Privacy policy

Effective October 27, 2026

Kloru is an assistant for groups: families, friends and the people you plan things with. This policy explains what we collect, why, who helps us run Kloru, and the choices you have. "Kloru", "we" and "us" mean the operator of kloru.com. Questions go to privacy@kloru.com.

What we collect

• Your account. Your phone number, your name if you give it, the groups you belong to, and the people your group adds.
• What you send Kloru. Texts, and calls to your group's Kloru number. Calls are turned into text as they happen so Kloru can understand and answer; we keep the text of the conversation, and we do not keep recordings of calls.
• Apps you connect. If you connect an app such as Google Calendar or Gmail, Kloru reads and acts in it only to do what you or your group ask, within the permissions you set. We keep what a task needs (for example, the event it created), not a copy of your mailbox or calendar.
• What Kloru remembers. Notes, preferences and plans that make the next request easier ("we're vegetarian", "Saturdays are for soccer"). You can see and remove these.
• Approvals and activity. Which actions were asked for, approved or denied, and a log of what Kloru did, so you can check its work.
• Technical data. Your network address and the cookies that keep you signed in and protect forms. We do not use advertising or tracking cookies.

How we use it

To run Kloru for you and your group: answer and act on requests, text sign-in codes, keep your account secure, prevent abuse, and fix problems. We do not sell your personal information, and we do not share it for advertising. We do not use your conversations or app data to train AI models.

Who helps us run Kloru

We use these service providers. Each receives only what it needs to do its job for us, under contract, and may not use it for its own purposes.

• Twilio: phone numbers, calls, texts and sign-in codes.
• Deepgram: turning speech on calls into text.
• Cartesia: turning Kloru's replies into speech.
• OpenRouter, and the AI model providers it routes to: understanding requests and writing replies.
• Composio: secure connections to the apps you choose to connect.
• Google: Google Workspace apps you connect, such as Calendar and Gmail.
• Fly.io: the servers that run Kloru, in the United States.
• Neon: the database that holds accounts and group membership.
• Cloudflare: kloru.com's domain records, and encrypted backups and files.

Google user data

Kloru's use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. We use Google data only to provide features you request, we do not transfer it except as needed to provide those features, for security, or as required by law, we do not use it for advertising, and people at Kloru do not read it unless you ask us to, it is needed for security, or the law requires it.

Inside your group

Kloru shares information within a group according to the permissions your group sets. For example, a family member may be able to see when you're free without seeing your events. Group admins choose these permissions and can change them at any time.

Children

Kloru accounts are for adults 18 and over. A parent or guardian may add their children to a family group and tell Kloru about them (for example, practice schedules) and is responsible for what they share. Children under 13 should not text or call Kloru themselves. If you believe a child under 13 has given us information directly, write to privacy@kloru.com and we will delete it.

How long we keep it

We keep your information while your account is active. You can disconnect apps and remove what Kloru remembers at any time. When you ask us to delete your account, we delete your information within 30 days, except what the law requires us to keep; copies in backups expire within 30 days after that.

Your choices and rights

You can see, correct, export or delete your information by writing to privacy@kloru.com from your account's phone number or with enough detail for us to verify you. Depending on where you live, including California, you have rights to know what we collect, to correct and delete it, and not to be treated differently for using these rights. We do not sell or share personal information as California law defines those terms. Reply STOP to any Kloru text to stop texts.

Text messages

We use your phone number to text you sign-in codes and messages about the tasks you or your group ask Kloru to do. Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. Information is shared with the service providers above only to deliver Kloru, such as sending texts through Twilio. All of the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Security

Information is encrypted in transit. Access is limited to the people and systems that need it, sign-in uses one-time codes, and connections to your apps use their own secure authorization so we never see your app passwords. No system is perfectly secure; if something goes wrong that affects you, we will tell you.

Changes

If we change this policy in a way that matters, we will tell you before the change takes effect, by text or on this page.

Contact: privacy@kloru.com