Privacy Policy

Last updated: 18 June 2026

This Privacy Policy describes how Kira Art Pte. Ltd., a private limited company incorporated in Singapore ("Kira", "we", "us", or "our"), collects, uses, shares, and protects information about you when you use kira.art and related products and services (the "Service").

This Privacy Policy is part of, and should be read together with, our Terms of Use. Defined terms used here have the meaning given to them in the Terms of Use.

By using the Service, you acknowledge that you have read this Privacy Policy and understand how we handle your information.

This Privacy Policy applies to information we collect from and about:

• Visitors to kira.art and any subdomain we operate;

• Registered users of the Service (free, Basic, Pro, and Max tiers);

• Anyone who contacts us by email or another channel.

This Privacy Policy does not cover the information practices of third parties whose services are linked from, or integrated with, Kira (for example, social networks where you publish creations) — those services are governed by their own privacy policies.

• Account information. Kira accounts are created by signing in with Google. When you sign in, we receive from Google your email address, name, profile picture (where available), and a unique Google account identifier. You may update your display name within the Service.

• Payment information. When you subscribe to a paid plan, we collect billing details necessary to process your payment. Card numbers and full payment credentials are handled directly by our payment processor (Stripe) and are not stored on Kira's servers. We retain only billing metadata such as the last 4 digits of the card, billing country, and transaction history, together with a Stripe customer identifier that links your Kira account to your Stripe customer record.

• Content you upload, generate, or publish. This includes any images, videos, audio, prompts, text, or other materials you upload to or input into the Service, as well as the Outputs generated for you by the Service.

• Communications. When you contact us at support@kira.art or via any in-product feedback channel, we collect the contents of your message and any attachments.

When you use the Service, our service providers and we automatically collect:

• Usage data. Pages and features you view, actions you take, generations you initiate, credits you consume, and the date and time of these events.

• Device and network information. Your IP address, approximate geolocation (derived from IP), browser type and version, operating system, device identifiers, and language preferences.

• Performance and diagnostic data. Error logs, latency measurements, and similar information about the technical health of your sessions.

• Google. When you sign in via Google, we receive the information described in Section 2.1 above. We do not receive your Google password.

• Stripe. Stripe may share with us information necessary for billing, fraud prevention, and dispute handling.

We use the information described above to:

• Provide and operate the Service — process your generations, route requests to underlying AI models, manage your account, deliver Outputs to you, and store your history.

• Process payments and manage subscriptions — including renewals, refunds, and tax handling.

• Communicate with you — including transactional emails (purchase confirmations, password resets, important service notices), product updates you have asked to receive, and responses to support inquiries.

• Improve the Service — analyse usage patterns in aggregate to fix bugs, optimise performance, and prioritise new features.

• Detect and prevent abuse — including violations of our Terms of Use, illegal activity, fraud, and abuse of the platform.

• Comply with legal obligations — including responding to lawful requests from authorities and meeting our tax, accounting, and regulatory duties.

We do not sell your personal information for monetary compensation, and we do not use your prompts, uploads, or Outputs to train our own AI models. (See Section 6 for how third-party AI providers handle data.)

We share information only as described below.

When you submit a prompt or upload content for generation, your prompt and any uploaded content are transmitted to the underlying third-party AI model providers we use to fulfil your request. These currently include, among others:

• OpenAI (for select image and language models);

• ByteDance (Seedream image models);

• Alibaba (Wan video models);

• and other AI vendors we may add or substitute from time to time.

Each provider processes the data under its own privacy policy and terms. We use commercially reasonable efforts to select providers that meet appropriate data-protection standards.

We rely on a small number of providers to operate the Service. Each is bound to use your information only as needed to provide their service to us:

• Category: Hosting & CDN · Provider: Cloudflare · Purpose: Edge delivery, DDoS protection

• Category: Database & storage · Provider: Supabase · Purpose: User account data, generation history

• Category: Payments · Provider: Stripe (Singapore + US) · Purpose: Subscriptions, charges, invoices

• Category: Transactional email · Provider: Resend · Purpose: Account, billing, and product notifications

• Category: Product analytics · Provider: PostHog · Purpose: Aggregate usage analytics

• Category: Error monitoring · Provider: Dash0 · Purpose: Crash logs, exception tracking

• Category: Video worker queue · Provider: Trigger.dev · Purpose: Background generation jobs

We may share information with law enforcement, regulators, or other authorities if we believe in good faith that disclosure is necessary to (a) comply with a lawful request or legal obligation, (b) enforce our Terms of Use, (c) protect the rights, safety, or property of Kira, our users, or the public, or (d) investigate suspected fraud, abuse, or illegal activity.

