Privacy Policy

1. Who we are

Klea is operated from Lebanon. In this policy “Klea”, “we” and “us” mean the business that runs Klea, including its owner and the people who build and maintain it for her. You can reach us at our contact email (listed here before launch).

2. What we collect

• Your account: your name, email address and password (stored only in scrambled, one-way form by our sign-in provider — nobody can read it).
• Your profile: your phone number, an additional email if you add one, Instagram link, profile photo, and the business information you add (such as your offer, mission and visual identity).
• What you create: posts, comments, likes and poll votes; chat messages, voice notes, replies and emoji reactions; pages, notes and to-do lists; Data Collection tables and their rows; content plans; calendar events and their notes; files and images you upload. The microphone is used only while you record a voice note, and only the recording you send is kept.
• Your membership: your role, your member category, when your access started and ends, and whether your account is waiting, active or locked, and whether an admin marked your access or a course as paid.
• Activity: whether you are online and when you were last active, which notifications you have read, and when you last read each chat.
• Courses: which course videos you watch, where you stopped in each one, and what you have finished.
• Notification settings: the notifications you have switched on or off and your quiet hours. When notifications on your phone’s lock screen are switched on, also a device code from Apple or Google that lets us deliver them to your phone. When you turn on notifications for a device on the website (Settings → Notifications → This device), also that browser’s notification address and keys, and the browser type, until you turn it off.
• Connected calendars: if you choose to connect Google Calendar, the events needed to keep Klea and your calendar in step, and a securely stored access key you can disconnect at any time.
• Technical information: your IP address, device and browser type, and basic logs, used to keep Klea working and secure.
• Payments (in future): if paid plans are introduced, payments will be handled by the App Store, Google Play or a payment provider. We will receive confirmation of your plan, never your full card details.

3. Why we use it

• to run Klea: your account, community, chats, calendar, content tools and courses;
• to decide and manage who has access, in which category, and for how long;
• to send you notifications and, where needed, emails about your account and access;
• to send the reminders Klea offers — events starting soon, content you planned, and payment dates from the Data Collection tables you or your admins fill in;
• to protect course videos: your name is shown on a video while you watch it, and the Klea app hides a video while your screen is being recorded. Nothing from your screen is recorded or saved by Klea;
• to keep Klea safe: preventing abuse, fraud, spam and unauthorised access;
• to give support, fix problems and improve Klea;
• to meet our legal obligations and protect our rights.

We do not sell your personal information, and we do not use it for advertising.

4. Who can see your information

• Other members see what you share in the community: your name, photo and profile, your posts, comments (which can @mention you by name, and you are told), likes and poll votes, and messages, voice notes, replies and reactions in chats you are part of. Everyone in the community also sees a green dot on your picture while you are online (not when you were last active).
• Admins of your workspace run Klea for you. They can see members’ profiles and business information, membership and access details, whether members are online and when they were last active, course progress, whether messages have been delivered and read, and — to support you — members’ content plans, pages, Data Collection and other working areas inside Klea. Admins may also keep client notes about a member; notes tagged with a member are shown to all admins on that member’s profile, never to members.
• The Klea team — the owner, admins and the people who build and maintain Klea — can access account data, messages and content when needed for support, security, maintenance, and to investigate misuse.
• Service providers who host and run Klea for us, only to provide their service: Supabase (database, sign-in and file storage), Vercel (website hosting), Cloudflare (storage for course videos and exercises), Expo (app delivery and updates), Resend (email), Google (only if you connect Google Calendar), and Apple and Google to deliver notifications to your phone once that is switched on (on the website, your browser’s own notification service — Apple, Google, Mozilla or Microsoft). If paid plans are introduced, Apple, Google or a payment provider will process payments.
• When the law requires it, or to protect the safety, rights or property of Klea, its users or others.

Some of these providers store data outside Lebanon. We use reputable providers with appropriate safeguards for that data.

5. How long we keep it

• Your information is kept while you have an account.
• Things you delete go to Trash and are deleted for good after 30 days. Courses and course items that admins delete stay in Trash for 90 days, unless an admin deletes them for good sooner.
• Community posts and chat messages (and a deleted voice note’s recording) are deleted straight away. Files that are no longer used — a deleted post’s attachments, a profile photo you replaced, the recordings of a deleted chat — are removed from storage within about a day.
• Course video files are kept in protected storage even after a video is deleted, so a course can’t be lost by accident; once deleted, nobody can watch them.
• When you delete your account (Settings → Delete my account), your personal information is deleted. Things you posted in shared spaces may stay without your name where others rely on them.
• If an admin declines your request to join, your account is deleted completely. We keep only a one-way fingerprint of your email address (not the address itself) and the date, so the same email can’t sign up again for 7 days (unless an admin invites it again) and admins can see it was declined before.
• Backups and logs held by our providers are removed on their regular schedule.

6. Security

Your data is protected with encrypted connections, access rules enforced by the database itself, private file storage, and limits on repeated attempts to sign in or guess codes and on how much can be sent in a short time (counted by account and by IP address, and cleared within a day). Uploads are limited to safe file kinds and sizes, and photos are resized before they are stored. Course videos are stored encrypted and play only through short-lived links made for the member watching. No service can promise perfect security; if you think your account has been misused, contact us straight away.

7. Your choices and rights

• See and correct your profile at any time in Klea.
• Delete your account at any time in Settings.
• Disconnect Google Calendar at any time.
• Ask us for a copy of your information, or ask questions about this policy, at our contact email (listed here before launch). We may need to confirm it’s you before acting.

We handle personal information in line with the laws that apply to us, including Lebanon’s Law No. 81 of 2018 on Electronic Transactions and Personal Data.

8. Age

Klea is for people aged 18 and over. Everyone confirms they are 18 or older when creating an account, and we keep the date they confirmed it. We do not knowingly collect information from anyone younger; if we learn we have, we delete it.

9. Changes

We may update this policy. If the changes are significant we will tell you in Klea. Continuing to use Klea after an update means you accept it.

10. Contact

Klea, Lebanon — our contact email (listed here before launch).