:
- Provide and operate the Service (including AI proxying and published report hosting)
- Communicate about the waitlist, updates, and support
- Improve reliability, prevent abuse, and understand aggregate website usage
- Comply with law and enforce our Terms
- Process payments if/when paid plans ship
9. Information sharing
We may share information with:
- AI providers (for example OpenAI, Anthropic, xAI) when you use classification, gates, or report generation — they receive the prompt content described in §3
- Cloudflare (and similar infrastructure) for website hosting, Workers, KV storage of waitlist and published reports, and CDN delivery
- Payment processors if/when paid plans ship
- Analytics providers (Google Analytics) for the website when enabled
- Professional advisors or authorities when required by law or to protect rights and safety
We do not sell your personal information.
We do not sell or rent your activity logs. Published report links are public by design for anyone who has the URL.
10. Data retention
| Data | Retention |
|---|---|
| Local app database, settings, screenshot cache | Until you delete them or remove ~/.kloy/ |
| Session "what was sent to AI" preview in the app | In-memory only; cleared when the app restarts |
| Published report snapshots | Until you Unpublish (or we remove for legal/security reasons) |
| Waitlist entries | Until you ask us to delete them or we no longer need them for the waitlist purpose |
| Usage metadata on our API | Retained as needed for billing, abuse prevention, and operations |
| Website analytics | Per Google Analytics retention settings |
11. Your choices and rights
You can:
- Turn Screen Analysis off (default)
- Exclude apps in Settings
- Clear the local screenshot cache
- Delete individual local reports
- Unpublish a shared link from the app
- Delete
~/.kloy/to remove local data - Opt out of marketing emails we send (when applicable)
- Request access, correction, or deletion of personal data we hold on our servers (waitlist, support correspondence, published reports you cannot unpublish yourself) by emailing privacy@kloyapp.com
Depending on your location (including California and the EEA/UK), you may have additional rights such as access, deletion, portability, restriction, objection, and withdrawal of consent. We will not discriminate against you for exercising privacy rights.
12. International transfers
We and our processors may process information in the United States and other countries. Where required, we use appropriate safeguards for cross-border transfers.
13. Children's privacy
The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will take appropriate steps to delete it.
14. Security
We use reasonable administrative and technical measures appropriate to a local-first product and Cloudflare-hosted website/API (HTTPS in transit, access controls on infrastructure, capability tokens for unpublish). No method of transmission or storage is perfectly secure. Local files on your Mac are protected by your device's own security (disk encryption, account login); Kloy does not add a separate full-disk encryption layer for ~/.kloy/.
15. Changes to this policy
We may update this Privacy Policy by posting a new version on this page and updating the "Last updated" date. Material changes may be communicated by email or in-product notice when appropriate. Continued use of the Service after an update constitutes acceptance of the revised policy where permitted by law.
16. Contact us
- Email: privacy@kloyapp.com
- Website: https://kloyapp.com
- Company: Strum Technology Corp
- Address: 1875 Mission St Ste 103 #783, San Francisco, CA 94103
17. California privacy rights (CCPA/CPRA)
If you are a California resident, you may have the right to know what personal information we collect, request deletion, correct inaccurate information, and opt out of "sale" or "sharing" of personal information as those terms are defined by California law. We do not sell personal information. To exercise rights, contact privacy@kloyapp.com. You may designate an authorized agent as permitted by law.
18. GDPR / UK GDPR (EEA and UK)
If we process your personal data subject to GDPR/UK GDPR, our legal bases may include contract (providing the Service you request), legitimate interests (securing and improving the Service, understanding site usage), consent (where required, for example certain cookies or marketing), and legal obligation. You may have rights of access, rectification, erasure, restriction, portability, objection, and complaint to a supervisory authority. Contact privacy@kloyapp.com.
19. Cookies
Where Google Analytics is enabled, cookies or similar technologies may be used to measure site traffic and events. You can control cookies through your browser. Essential hosting/CDN behaviors may still occur without analytics cookies.