Privacy Policy

This Privacy Policy explains how Kira Art Pte. Ltd., a private limited company incorporated in Singapore ("Kira", "we", "us" or "our"), collects, uses, shares and protects personal information when you use kira.art and our other websites, the Kira mobile application for iOS and Android (the "App"), and related products and services (together, the "Service"). Kira is the controller of your personal information, which means we decide how and why it is used and are responsible for it.

This Privacy Policy should be read together with our Terms of Use. Terms defined in the Terms of Use have the same meaning here.

1. Scope

This Privacy Policy applies to personal information about:

• visitors to kira.art and our other websites;
• users of the App, whether downloaded from the Apple App Store or Google Play;
• registered users of the Service, on any plan;
• participants in the Kira Creator Program and in Kira campaigns;
• anyone who contacts us by email, through in-app support chat or through another channel.

It does not cover third-party services that are linked from or integrated with the Service (for example, Apple, Google, or the social networks where you share your creations). Those services are governed by their own privacy policies.

2. Information we collect

2.1 Information you give us

Account information. You create a Kira account by signing in with Google or with Apple (Sign in with Apple). This sign-in information is required to create an account; without it, you cannot create one.

• When you sign in with Google, we receive your name, email address, profile picture (if you have one) and Google account ID.
• When you sign in with Apple, we receive your Apple user ID and email address (or, if you choose Hide My Email, a private relay address that forwards to your email) and, on your first sign-in and only if you choose to share it, your name.
• If you link more than one sign-in method to your account, we keep the identifier for each method.
• Profile. Your display name, profile picture and bio. When you create an account, your display name and profile picture are set from your Google or Apple account. You can change them at any time.

Content. The prompts and other text you enter, the photos and videos you upload (including photos you choose from your device), the images and videos the Service generates for you ("Outputs"), and the creations, captions, hashtags and comments you publish.

Social activity. The creations you like or dislike, the accounts you follow or block, and the reports you submit.

Payment information. Payments are handled by our payment processors. We never receive or store your full card number or bank account details.

• Web purchases. Stripe processes your payment and collects your card details and billing address. We receive your Stripe customer ID and the details of each transaction: the plan or product, amount, currency, date, status, and any refund or dispute.
• In-app purchases. Apple or Google processes your payment. They send us a record of each purchase and subscription event, including the product, transaction and subscription identifiers, dates, status (for example, renewed, cancelled or refunded) and storefront country. To link a store purchase to your Kira account, we attach your Kira user ID to it (Apple calls this an "app account token").

Communications and support. When you contact us by email or through in-app support chat, we collect your messages and any attachments, such as a photo you take with your camera in support chat. When you request account deletion or submit a report, we also collect the reason you give.

Creator Program and campaigns. If you apply to the Kira Creator Program, we collect the information you submit, such as your social media handles, links to your posts and your country, and we retrieve public statistics about the posts you submit (for example, views and likes) through third-party data services. Creator payouts are made through Stripe Connect, which collects identity and bank details directly from you. If you take part in a campaign, we process the photos you upload to create your result.

2.2 Information we collect automatically

• Usage information. The pages and screens you view, the features you use and the actions you take, the generations you start, the credits you use, the purchases you start or complete, and when these happen. On our websites, this can include the text of the prompts and searches you enter.
• Device and connection information. Your IP address; your approximate location (country, region and city), which we derive from your IP address; your browser and operating system; device type and model; app version; language, time zone and screen settings; network type; and identifiers that we assign to your browser, device or App installation. On iOS this includes the identifier for vendor (IDFV); on Android, the install referrer that Google Play provides when you install the App.
• How you found us. The website that referred you, and the campaign parameters and advertising click identifiers in the link you followed (such as UTM tags, gclid or fbclid).
• Push notification token. If you allow notifications in the App, the token issued by Apple Push Notification service or Firebase Cloud Messaging, so that we can send notifications to your device.
• Diagnostics. Error logs, crash reports and performance measurements that help us keep the Service working.

We do not collect your precise (GPS) location or your device's advertising identifier (IDFA or Android advertising ID), and we do not access your contacts, calendar, microphone or health data.

2.3 Information from other sources

• Google and Apple, when you sign in (see Section 2.1).
• Stripe, Apple and Google, about your payments, refunds and disputes.
• Other users, for example when they report your content or account.
• Public sources, for Creator Program participants: public statistics about the posts you submit.

2.4 Device permissions

The App asks for a permission only when you use a feature that needs it. You can grant or revoke each permission in your device settings at any time.

• Camera: only to take a photo to attach to a support chat.
• Photo library (add only) : to save images and videos you download from Kira. The App cannot read your existing photos. When you upload a photo, you choose it in the system photo picker, and we receive only the files you select.
• Notifications: to tell you when a generation is finished, about activity on your creations and about your account. Notifications are optional.

