Privacy Policy
This Privacy Policy (the "Privacy Policy" or "Policy") describes how Kales Tech LLC, a Colorado limited liability company ("Kales," "we," "our," or "us"), collects, uses, discloses, and otherwise processes information when you access or use the website located at https://kales.ai, our mobile applications, and any related products, applications, tools, software, features, and services that link to this Policy (collectively, the "Services").
We take the protection of your information seriously. By accessing or using the Services, you agree to the practices described in this Policy. If you do not agree to this Policy, please do not access or use the Services.
Undefined capitalized terms used in this Policy have the meanings set forth in our Terms of Service.
Google Sign-In Data
This section explains how Kales Tech LLC handles information obtained from Google when you choose to sign in to Kales with Google ("Google Sign-In data"). It applies to that information and information derived from it. If another provision of this Privacy Policy or our Terms of Service conflicts with this section, this section governs our handling of Google Sign-In data.
Information We Access and Why
We request only the openid, email, and profile permissions for Google Sign-In. We receive your Google account identifier, email address and email verification status, and, when available, your name and profile picture URL.
We use this information only to:
authenticate you and create or link your Kales account;
help secure account access;
provide account, support, and transaction-related communications; and
initialize your Kales profile with your name and profile picture, which you can change in account settings.
Profile details may be visible to other users through your public profile or content-sharing features. Google Sign-In does not give Kales access to your Google password, Gmail messages, Google Drive files, contacts, or calendar. We do not request offline access or retain Google access or refresh tokens for ongoing access to your Google account. Kales uses its own session credentials after sign-in.
Use Restrictions and AI
We do not sell Google Sign-In data, use it for advertising or remarketing, or transfer it to advertising platforms, data brokers, or information resellers. We do not use Google Sign-In data, including data derived from it, to develop, improve, or train AI or machine-learning models, or provide it to others for those purposes. General permissions elsewhere in our policies concerning marketing, AI training, or commercialization do not apply to Google Sign-In data.
Signing in with Google does not by itself make chats, prompts, uploads, or generated content you independently provide or create in Kales into information obtained from Google. Those materials remain subject to the other applicable provisions of our policies.
Sharing and Protection
We process Google Sign-In data using service providers that help operate Kales, such as hosting and storage providers, account and security services, support and email providers, and payment providers when needed for a transaction you request. We limit disclosure to what is needed for these functions and do not authorize these providers to use the data for their own advertising or model training. We may also disclose information when necessary to comply with law or protect against fraud and security incidents.
We use HTTPS for sign-in communications, validate Google identity tokens, and use technical and organizational access controls to help protect the data. Access is limited to authorized personnel and providers who need it for the purposes described above. No system can guarantee absolute security.
Retention, Revocation, and Deletion
We retain the Google account link and basic profile information while they are needed to provide and secure your Kales account. You can remove Kales access through your Google Account's third-party connections. Removing access prevents further authorized access through that connection; it does not automatically delete information already held in your Kales account.
You can request deletion of your Kales account and associated Google Sign-In data through Settings → Delete account, or contact support@kales.ai from your account email. We may verify your identity before processing a request. Account deletion removes the Google account-link record, resets the active account's personal profile, and disables account access. Limited records may be retained where necessary for legal obligations, transaction records, security, fraud prevention, or handling a deletion request. Those records remain subject to this section's use restrictions and are retained only while needed for those purposes.
Changes and Google Limited Use
If we propose to use Google Sign-In data in a new way, we will update these disclosures and obtain any required consent before doing so. Kales' use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements where applicable.
1. Information We Collect
When you access or otherwise use our Services, we may collect information from you. The types of information we collect depend on how you use the Services. We may collect information you provide directly to us, information we collect automatically, and information we obtain from other sources.
Information You Provide Directly to Us
We may collect information directly from you, including when you register for an account, use the Services, communicate with us, subscribe to communications, submit content, or otherwise interact with us. This information may include:
email address;
username or display name;
account credentials;
payment information, including information processed through our third-party payment providers;
your prompts, chats, messages, images, character data, and other content you submit through the Services ("User Content");
communications you send to us; and
any other information you choose to provide.
You are not required to provide all such information, but certain features of the Services may not be available without it.
Information We Collect Automatically
When you use the Services, we and our service providers may automatically collect certain information about your device and interactions with the Services, including:
browser type and settings;
device type and operating system;
IP address;
unique device identifiers;
pages viewed and features used;
dates and times of access;
referring and exit pages;
approximate location inferred from IP address;
crash data, diagnostics, and performance information; and
cookie, pixel, or similar tracking technology data.
We may use cookies, local storage, pixels, web beacons, software development kits, and similar technologies to operate the Services, remember preferences, analyze usage, improve performance, and help secure the Services.
Most browsers accept cookies by default, but you may be able to set your browser to remove or reject cookies. If you do so, some features of the Services may not function properly.
Information We Collect From Other Sources
We may receive information about you from other sources, including:
third-party login or authentication providers, if you choose to connect an external account;
payment processors;
analytics providers;
advertising or attribution partners, where applicable;
social media platforms, if you interact with us through them; and
other users, such as when they refer you to the Services.
We may combine information we receive from other sources with information we collect directly or automatically.
2. How We Use the Information We Collect
We may use the information we collect for any of the following purposes:
provide, operate, maintain, and administer the Services;
create and manage your account;
process transactions and provide customer support;
personalize your experience;
communicate with you, including service-related notices, updates, security alerts, and support messages;
send marketing or promotional communications, subject to applicable law;
analyze, improve, develop, and optimize the Services;
train, evaluate, moderate, and improve our artificial intelligence and machine learning systems;
monitor usage, troubleshoot issues, and maintain security;
detect, investigate, and prevent fraud, abuse, illegal activity, and violations of our Terms or policies;
comply with legal obligations and legal process; and
protect the rights, safety, property, and security of Kales, our users, and others.
