Privacy Policy.

1. What this covers.

This policy explains what information Kimcee collects when you create an account and build apps on our platform, how we use it, and the choices you have. It applies to account holders (app creators). End-users of apps built on Kimcee are covered by that app's own privacy policy, which the creator is responsible for.

2. Information we collect.

When you use the service, we collect:

• Account info — name, email, password (hashed), and the date you accepted our terms.
• App content — everything you create inside your apps: courses, lessons, checklists, trackers, daily content, resources, landing pages, themes, and settings.
• Billing info — processed by Stripe. We store a customer reference and subscription state, not your full card number.
• Usage data — pages visited inside the admin, AI-token usage, timestamps, IP address, browser type — used for operating the service and preventing abuse.
• Support communications — anything you send us when asking for help.

3. How we use it.

• To operate the service — host your content, run your app, deliver it to your users.
• To bill your subscription and process your purchases.
• To send you service emails — account changes, billing, security notices, and product updates relevant to your account.
• To provide support when you ask for it.
• To detect abuse, fraud, and security issues.
• To improve the service in aggregate — we look at patterns, not individual users.

We do not sell your personal information, and we do not use your app content or your customers' data to train AI models.

4. Who we share it with.

We share information only with service providers that help us run the platform:

• Stripe — payment processing for your subscription and for your customers' payments to you.
• Cloudflare — custom-domain SSL termination and edge delivery.
• Anthropic (Claude API) — when you use our AI assistants, the prompt plus the relevant context from your app is sent to Anthropic to generate a response. Anthropic is contractually prohibited from using that data to train its models.
• Email and hosting providers — for service email delivery and infrastructure.

We may disclose information if required by law, subpoena, or valid legal process, or if we believe it's necessary to protect the rights, property, or safety of our users or the public.

5. Your customers' data.

When you build an app, people sign up as your customers. Their accounts, progress, and activity are content you control. You are the data controller for those users; we are a data processor acting on your behalf. You're responsible for having your own privacy policy and honoring your users' rights under applicable law (GDPR, CCPA, etc.).

6. Cookies.

We use cookies that are strictly necessary to keep you logged in and to remember small preferences (dark mode, sidebar state). We don't use third-party advertising cookies on the admin side of the service.

7. Data retention.

We keep your data for as long as your account is open. If you close your account, we delete or anonymize personal data within a reasonable period, except where we're required to retain it for legal, tax, or fraud-prevention reasons. Back-ups roll off on a normal schedule.

8. Security.

We use standard industry measures — encryption in transit (HTTPS), hashed passwords, access controls, and segregated environments — to protect your data. No system is perfectly secure, so we can't guarantee absolute security, but we treat breaches seriously and will notify you if one affects you.

9. Your choices.

• You can update your name, email, and password at any time from your account settings.
• You can export your app content before closing your account.
• You can request deletion of your account by contacting us.
• If you're in a jurisdiction with specific privacy rights (EU, UK, California, etc.), you can request access, correction, deletion, or portability of your personal information.

10. Children.

Kimcee is not intended for children under 13, and we don't knowingly collect personal information from them. If you think a child has given us information, contact us and we'll remove it.

11. International users.

Our servers are located in the United States. If you use the service from outside the U.S., you understand your information will be transferred to and processed in the U.S., which may have different data-protection rules than your own country.

12. Changes.

We may update this policy from time to time. We'll post the new version here with an updated "Last updated" date, and we'll notify you by email if the change is material.

13. Contact.

Questions about this policy or your data? Email us.