Privacy Policy

Information you provide:

• Account details — your email address, and any name, username, or profile information you add. We use a third-party authentication provider (Supabase) to sign you in.
• Your content — the songs, audio, images, reference photos, characters, prompts, and the videos and frames you generate.
• Payment information — handled by our payment processor (Stripe). We receive limited details such as your plan, transaction status, and the last four digits of your card; we do not store your full card number.
• Communications — messages you send us (e.g. support emails).

Information we collect automatically: device and browser information, IP address, approximate location, pages viewed, and actions taken in the Service, collected via cookies and similar technologies and our analytics and error-monitoring tools.

• To provide, operate, and secure the Service and your account;
• To generate your videos — which requires sending your content to AI providers (see §3);
• To process payments, credits, and subscriptions;
• To maintain safety and enforce our Terms (including content moderation);
• To analyze and improve the Service and fix bugs;
• To communicate with you about your account, updates, and support;
• To comply with legal obligations.

To turn your prompts, songs, and images into videos, we send the relevant content to third-party AI model providers that perform the generation on our behalf. We share only what’s needed to produce your result. These providers are contractually limited to processing your content for that purpose. We do not use your content to train Koe’s own models without your consent or a clear opt-out, and we do not sell your content.

We share information with vendors who help us run the Service, under agreements that require them to protect it and use it only for us. The categories of providers we currently rely on include:

• Cloud hosting & infrastructure — to run our apps and servers (e.g. Vercel, Railway).
• Database & authentication — to store account data and sign you in (Supabase).
• File storage & content delivery — to store and serve your media (Cloudflare R2 and CDN).
• Payments — to process purchases (Stripe).
• AI model providers — to generate frames, videos, audio, and assistant responses (e.g. OpenAI, Anthropic, Google, fal.ai, Lightricks/LTX, ElevenLabs).
• Analytics & error monitoring — to understand product usage and diagnose issues (PostHog, Sentry).
• Email & communications — to send account and support messages.

We may also disclose information (a) to comply with the law or valid legal requests, (b) to protect the rights, safety, and security of Koe, our users, or the public, and (c) in connection with a merger, acquisition, or sale of assets (with notice where required). We do not sell your personal information.

If you publish content to the community feed, your public profile, leaderboards, or via a share link, that content — and the profile information shown alongside it — becomes visible to others and may be indexed by search engines. Don’t include anything you want to keep private in content you publish.

We use cookies and similar technologies to keep you signed in, remember preferences, secure the Service, and measure usage. Our analytics provider (PostHog) helps us understand how features are used. You can control cookies through your browser settings; some features may not work without them.

We keep your information for as long as your account is active and as needed to provide the Service, then for a limited period afterward to comply with legal obligations, resolve disputes, and enforce our agreements. When you delete content or your account, we delete or de-identify the associated personal data within a reasonable period, subject to routine backups and legal requirements.

We use technical and organizational measures to protect your information, including encryption in transit and access controls. No method of transmission or storage is completely secure, so we can’t guarantee absolute security, but we work to protect your data and to notify you of significant incidents where required.

Depending on where you live (for example under the EU/UK GDPR or California’s CCPA/CPRA), you may have the right to access, correct, delete, or export your personal information, to object to or restrict certain processing, and to withdraw consent. You can:

• edit your profile and content in your settings;
• delete your account at any time from your settings, which removes your personal data as described above;
• contact us at [email protected] to exercise any of these rights.

We will not discriminate against you for exercising your rights, and we’ll respond within the timeframe required by applicable law.

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.

We and our providers may process your information in countries other than where you live, including the United States. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for these transfers.

We may update this Privacy Policy from time to time. If we make material changes, we’ll update the “Last updated” date and, where appropriate, notify you.

Questions about your privacy or this policy? Email [email protected].