Privacy Policy

We collect personal information that you provide directly to us, information generated automatically through your use of the Platform, and in some cases information from third-party services you use to sign in. The categories of information we collect include:

• Account information — your email address, display name, profile picture, and, if you sign in via a third-party provider such as Google, the basic profile information made available by that provider.
• Content you submit — images you upload (for example, a reference photograph used to create an AI character), text prompts, scripts, and any other material you input into the Platform to initiate generation tasks.
• AI-Generated Outputs — the photos, videos, and other media produced by the Platform in response to your inputs, which are stored in your account until you delete them or close your account.
• Billing information — your subscription plan, credit balance, transaction history, and the last four digits of your payment card as reported by our payment processor. We do not store full card numbers or card security codes.
• Usage data and technical information — IP address, browser type and version, operating system, device identifiers, pages visited, features used, generation requests made, timestamps, error logs, and other diagnostic information generated automatically by your interaction with the Platform. This information is used for security, abuse prevention, and service improvement.

We only process your personal information when we have a legitimate reason to do so. Those reasons include: performing the contract we have with you (providing the Platform and generating content); complying with legal obligations; pursuing legitimate interests of our business that are not overridden by your interests or fundamental rights; and, where applicable, acting on your consent.

We do not sell your personal information to third parties. We do not use your personal information for automated individual decision-making that produces legal or similarly significant effects, except where necessary to detect and prevent fraud or abuse.

Where the General Data Protection Regulation (GDPR) or equivalent legislation applies, we process your personal information on the following lawful bases:

• Performance of a contract — processing necessary to provide you with the Platform, process your payments, manage your account, and deliver AI-Generated Outputs.
• Legitimate interests — processing necessary for our legitimate interests in securing the Platform, preventing fraud and abuse, improving service quality, and responding to support requests, provided those interests are not overridden by your fundamental rights and freedoms.
• Legal obligation — processing necessary to comply with applicable law, including tax record-keeping and responding to valid legal requests from authorities.
• Consent — where we rely on your consent (for example, for non-essential marketing communications), you may withdraw that consent at any time by contacting us or using the unsubscribe mechanism in our emails.

We use the personal information we collect for the following purposes:

• To provide, operate, maintain, and improve the Platform, including processing your generation requests and delivering outputs to your account.
• To authenticate your identity and manage your account, including session management and password-reset workflows.
• To process payments, manage subscriptions and credit balances, and maintain billing records.
• To detect and prevent fraud, abuse, security incidents, and violations of our Terms of Service and Acceptable Use Policy.
• To send you transactional emails, including payment receipts, subscription confirmations, account notices, and security alerts.
• To respond to your support requests and communicate with you about your account.
• To comply with applicable law, legal process, and regulatory requirements.
• To enforce our Terms of Service and protect the rights and safety of Klingobanana and our users.

We do not sell your personal information, use it for behavioural advertising, or share it with third parties for their own marketing purposes.

When you upload images or submit prompts to the Platform, that content is transmitted to our AI generation infrastructure, which relies on third-party AI model providers (such as fal.ai and OpenRouter). Those providers process your inputs transiently — on the fly — solely to produce the output you requested. They are contractually prohibited from retaining, using, or sharing your content beyond what is necessary to perform the generation task.

Klingobanana does not use your uploaded images or prompts to train AI models, and we do not authorise our AI model providers to do so. Your creative inputs remain yours.

Uploaded images and generated media are stored in your account on Google Cloud Storage until you choose to delete them or close your account, at which point they are deleted as described in Section 8.

We share personal information only with the following categories of third-party service providers, and only to the extent necessary to operate the Platform:

• Google Firebase / Google Cloud — provides authentication (Firebase Authentication), real-time database and Firestore document storage (Firebase/Cloud Firestore), file storage (Google Cloud Storage), and application hosting. Personal information stored and processed on this infrastructure includes your account data, credit balance, transaction records, uploaded images, and generated media.
• Stripe — our payment processor. Stripe receives the payment information you enter at checkout, your email address, and your subscription and transaction details. We do not receive or store full card numbers. Stripe operates under its own privacy policy and is certified to PCI DSS standards.
• AI model providers (fal.ai, OpenRouter, and others) — these providers receive your prompts and, where applicable, your uploaded images in order to perform generation tasks on your behalf. Data is transmitted securely and processed transiently. We do not permit these providers to use your data for model training or for any purpose other than generating the output you requested.
• Resend — our transactional email provider. Resend receives your email address and the content of transactional messages (such as payment receipts and account notices) in order to deliver those messages to you.