2.5 Information stored on your device

The App and our websites store some information on your device so that the Service works, for example your sign-in session, settings, cached images and drafts. The App also stores a randomly generated device identifier so that we can recognise the device if the App is reinstalled, for example to keep our statistics accurate and to prevent abuse of free credits. On iOS, this identifier is kept in the Keychain and may remain on the device after you delete the App. See Section 8 for cookies.

3. How we use your information

We use personal information for the purposes below. Where the EU or UK General Data Protection Regulation (GDPR) or a similar law applies, we rely on the legal bases shown.

Where we rely on legitimate interests, we have weighed them against your rights and interests. You can object to this processing (see Section 11).

We do not sell your personal information. We do not share it with advertising networks, and we do not use it for targeted advertising.

4. How we share your information

4.1 Service providers

We share personal information with service providers that process it on our behalf. Our contracts require them to protect it and to use it only to provide their services to us.

4.2 Other users and the public

Information you publish is visible to other users and the public as described in Section 6.

4.3 Legal, safety and enforcement

We may disclose information to law enforcement, regulators, courts or other authorities if we believe in good faith that it is necessary to comply with the law or a valid legal request, to protect the rights, safety or property of Kira, our users or the public, to enforce our Terms of Use, or to investigate fraud or abuse. We report child sexual abuse material to the National Center for Missing & Exploited Children (NCMEC) and to other competent authorities as required by law. If you dispute a payment with your bank or app store, we may give the payment processor, card network or app store information that shows your purchase and your use of the Service.

4.4 Business transfers

If Kira is involved in a merger, acquisition, financing, reorganisation, sale of assets or insolvency, personal information may be transferred as part of that transaction.

4.5 At your direction

We share information when you ask us to, for example when you share a creation to another app.

5. AI processing

• To fulfil your requests, we send your prompts and uploads to the AI providers listed in Section 4.1, which process them to provide their services to us.
• We use automated systems, including AI models, to check content against our Safety & Content Policy and to rank and recommend creations in public feeds (see Section 7).

6. Public information

Kira has public spaces where people share and discover creations.

• Your profile is public. It shows your display name, profile picture, bio, the creations you have published and the creations you have liked, how many people you follow and how many follow you, and whether you have a paid plan. Anyone can see it, including people who are not signed in.
• Published creations are public, together with their captions, hashtags, comments and the prompt used to create them.
• Followers and following. Other users can see who follows you and whom you follow.
• Search engines may index public profiles and published creations.
• You can unpublish a creation, delete a comment and edit your profile at any time. People may have seen, copied or shared public content before you remove it.

When you report content or an account, we do not tell the reported user who reported it.

7. Moderation, recommendations and automated decisions

• Moderation. We use automated systems and human review to detect content that breaks our rules. Automated systems may block an upload or generation, hide a creation, comment or profile from public spaces, or flag it for review.
• Recommendations. Public feeds are ranked automatically. Creations about certain sensitive topics, such as religion, are not recommended in public feeds.
• Notice and review. Where the law requires it, we tell you when we remove your content or restrict your account, and why. If a decision was made by automated means, you can ask for it to be reviewed by a person by contacting [email protected].

8. Cookies and similar technologies

We and our service providers use cookies and similar technologies, such as local storage and device identifiers, on our websites and in the App:

• Essential: to keep you signed in, remember your settings, protect against fraud and make the Service work. These are always active.
• Analytics and attribution: to understand how the Service is used and which campaigns bring people to Kira, through our own analytics and PostHog. This includes reading identifiers that advertising platforms have stored on our websites.
• Support: to provide support chat.

Where the law requires it, for example in the European Economic Area, the United Kingdom and Switzerland, we ask for your consent before we use non-essential cookies and similar technologies, and you can change your choice at any time in the cookie settings. You can also block or delete cookies in your browser settings, but some features may not work without essential cookies.

The App opens some of our web pages, such as these policies, the Help Center and campaign pages, in an in-app browser, which uses the same cookies and technologies as our websites.

Some pages show content from third parties, such as interactive guides from Arcade or website icons from Google. These third parties receive your IP address and browser information when the content loads.

9. Data retention

We keep personal information only for as long as we need it for the purposes described in this policy, and then delete or anonymise it.

Deleting your account. You can delete your account at any time:

• in the App: Settings → Account Management → Delete Account;
• on the web: in your account settings at kira.art;
• by emailing [email protected] from the email address on your account.

Your account is scheduled for deletion with a 30-day grace period, during which you can sign in and cancel the request. After the grace period, we delete your account, profile, content and the personal information linked to your account from our live systems within 30 days, except the records described in this section. Copies in backups are deleted as the backups expire. Deleting your account does not cancel a subscription bought through the App Store or Google Play; cancel it in your store account settings, or the store may continue to charge you. Learn more about account deletion.

Payment disputes. If you have made a payment, we keep records of your payments and of your use of the Service (such as the features you used, the credits you spent, and the IP addresses and devices involved) until 180 days after your last payment, even after you delete your account. We use these records only to respond to payment disputes, such as chargebacks, relying on our legitimate interest in defending against such claims, and we delete them at the end of that period.

