Privacy Policy

Last updated · 2026-05-24

Kitmo (the “Service”) helps creators schedule and publish video content to third-party platforms (TikTok, Instagram, and YouTube). This policy explains what we collect, why, and what your choices are.

1. Information we collect

  • Waitlist signups. If you join our pre-launch waitlist, we store the email address you provide and the timestamp of your signup. We use this only to notify you when Kitmo opens and to send launch-related updates you've explicitly consented to. You can ask to be removed at any time by emailing support@kitmo.app.
  • Account information. Your email address and display name when you sign up with email and password or sign in with Google. For email/password accounts, we store a hashed password (never the plaintext).
  • Connected platform credentials. When you connect a TikTok, Instagram, or YouTube account, we receive and store the OAuth access and refresh tokens necessary to publish on your behalf and read your public account statistics.
  • Content you upload. Videos and metadata (titles, captions, hashtags) you create within the Service.
  • Platform statistics. Public follower counts, view counts, and post performance data we sync from your connected accounts.
  • Operational data. Activity logs, error logs, and basic request information used to operate the Service.
  • Product analytics. If you accept analytics cookies, we collect anonymized usage events (pages viewed, features used, errors encountered) through PostHog so we can improve the Service. You can opt out at any time from the cookie banner or your browser settings. See “Cookies and analytics” below.
  • Public link-in-bio profile. If you set up a Kitmo link-in-bio page, the handle, display name, avatar, bio, and links you publish on it are public by design and indexable by search engines. Do not include information there that you want kept private.

2. How we use your information

  • To authenticate you and maintain your session.
  • To publish content to the third-party platforms you have connected, on your explicit instruction.
  • To display your scheduled posts, drafts, and analytics.
  • To send transactional emails (such as account notices).
  • To detect and prevent abuse and to debug issues.

3. Sharing

We share your data only with the third-party services strictly needed to deliver the product:

  • Cloudflare — hosting, storage, and database (D1, R2, Workers, Queues).
  • Google, Meta, and TikTok — the platforms you choose to connect, only when you explicitly take an action that requires them.
  • PostHog — product analytics and error tracking. Only sent when you have accepted analytics cookies.

We do not sell your personal information, and we do not use your content, videos, captions, or analytics to train AI or machine learning models.

4. Cookies and analytics

Kitmo uses two categories of cookies and similar storage:

  • Essential — required to keep you signed in, maintain your session, and remember your consent choices. These cannot be turned off.
  • Analytics (optional) — PostHog cookies that let us understand how the Service is used. You can accept, reject, or change your choice at any time via the cookie banner.

We do not use advertising or cross-site tracking cookies.

5. Retention

We keep your data while your account is active. When you delete your account, we remove your stored content, OAuth tokens, and account record. Some operational logs and analytics events may persist in aggregated or pseudonymized form for a limited window (typically up to 90 days) for debugging and legal compliance.

6. Your rights

You can export your content at any time by downloading the originals. You can revoke our access to any connected platform from that platform’s settings, or by disconnecting it inside the Kitmo Accounts page. You can permanently delete your account and all associated data from the Settings page, or by following the instructions on our data deletion page.

If you are in the EEA, UK, or Switzerland (GDPR): you have the right to access, correct, port, restrict, or erase your personal data, and to object to processing. Our legal bases for processing are: performance of the contract with you (operating the Service), your consent (for optional analytics and marketing emails), and our legitimate interests (security, fraud prevention, and product improvement). You may lodge a complaint with your local data protection authority.

If you are a California resident (CCPA/CPRA): you have the right to know what personal information we collect, to request deletion, and to opt out of any “sale” or “sharing” of personal information. We do not sell or share personal information as those terms are defined under CCPA.

To exercise any of these rights, email support@kitmo.app. We will respond within 30 days.

7. International data transfers

Kitmo is operated on Cloudflare’s global infrastructure, which means your data may be processed in countries outside your own, including the United States. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses with our service providers.

8. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from them.

9. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top reflects the latest revision. Material changes will be communicated via email or in-app notice.

10. Contact

Questions about this policy? Email support@kitmo.app.