In particular, we report suspected child sexual abuse material (CSAM) to the appropriate authorities and preserve evidence to the extent required by law.

If Kira is involved in a merger, acquisition, financing, restructuring, sale of assets, or insolvency proceeding, your information may be transferred as part of that transaction. We will notify you of any such transfer and any choices you may have.

We may share information at your direction — for example, when you publish a creation to a public surface within the Service or use a Kira-branded hashtag on a third-party platform. See Section 4.4 of the Terms of Use.

If you choose to publish a creation to a public surface within the Service (such as the in-app Discover feed or the public Gallery), or share a creation publicly using a Kira-branded hashtag (for example, #shotwithkira), the creation, together with any username or social handle associated with it, becomes publicly visible. Other users, search engines, and third parties may view, copy, or share that content. Do not publish anything to a public surface that you do not wish to be public.

When you use the Service to generate content:

• Your prompts and uploads are transmitted to one or more third-party AI model providers (see Section 4.1) for the sole purpose of fulfilling your request.

• Kira does not train any AI models on your prompts, uploads, or Outputs.

• We cannot guarantee that third-party providers will not use your data for their own model improvement. Each provider's data use is governed by its own privacy policy. Where a provider offers an "API / no-train" option, we use it; where they do not, we select providers based on a balance of quality, cost, and reasonable privacy practices.

• We retain prompts, Outputs, and associated metadata to operate the Service (for example, to show you your history and to enforce our Terms of Use).

We use cookies and similar technologies (such as local storage and pixels) to:

• keep you signed in to your account;

• remember your preferences;

• measure how the Service is used, in aggregate, via our product analytics provider;

• detect and prevent fraud and abuse.

You can control cookies through your browser settings. Disabling certain cookies may degrade your experience or prevent some features from functioning.

We retain your information for as long as we need it to provide the Service and meet legal obligations.

• Account information and content. When you close your account, we delete or anonymise your personal information and content within 30 days, except where we are legally required to retain it.

• Payment records. Retained for the period required by applicable tax, accounting, and audit laws.

• Logs, telemetry and analytics. Retained for as long as necessary to operate, secure, and improve the Service.

The Service is operated from Singapore. Some of our providers (see Section 4) operate in other countries, including the United States, the European Union, and other regions. As a result, your information may be processed and stored in countries other than your own. By using the Service, you understand that your information may be transferred to and processed in those countries.

Depending on where you live, you may have the following rights with respect to your personal information:

• access — request a copy of the personal information we hold about you;

• correction — ask us to correct information that is inaccurate or incomplete;

• deletion — ask us to delete your account and associated personal information (subject to retention obligations described in Section 8);

• restriction or objection — ask us to restrict or stop certain processing of your information;

• portability — request a portable copy of certain information you have provided to us;

• withdraw consent — where we rely on your consent, you may withdraw it at any time.

To exercise any of these rights, contact us at support@kira.art. We may need to verify your identity before responding. We will respond within a reasonable period and in line with applicable law.

The Service is not intended for children under 13, and we do not knowingly collect personal information from children under 13. In certain jurisdictions, the minimum age may be higher (for example, 14 in some EU member states, or 16 elsewhere), and the local minimum applies.

Users between the local minimum age and 17 may only use the Service with the verifiable consent of a parent or legal guardian, as described in our Terms of Use. We may apply additional protections by default to accounts we identify as belonging to users under 18, including restrictions on public visibility of creations and on advertising-style features, as the Service evolves.

If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us at support@kira.art. We will delete the information as soon as reasonably possible.

We use commercially reasonable technical and organisational measures to protect your information against unauthorised access, alteration, disclosure, and destruction. These include:

• encryption of data in transit;

• access controls and least-privilege principles for our team;

• monitoring and logging of access to systems containing personal information;

• vendor due diligence for the providers we work with.

No system is perfectly secure. If you believe your account has been compromised, or if you become aware of a security issue affecting the Service, please contact us immediately at support@kira.art.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or in-product notification and update the "Last updated" date at the top of this page. Continued use of the Service after such changes constitutes acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy or your information, contact us at:

Kira Art Pte. Ltd.

Singapore

Email: support@kira.art

© 2026 Kira Art Pte. Ltd. All rights reserved.