We may also aggregate, anonymize, or de-identify information and use that information for any lawful purpose.
3. When We Disclose the Information We Collect
We may disclose information about you in the following circumstances:
Affiliates
We may disclose information to our affiliates or entities under common control with us.
Service Providers and Vendors
We may disclose information to contractors, service providers, and vendors who perform services on our behalf, such as hosting, storage, analytics, payments, customer support, moderation, fraud prevention, communications, and security services.
Legal Compliance and Protection
We may disclose information if we believe in good faith that such disclosure is necessary or appropriate to:
comply with applicable law, regulation, legal process, or governmental request;
enforce our Terms, policies, or agreements;
detect, investigate, or prevent fraud, abuse, security incidents, or illegal activity; or
protect the rights, property, safety, or security of Kales, our users, or others.
Business Transfers
We may disclose information in connection with, or during negotiations of, any merger, acquisition, financing, restructuring, sale of assets, bankruptcy, or other corporate transaction.
User Content and Public Features
If you use public or shared features of the Services, certain User Content and related account information may be visible to other users. For example, if you create or publish shared characters, images, profiles, or similar content, that information may be available to others through the Services.
With Your Direction or Consent
We may disclose information to third parties where you direct us to do so or otherwise consent.
4. Analytics and Advertising
We may use analytics providers and similar tools to understand how users interact with the Services, improve the Services, measure engagement, and troubleshoot issues.
We may also use advertising, attribution, or remarketing technologies now or in the future. These technologies may collect information about your use of the Services and other online services over time in order to help deliver, measure, or improve marketing and advertising.
You may be able to control certain cookies and advertising technologies through your browser settings, device settings, or third-party opt-out tools, where applicable.
5. Your Choices and Rights
You may have certain choices and rights regarding your information, depending on your jurisdiction.
Account Information
You may be able to access, update, or delete certain account information through your account settings.
Marketing Communications
You may opt out of marketing emails by following the unsubscribe instructions in those emails. Even if you opt out of marketing communications, we may still send you service-related or administrative communications.
Cookies and Similar Technologies
You may adjust your browser or device settings to limit certain cookies or tracking technologies, though some features may not function properly if you do so.
Privacy Rights
Depending on applicable law, you may have the right to request that we:
provide access to certain personal information we hold about you;
correct inaccurate information;
delete certain information;
restrict or object to certain processing;
withdraw consent where processing is based on consent;
receive a portable copy of certain information; or
opt out of certain processing, including targeted advertising or profiling, where applicable.
We may need to verify your identity before processing your request. Certain information may be exempt from such requests under applicable law. If you would like to exercise any applicable rights, you may contact us at support@kales.ai.
6. Regional Privacy Disclosures
European Economic Area, United Kingdom, and Switzerland
If you are located in the European Economic Area, United Kingdom, or Switzerland, applicable data protection laws may provide you with certain rights regarding your personal data. Where required by law, our legal bases for processing may include:
performance of a contract;
compliance with legal obligations;
our legitimate interests, where those interests are not overridden by your rights and freedoms; and
your consent, where required.
You may also have the right to lodge a complaint with your local data protection authority.
California
If you are a California resident, California law may provide you with rights regarding the collection, use, disclosure, and retention of your personal information, including rights to know, access, correct, delete, and limit certain uses, subject to applicable exceptions.
Nevada and Other U.S. States
Residents of certain U.S. states may have additional rights under applicable privacy laws. We will process qualifying requests in accordance with applicable law.
7. Children's Privacy
The Services are not intended for individuals under 18, and our Terms of Service prohibit use by anyone under 18. If we become aware that we have collected personal information from a person under 18 in violation of applicable law or our policies, we may delete such information and terminate the associated account.
8. Security
We use reasonable technical, administrative, and organizational measures designed to protect information from unauthorized access, loss, misuse, alteration, or disclosure. However, no method of transmission over the Internet and no method of electronic storage is completely secure, and we cannot guarantee absolute security.
9. Data Retention
We retain information for as long as reasonably necessary for the purposes described in this Policy, including to provide the Services, comply with legal obligations, resolve disputes, enforce agreements, and protect our business and users.
The length of time we retain information depends on the nature of the information, the purpose for which it was collected, and applicable legal requirements.
We may retain aggregated, anonymized, or de-identified data for longer periods or indefinitely, where permitted by law.
10. International Data Transfers
Our Services are global, and your information may be processed and stored in the United States and other countries outside your country of residence. These countries may have data protection laws that differ from those in your jurisdiction.
Where required by applicable law, we will use appropriate safeguards for international transfers of personal data.
By using the Services, you acknowledge that your information may be transferred to and processed in countries outside your country of residence, subject to applicable law.
11. Third-Party Websites and Services
The Services may contain links to third-party websites, tools, or services. We are not responsible for the privacy practices or content of those third parties. Their processing of your information is governed by their own terms and privacy policies.
12. Changes to this Policy
We may update this Policy from time to time to reflect changes in our practices, technology, legal requirements, or the Services. We will post the updated Policy and revise the "Last Modified" date above. Your continued use of the Services after the updated Policy becomes effective constitutes your acknowledgment of the updated Policy, to the extent permitted by law.
13. Contact Us
If you have questions about this Privacy Policy or our information practices, or if you wish to exercise any applicable privacy rights, please contact us at: