Read first
Overview
Kiara X is an AI studio for creating AI influencers, social media content, UGC, ads, images and video. The service lets signed-in users buy credits, upload references, write prompts, use AI chat and voice assistance, generate images and videos, manage outputs, and publish selected creations.
This Privacy Policy explains what we collect, why we collect it, who may process it, how long we keep it, and how you can ask us to access, correct, delete, or export it.
For privacy questions, deletion requests, or account questions, contact us at info@kiarax.ai.
Kiara X accounts are for people 18 and older. Do not use the service if you are under 18, or under the minimum age where you live.
Who We Are
Kiara X is a Kiara Intelligence brand, run by a private operator based in the Netherlands. The operator is the data controller for your personal data and follows Dutch and European Union law, including the General Data Protection Regulation (GDPR / AVG).
For legal, privacy, and data-protection notices, write to info@kiarax.ai. For physical correspondence, email us first to request a mailing address.
The service is in beta. Some model lanes, payment methods, voice features, dashboard tools, and account settings may change as the platform moves toward full production.
Data We Collect
Account and login data
- Email address when you use email magic-link login.
- Telegram profile data when you use Telegram login, including Telegram id, username, display name, and profile photo where provided.
- Google account data when you use Google login, limited to login/account information such as email, name, profile image, and Google account identifier.
- Internal user id, session issue time, last seen time, visit count, country, browser, device type, and a short login history used for security and account support.
Generation, chat, and workspace data
- Prompts, negative prompts, model selections, aspect ratios, durations, resolution choices, quality settings, seeds, reference tags, and generation metadata.
- Uploaded reference images and videos, generated outputs, thumbnails, published feed posts, attachment records, and deletion records.
- Chat messages, AI assistant context, canvas boards, voice-call metadata, tool results, and task status used to make the assistant and UI work.
- Model output status, provider errors, content-filter outcomes, refund events, and retry/debug data.
Purchase confirmations
- When you buy credits, the time you confirmed that you want them delivered at once and understand that the 14-day withdrawal right ends on delivery.
Payment and credit data
- Credit purchases, monthly-pack selections, invoice ids, order numbers, payment provider, payment status, amount, currency, credits granted, credits debited, refunds, expiry dates, and ledger metadata.
- For crypto payments, the payment provider may process blockchain transaction details, wallet-side metadata, exchange-rate data, and network-fee information. Kiara X does not store your private wallet keys.
- For card payments, payment information is handled by the card processor. We do not intentionally store full card numbers on our own servers.
Device, analytics, and security data
- Page path, referrer, country, region, city, browser, operating system, device type, session id, click/view/scroll/video/error events, form-focus events, page performance metrics, and presence status.
- IP addresses are used server-side for security, rate limits, fraud prevention, geolocation, and analytics. Where our code stores an IP-derived identifier for analytics, it stores a hash rather than the raw IP.
- Server logs, error logs, abuse signals, content-filter results, rate-limit decisions, and operator alerts.
How We Use Data
- Provide accounts, login, sessions, dashboard, library, chat, voice assistant, credits, payments, uploads, generation, polling, delivery, deletion, and support.
- Send prompts, references, settings, and relevant metadata to AI model, workflow, voice, search, payment, hosting, email, and authentication providers when needed to perform the user-requested action.
- Maintain the credit ledger, prevent double-spend, create invoices, confirm payment webhooks, issue automatic credit refunds on eligible failures, and show receipts.
- Detect abuse, prevent fraud, enforce the Terms, enforce the Acceptable Use Policy, rate-limit endpoints, investigate security events, and comply with legal obligations.
- Improve reliability, latency, user experience, model routing, prompt UX, safety filters, dashboards, and support workflows.
- Measure traffic, conversions, feature usage, errors, page performance, and active presence. We do not currently run behavioral advertising or sell personal data.
Legal Bases
- Contract: to run your account, generations, characters, agents, credits, payments, and support.
- Legal obligation: to keep payment, tax, and accounting records.
- Legitimate interest: to keep the service secure, prevent fraud and abuse, and fix errors.
- Consent: for optional analytics and anything else we ask you to opt in to. You can withdraw consent at any time.
AI Model and Provider Processing
When you generate content, ask the AI assistant for help, upload a reference, use voice calling, or request a model feature, your prompts, references, outputs, and settings may be processed by third-party AI and infrastructure providers.
Depending on the feature, these processors fall into these categories: AI image and video generation, text AI (chat, prompts, captions, agents), voice, hosting, storage and CDN, payments, sign-in, and email delivery.
