Privacy Policy

Our Commitment to Privacy

Kloak is built on a simple principle: your privacy matters. We designed the app from the ground up to collect as little information as possible while still providing a functional social platform. Unlike traditional social apps, we don't require any personal information to get started—no email, no phone number, no real name.

How Kloak Works

When you first open Kloak, your device automatically generates a unique anonymous identity. You're assigned a random username (like "anon847291053") that has no connection to your real identity. There's no account creation process, no sign-up form, and no personal information required.

Your identity is tied to your device, not to any personal information we collect. This means you can start using Kloak immediately and anonymously.

Information We Collect

Automatically Generated

• Anonymous username: A randomly generated identifier (e.g., "anon847291053") with no connection to your real identity.
• Device identifier: A hashed token that ties your anonymous identity to your device. This is not your device's actual identifier—it's a one-way hash that cannot be reversed to identify your specific device.

Content You Create

• Posts: Photos and text content you choose to share.
• Comments: Comments you make on posts.
• Interactions: Likes and other engagement with content.

Optional Information

• Recovery email: If you choose to set up account recovery, you can optionally provide an email address. This is the only personal information Kloak ever asks for, and it's entirely optional. It's used solely to help you recover your anonymous identity if you lose access to your device.
• Push notification token: If you enable notifications, Apple provides us with an anonymous token to deliver notifications to your device. This token cannot be used to identify you personally.

Technical Information

• IP addresses: Temporarily processed for security purposes (rate limiting, abuse prevention). We do not store IP addresses long-term or link them to your anonymous identity.

Information We Do NOT Collect

We want to be crystal clear about what we don't collect:

• Your real name
• Email address (unless you opt into recovery)
• Phone number
• Location data
• Contacts or address book
• Browsing history
• Your device's actual unique identifier
• Advertising identifiers
• Biometric data
• Any data from other apps on your device

How We Use Your Information

• To operate the platform: Display your posts, enable interactions, deliver notifications.
• To maintain your anonymous identity: Your device identifier lets you access your account across app sessions without requiring personal information.
• To ensure safety: Moderate content using automated systems to keep the community safe.
• To prevent abuse: Rate limiting and spam prevention.
• To comply with law: Respond to valid legal requests where required.

We do not use your information for advertising, profiling, or selling to third parties. We do not build behavioral profiles. We do not track you across apps or websites.

Content Moderation

All content is processed through automated moderation systems to detect harmful material. This includes:

• AI-based text analysis for hate speech and harassment (Perspective API)
• Image analysis for explicit or harmful visual content (Cloud Vision SafeSearch)
• PhotoDNA for child safety (CSAM detection)

These systems analyze content, not identities. Your posts are checked for policy compliance without building a profile about you. We do not use content moderation data to identify who you are in the real world.

Account Recovery

Because your identity is tied to your device, losing your device normally means losing access to your anonymous identity. We offer an optional recovery feature:

• You can optionally add a recovery email in settings
• This email is stored securely and used only for account recovery
• We do not use this email for marketing, newsletters, or any other purpose
• You can remove your recovery email at any time

If you never set up recovery, we have no way to restore your account if you lose your device. This is a privacy feature, not a limitation.

Data Retention

• Your anonymous identity: Retained until you delete your account.
• Posts and comments: Retained until deleted by you or removed for policy violations.
• Recovery email (if provided): Retained until you remove it or delete your account.
• Security logs: Retained for 30 days, then automatically deleted.
• Deleted content: Permanently removed within 30 days of deletion.

Data Security

We implement industry-standard security measures:

• All data transmitted over HTTPS/TLS encryption
• Device identifiers are hashed using SHA-256 (one-way, cannot be reversed)
• Database encryption at rest
• Regular security audits
• Access controls and monitoring

Legal Requests

We comply with valid legal requests from law enforcement. However, because we collect minimal data, there is minimal data we can provide:

• We don't have your real name
• We don't have your phone number
• We don't have your email (unless you opted into recovery)
• We don't have your location history

We will notify users of legal requests where legally permitted to do so.

Your Rights

You have the right to:

• Access: View all data associated with your anonymous identity within the app.
• Delete: Permanently delete your anonymous identity and all associated data through the app settings.
• Remove recovery: Remove your recovery email at any time if you've set one up.

Because we don't collect personal information, there's no profile to correct or port. Your anonymous identity exists only within Kloak.

Children's Privacy

Kloak is not intended for users under 17 years of age. We do not knowingly allow users under 17 to use the app. Because we don't collect birthdates or verify age through personal information, we rely on users to truthfully confirm they meet our age requirement.

Changes to This Policy

We may update this policy from time to time. Significant changes will be communicated through the app. Continued use after changes constitutes acceptance.