Brylabs
Explore apps Get in touch →
← Back to Klio
// Klio · Legal

Klio privacy policy

Your privacy is fundamental to how we built Klio. This policy explains how we handle your data.

Last updated · July 19, 2026

BRYLABS ("we", "our", or "us") operates the Klio application ("App"). This Privacy Policy explains how we collect, use and protect your information when you use our App.

1. Our privacy-first approach

Klio is designed to keep your finished journal private. Entries and attached photos are stored on your device and, when enabled by your platform, in your private iCloud or Google backup account. When you choose AI-assisted journaling, the source material needed for that request is securely sent through our backend to OpenAI for processing as described below. We do not sell personal information, show targeted advertising or track you across other companies' apps or websites.

2. Data storage

Local storage: Your journal entries, settings and preferences are stored locally on your device using Apple's SwiftData framework on iOS or Klio's private app storage on Android.

Platform backup: On iOS, journal data is synced through your private iCloud account using Apple's CloudKit. On Android, eligible journal data can be included in Android's encrypted Google backup and device-transfer services under your Google account settings. Brylabs does not operate the iCloud or Google backup account that stores your finished entries.

3. Information we access

Klio may request access to the following, only with your explicit permission:

  • Account identifier: Sign in with Apple on iOS or Sign in with Google on Android provides Klio with a platform-specific user identifier and, depending on your account choices, your name or email. The identifier is used to authenticate AI requests and protect your subscription.
  • Photos: Klio accesses only photos you select through the platform photo or document picker. They are stored with your entry on your device and may be included in your private platform backup. A reduced copy of a selected photo may also be processed by the AI service when Klio asks a photo-aware question.
  • Location: If you enable location tagging, Klio uses your current location to label the entry. Klio does not continuously track you. The saved location remains with your entry; place names you include in an AI conversation can also be present in the text sent for that request.
  • Purchase information: Apple or Google handles payment. Klio's backend verifies a signed App Store transaction or Google Play purchase token, product identifier and expiry status, but does not receive your payment card details.

4. AI-powered features

Klio uses OpenAI's API to ask tailored questions and turn your answers into a journal entry. When you use this feature:

  • Your answers, the preceding questions and selected photo content needed for the current task are transmitted over HTTPS through a Brylabs-hosted Vercel function to OpenAI.
  • Our request sets OpenAI's response-storage option to off. OpenAI may retain limited abuse-monitoring data according to its API data controls and legal obligations.
  • Our backend does not intentionally log prompts, answers, photos or generated journal text.
  • The backend validates an active App Store or Google Play subscription and applies task, request, image and token limits before contacting OpenAI.
  • Please review OpenAI's Privacy Policy for more information.

You can write and edit entries manually without sending that text or new photos for AI processing.

5. Operational data

To secure the service and control costs, we process a small amount of operational data:

  • A one-way hash of your platform user identifier, daily request and token counts, image-request counts and provider error counts in Upstash Redis. Daily usage records expire after three days.
  • A one-way hash of an App Store transaction identifier or Google Play purchase token bound to a one-way hash of the signed-in user for the life of the subscription entitlement, to prevent subscription sharing and API abuse.
  • Short-lived Vercel operational logs containing request IDs, anonymous user hashes, model name, token and image counts, latency and errors. They do not intentionally contain journal content or photos.
  • App settings stored in UserDefaults on iOS or private app preferences on Android.

6. Subscriptions and payments

Klio uses Apple's StoreKit 2 on iOS and Google Play Billing on Android for subscriptions and introductory offers. The relevant app store processes payment and provides Klio with transaction or entitlement information. We do not receive your payment card details. Subscription management, cancellation and refunds are handled through the store where you subscribed.

7. Third-party services

Klio uses the following third-party services:

  • Apple: Sign in with Apple, CloudKit/iCloud sync, StoreKit subscriptions and notifications on iOS.
  • Google: Sign in with Google, Android backup and device transfer, Google Play Billing and notifications on Android.
  • OpenAI: AI-assisted questions and journal writing.
  • Vercel: Secure backend hosting and operational delivery logs.
  • Upstash: Short-lived usage metering and subscription-abuse protection.

We do not use third-party advertising networks or cross-app tracking tools.

8. International data transfers

Brylabs operates from Australia, and the third-party services we use to run Klio — including OpenAI, Vercel and Upstash — may process data on servers located in the United States or other countries. When you use AI features, the material needed for a request is transmitted to these providers and may therefore be processed outside your country of residence, including in jurisdictions with different data-protection laws. We rely on the safeguards and contractual protections offered by these providers to protect your information in transit and during processing. By using Klio's AI features, you acknowledge this processing.

9. Data retention

You control finished entries stored on your device and in your platform backup and can delete individual entries or all journal data in the App. Daily anonymous usage counters expire after three days. Subscription-security bindings are retained only as needed to protect a current entitlement. Hosting and AI providers may retain limited security or operational records according to their policies and legal obligations.

10. Children's privacy

Klio is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can address the situation.

11. Your rights

You retain ownership of your journal content. You can:

  • Access all your data directly through the app
  • Delete any or all of your data at any time
  • Export your journal entries
  • Revoke photo or location permissions through your device settings
  • Delete your Klio account data from Settings and revoke the connected sign-in permission through your Apple ID or Google Account settings

12. Regional privacy rights

Depending on where you live, you may have additional rights over your personal information:

  • EEA and UK: Where the General Data Protection Regulation applies, you have rights to access, correct, delete, restrict or object to processing and to data portability. Our legal bases for processing are your consent (for optional features such as AI assistance, photos and location) and our legitimate interests in securing the service and preventing abuse. Because most content stays on your device, some requests are fulfilled directly in the App.
  • California: Under the CCPA/CPRA you have rights to know, delete and correct personal information and to opt out of its sale or sharing. We do not sell or share your personal information, and we do not use it for cross-context behavioural advertising.
  • Australia: We handle personal information in line with the Australian Privacy Principles under the Privacy Act 1988 (Cth), and you may ask to access or correct your information or raise a concern with us.

To exercise any of these rights, contact us at support@brylabs.com. We will not discriminate against you for exercising them.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last updated" date at the top of this policy. We encourage you to review this Privacy Policy periodically.

14. Contact us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at support@brylabs.com.

Back to Klio →Terms of service →