Privacy Policy
Last updated: 2026-10-23.
This policy explains what Kitbly ("we") processes when you use the website, apps and API, and your rights under the EU/UK GDPR and the Korean Personal Information Protection Act (PIPA, 개인정보 보호법).
1. Who is responsible
Controller: Kitbly. Privacy officer (개인정보 보호책임자): the site owner – support@kitbly.com.
2. No account needed
All free tools work without registration. We do not ask for your name or email to use them.
3. Your files
- In-browser tools (marked "runs on your device", e.g. OCR, PDF editing, audio recorder, many image tools): your file never leaves your device.
- Server tools (e.g. Word↔PDF, compression, video): files are sent over HTTPS, processed automatically in an isolated temporary folder and permanently deleted within 1 hour (sooner when you download). Nobody looks at them; they are never used for training, sold or shared.
- Hosted QR-menu PDFs you choose to publish are kept until you delete them with your delete key or for at most 365 days.
4. Data we process
| Data | Purpose | Legal basis | Kept for |
|---|---|---|---|
| IP address (in memory) and a salted, one-way hash of it | Fair-use limits, abuse and attack prevention | Legitimate interest (GDPR 6(1)(f)); PIPA Art. 15(1)6 | Hash: 3 days. Raw IP is not stored in our database. |
| Anonymous counts (tool, success/failure, date) | Reliability and capacity planning | Legitimate interest | Aggregated, no personal data |
| Text you submit to AI/web-search features (e.g. citation, paraphrase, CV feedback, translation) | To return the result you asked for | Performance of the service you requested (GDPR 6(1)(b)) | Not stored by us; search results cached up to 30 days without your identity |
| Email, plan, payment-provider customer ID (paid plans only) | Sign-in link, subscription, invoices | Contract (6(1)(b)); legal obligations for tax records | While your plan is active + as required by tax law |
| Business enquiry form (name, company, email, message) | Answer your request | Pre-contract steps / your consent | Up to 24 months, or until you ask us to delete it |
| Server logs (time, path, status, no file contents) | Security, debugging | Legitimate interest | Up to 14 days |
5. Service providers (processors) and international transfers
We share only what is needed for each feature: hosting provider (servers in the region you choose at launch); payments – Stripe and, for mobile apps, Apple/Google via RevenueCat – we never see your card number; AI and search features only when you use them – Google Gemini / OpenAI (text generation, speech-to-text), Sapling (AI-text detection), Brave Search (web search), DeepL (translation); email delivery (SMTP provider) for sign-in links; cookieless analytics (Plausible). Some providers are located outside your country (e.g. in the USA). Transfers are covered by the EU Standard Contractual Clauses / EU-US Data Privacy Framework and, for Korean users, by PIPA Art. 28-8 (notice of the recipient, country, items, purpose and retention given here).
6. Cookies and local storage
fd_pro– keeps paid users signed in (strictly necessary, 400 days).kb_admin– owner admin only.- Local storage on your device: language, theme, your consent choice and tool settings (never sent to us).
- Plausible analytics uses no cookies and no personal data.
7. Your rights
You can ask for access, correction, deletion, restriction, portability, or object to processing, and withdraw consent at any time (GDPR Art. 15–21; PIPA Art. 35–37). Email support@kitbly.com; we answer within 30 days (PIPA: 10 days). You may also complain to your data protection authority – in Korea the Personal Information Protection Commission (privacy.go.kr, ☎ 182), in the EU your local supervisory authority.
8. Children
The free tools need no personal data, so students can use them without an account. Paid plans are for adults; if you are under 14 (Korea) or under 16 (EU), a parent or guardian must purchase.
9. Security
HTTPS everywhere, automatic deletion, isolated processing, hashed credentials and API keys, and regular security testing. See our security notes or report a vulnerability to support@kitbly.com.
10. Changes
We will post changes here and update the date above.