10. International transfers

Kira is based in Singapore. Most of our service providers store data in the United States. Some process data in other countries, including Germany, the Netherlands, Japan, Singapore and Malaysia, and Cloudflare operates a global network. The data protection laws of these countries may differ from the laws where you live.

When we transfer personal information from the European Economic Area, the United Kingdom, Switzerland, Singapore or another place with rules on international transfers, we use the safeguards those laws require, such as the European Commission's standard contractual clauses and the UK International Data Transfer Addendum. You can ask us for more information about these safeguards.

11. Your rights and choices

Depending on where you live, you may have the right to:

• access the personal information we hold about you and receive a copy;
• correct information that is inaccurate or incomplete;
• delete your information;
• receive information you gave us in a structured, machine-readable format, or have it sent to another company (portability);
• object to processing based on our legitimate interests, including analytics, and to direct marketing at any time;
• restrict our processing in certain circumstances;
• withdraw your consent at any time, where we rely on consent, without affecting processing that took place before;
• not be subject to a decision based solely on automated processing that significantly affects you (see Section 7).

How to exercise your rights. Use the controls in the Service, or email [email protected]. We may need to verify your identity, for example by asking you to write from the email address on your account. We respond within the period required by the law that applies to you.

Complaints. You have the right to complain to a data protection authority, for example the Personal Data Protection Commission in Singapore, the supervisory authority where you live in the European Economic Area, or the Information Commissioner's Office in the United Kingdom.

Controls in the Service.

• Email: turn off reminders and news in Settings → Email Notifications, or use the unsubscribe link in any such email. We will still send you messages about your account, security and purchases.
• Push notifications: turn them off in your device settings.
• Cookies: change your choices in the cookie settings or in your browser.
• Profile and public content: edit your profile, unpublish creations and delete comments at any time.
• Sign-in methods: unlink Google or Apple in the App's settings (at least one must remain). You can also remove Kira's access in your Google Account or Apple ID settings; this signs you out but does not delete your Kira account.

12. Children

The Service is not intended for children under 13, or under a higher minimum age that applies where you live (for example, 16 in some countries of the European Union). We do not knowingly collect personal information from them, and if we learn that we have, we delete it.

If you are under 18, you may use the Service only with the permission of a parent or legal guardian, as described in our Terms of Use.

If you believe a child has given us personal information, please contact us at [email protected].

13. Security

We use technical and organisational measures appropriate to the risk to protect personal information. These include encryption in transit and at rest, access controls, secure storage of sign-in tokens on your device, and verification of purchases with Apple and Google.

No system is completely secure. If a data breach affects your personal information, we will notify you and the relevant authorities as required by law. If you think your account has been compromised, contact us at [email protected].

14. Google user data

When you sign in with Google, Kira requests only your basic Google profile information: your name, email address, profile picture and Google account ID. We do not request access to any other Google data, such as Gmail, Google Drive, Google Photos, Contacts or Calendar.

• Use: we use this information only to create your account and sign you in, to set up your profile (you can change your name and picture), to keep your account secure and to communicate with you about the Service.
• Sharing: we share it only with the service providers that help us run the Service (see Section 4.1), and when the law requires it. We do not sell it, use it for advertising or use it to train AI models.
• Storage and protection: we store it in our account database and protect it as described in Section 13.
• Retention and deletion: we keep it while your account exists and delete it when you delete your account (see Section 9). You can also remove Kira's access at any time in your Google Account settings.

Kira's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

15. Additional information for certain regions

Japan. We handle personal data in accordance with the Act on the Protection of Personal Information. On request, we will provide information about the foreign countries where your personal data is processed (see Section 10), the measures the recipients take, and the security measures described in Section 13.

South Korea. We transfer your personal information overseas to provide the Service:

• Recipients, information transferred and countries: the providers, the information each receives and their main locations are listed in Section 4.1.
• When and how: whenever you use the Service, over encrypted network connections.
• Purpose and retention: the recipients use the information only to provide their services to us, for the purposes described in Section 3, and keep it no longer than the periods described in Section 9 or required by their contracts with us.
• Contact: you can ask us at [email protected] for the privacy contact of any recipient.
• Refusing: you can refuse these transfers by not using the Service or by deleting your account, but we cannot provide the Service without them.

Singapore. You can contact our Data Protection Officer at [email protected].

16. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or in the Service before they take effect, and we will update the date at the top of this page.

17. Language

This Privacy Policy is written in English. Translations are provided for your convenience. If there is any conflict between the English version and a translation, the English version prevails, to the extent permitted by law.

18. Contact us

If you have questions or requests about this Privacy Policy or your personal information, contact us at:

Kira Art Pte. Ltd.

C/O: OSOME LTD.

68 Circular Road

Singapore 049422

Email: [email protected]

© 2026 Kira Art Pte. Ltd. All rights reserved.