Model names shown in the app are Kiara-branded. Our processors may use your data only to provide the service to us.
- AI outputs can be inaccurate, unexpected, delayed, blocked, filtered, or unavailable.
- Model providers may apply their own safety systems, content policies, logging, retention, moderation, security review, or legal-compliance processes.
- Do not upload content that you do not have the right to use. Do not upload private images of another person unless you have permission and a lawful reason.
Characters Trained From Your Photos
When you build a character, we use the photos you upload to train a private character model (an adapter) that can make new pictures and videos of that character.
- We keep the uploaded photos, the trained adapter, and the character settings in your account so the character keeps working.
- Only you can use your character unless you choose to share or publish it.
- Training may run on AI processors outside the EU (see International Processing).
- Only upload photos of yourself, or of a person who has given you clear permission.
- To delete a character, write to info@kiarax.ai and we remove its adapter and photos. Deleting your account removes all your characters.
Agents
Agents are AI helpers that work for you inside Kiara X. They only act when you ask, and they ask for your approval before spending credits or doing anything public.
- An agent stores its chats, tasks, plans, results, files you give it, its skills and settings, and short notes it keeps to remember your work.
- If you connect an outside account (for example Telegram), the agent stores the connection details it needs to use it.
- Delete an agent, or its chats and results, to remove that data. Deleting your account removes all your agents.
Google Login and OAuth Data
If you use Google login, Kiara X uses Google OAuth only to authenticate you and create or access your Kiara X account.
We do not use Google account data for advertising, sell it, or transfer it except as needed to provide the login/account feature, comply with law, prevent fraud or abuse, or protect the service.
We only request the minimum Google account scopes needed for sign-in. If that changes, we will update this policy first.
Retention and Deletion
We keep data only as long as needed for the service purposes described in this policy, unless law, security, abuse prevention, accounting, tax, chargeback, or dispute obligations require a longer period.
- User session cookies are designed to last up to 90 days unless you sign out or we invalidate sessions.
- Credit ledger records, invoices, payment events, refunds, and credit expiry records are kept for up to 7 years for tax, accounting, and dispute reasons.
- Current invoice records are stored for a limited operational period, and per-user invoice indexes may be retained longer so the dashboard and support tools can show payment history.
- Generated media, uploaded references, characters, and agent data remain available until you delete them, delete your account, or we remove them for policy, security, storage, or legal reasons.
- Security and server logs are kept for a short period, normally no longer than 90 days.
- When you delete a generation, we remove the generation record and attempt to delete related stored media. Backups, CDN caches, logs, provider records, payment records, abuse records, and legal holds may persist for a limited period.
- Public posts, shared URLs, or content that other users have already accessed may remain visible in cached or copied forms outside our control.
Security
We use technical and operational measures intended to protect the service, including HTTPS, signed session cookies, same-origin checks, rate limits, server-side payment verification, upload type checks, metadata scrubbing for generated media where supported, and provider-error scrubbing so backend details are not exposed to users.
No internet service is perfectly secure. You are responsible for keeping your email, Telegram, Google account, wallet, and device secure.
Your Rights
Depending on your location, you may have rights to request access, correction, deletion, export, restriction, objection, or withdrawal of consent. Send requests to info@kiarax.ai. We may need to verify your account before acting on the request.
Some data cannot be deleted immediately when we must retain it for payment records, fraud prevention, abuse investigation, safety, tax/accounting, legal defense, or compliance.
You also have the right to complain to a data protection authority, such as the Autoriteit Persoonsgegevens in the Netherlands or the authority where you live.
International Processing
Kiara X and its processors handle data in the European Union, the United States, Japan, and China. For example, AI generation and character training may run on servers in the United States or China, and some uploads pass through servers in Japan.
When data leaves the European Economic Area, we rely on Standard Contractual Clauses or equivalent safeguards. You can ask us for a copy at the contact email above.
Children and Minors
Kiara X is not for children. We do not knowingly allow minors to create accounts or use the service. We also prohibit generating, uploading, requesting, or distributing sexualized, exploitative, or suggestive content involving minors or age-ambiguous people.
If you believe a minor has used the service or that content involving a minor is present, contact info@kiarax.ai immediately.
Changes to This Policy
We may update this Privacy Policy as the product, laws, providers, or payment methods change. The updated date at the top shows when the current version took effect. Material changes may also be surfaced in the UI or by requiring a renewed acknowledgement.
Reference
Related Documents
Policies of the payment, sign-in, hosting, and email services you may meet while using Kiara X.