We may also disclose personal information if required to do so by law, in response to a valid legal request from a competent authority, or where we reasonably believe disclosure is necessary to protect the rights, property, or safety of Klingobanana, our users, or the public.

Our service providers may process personal information in countries outside the European Economic Area (EEA), including the United States. Whenever personal information is transferred outside the EEA, we ensure that appropriate safeguards are in place to protect your rights.

For transfers to countries not recognised by the European Commission as providing an adequate level of protection, we rely on the European Commission’s Standard Contractual Clauses (SCCs) or equivalent approved transfer mechanisms. By using the Platform you acknowledge that your information may be transferred to and processed in countries outside your own, subject to these safeguards.

If you would like more information about the international transfer safeguards applicable to your personal information, please contact us at contact@klingobanana.com.

Subject to applicable law, you have the following rights with respect to your personal information:

• Access — the right to request a copy of the personal information we hold about you.
• Rectification — the right to request correction of inaccurate or incomplete personal information.
• Erasure — the right to request deletion of your personal information where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent (where processing is based on consent).
• Restriction — the right to request that we restrict processing of your personal information in certain circumstances.
• Objection — the right to object to processing of your personal information where we rely on legitimate interests as our lawful basis.
• Portability — the right to receive your personal information in a structured, commonly used, machine-readable format.
• Withdrawal of consent — where we rely on your consent to process your information, the right to withdraw that consent at any time.

To exercise any of these rights, please contact us at contact@klingobanana.com. We will respond to your request within 30 days. When you request deletion of your account or personal data, we will delete or anonymise your personal information and stored media within 30 days, except where we are required to retain certain records for legal, regulatory, tax, or fraud-prevention purposes.

You also have the right to lodge a complaint with the supervisory authority for data protection in the EU member state where you reside, work, or where you believe an infringement of data protection law has occurred.

We use only essential cookies necessary for the Platform to function. Specifically, we use a session authentication cookie to keep you signed in. We do not use advertising trackers, third-party analytics cookies, or any non-essential cookies.

For full details of the cookies we use and how to manage them, see our Cookie Policy.

We take the security of your personal information seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction. These measures include: encryption of data in transit (HTTPS/TLS); server-side processing of all generation requests so that AI API credentials are never exposed to end-user browsers; authentication requirements on all API routes; access controls limiting production data access to authorised personnel; and regular security reviews.

While we endeavour to protect your personal information, no security measure is completely impenetrable, and we cannot guarantee absolute security. If you become aware of a security vulnerability or suspect that your account has been compromised, please notify us immediately at contact@klingobanana.com.

The Platform is intended solely for users who are 18 years of age or older. We do not knowingly collect personal information from persons under 18. If you are under 18, you must not use the Platform or provide us with any personal information.

If we become aware that we have inadvertently collected personal information from a person under 18, we will promptly delete that information and, where applicable, terminate the associated account. If you believe a minor has created an account on our Platform, please contact us at contact@klingobanana.com and we will investigate and take appropriate action.

We may update this Privacy Policy from time to time as the Platform evolves or as required by law. When we make material changes, we will notify you by email to the address associated with your account and/or by a prominent notice within the Platform before the changes take effect. The “Last updated” date at the top of this page always reflects the most current version.

Your continued use of the Platform after the effective date of any changes to this policy constitutes your acceptance of those changes. If you do not agree with the updated policy, you should stop using the Platform and may request deletion of your account as described in Section 8.

If you have any questions, concerns, or requests relating to this Privacy Policy or our handling of your personal information, please contact us at:

Klingobanana
Email: contact@klingobanana.com

See also our Terms of Service and Cookie Policy.