This Privacy Policy explains what Klir (“Klir,” “we,” “us”), operated by JMM Technologies LLC, collects, why we collect it, who we share it with, and the choices you have. It applies to klirapp.com and to the Klir app. Klir is read-only: it shows you your own financial information and can never move, send, or withdraw your money.
What we collect
- Waitlist stage (now): your email address, so we can tell you when Klir launches.
- Account: your email, used for a passwordless magic-link login or for signing in with Google, a dated record that you confirmed you are 18 or older and accepted our Terms and Privacy Policy, and whether you want the weekly summary email. If you sign in with Google, Google provides us with your email address.
- Financial data (via Plaid, read-only): when you connect a bank account, our data provider Plaid securely shares read-only account details: which banks you connect, your balances and a history of them over time, your transactions, and for each account the name your bank gives it, its type, and its last four digits. Klir does not request Plaid’s identity information, so we never ask your bank for your name, address, or phone number. We use this only to display and explain your money. We never receive your bank login and never gain the ability to move funds.
- What you enter in Klir: the things you create in the app. This includes any budget you set, any correction you make to how a transaction is categorized, and the text of any note you write. Notes are free text, so whatever you type goes into one. Notes are private by default and are only sent to our AI provider if you switch a note on for Klir. See “The AI explanation feature” below.
- Explanations we have already generated: when Klir explains a charge, we store that explanation so the same question does not have to be sent to our AI provider again. Stored explanations are tied to your account and are deleted when you delete your account.
- Usage and diagnostics: basic analytics (which screens you use) and error logs, to keep the app working. Analytics run only if you accept the analytics banner, and nothing is loaded at all if you decline. On our public pages, meaning the landing page, the About page and these legal pages, analytics also records how you move around the page, including clicks and scrolling, so we can see where people get stuck. It never records the sign-up or log-in pages. That recording runs only on those pages, and never on your dashboard or any other signed-in screen, so your accounts, balances and charges are never recorded, and text is masked before it leaves your browser. We do not log full account numbers or full transaction details tied to you, and analytics never receive your balances, your charges, the names of shops you paid, or your email address.
How we use it
To provide the service (show your accounts, explain transactions in plain English), to support you, and to keep the app secure and working. We do not sell your personal information, and we do not use your financial data for advertising.
The AI explanation feature
When you tap a transaction for an explanation, we send that transaction’s details to our AI provider (Anthropic): its amount, date, category, and the merchant name and description your bank supplied. So the explanation can say whether a charge is usual for you, we also send a small number of your recent charges at that same merchant, their dates and amounts only. Klir works out what you have spent there this month itself, and that figure is never sent to Anthropic. We never send your full transaction history, your account balances, your name, your email address, or any other Klir user’s data.
Notes are private by default. If you switch a note on for Klir, that note’s text is sent to Anthropic in two places: as context when Klir explains a charge, and when you ask Klir for a suggestion about that note. A note you have not switched on is never sent. You can switch a note off at any time, and it will not be included in anything sent after that.
If the weekly summary email is switched on, we send Anthropic the figures that go in that email: the week’s total spending, the previous week’s total and the difference between them, how many charges there were, how much money came in, the amount for each day of that week, your top few categories with their amounts, and the amount and merchant name of your largest charge. If Klir noticed a repeating charge change price, we also send that merchant’s name and the old and new amounts. Klir works out every one of those figures itself; Anthropic only writes the few sentences around them. We never send your balance, an account number, your name, your email address, or your notes. You can switch the weekly email off from a link in any one of them, or in your settings.
AI output is informational only (see the AI Disclaimer).
Who we share it with (service providers)
We share data only with the vendors that run the app, each under their own privacy terms: Plaid (bank connections), Supabase (secure database and login), Google (sign-in), Anthropic (AI explanations, note suggestions, and the weekly summary email), Resend (email delivery), Vercel (hosting), PostHog (product analytics, only if you accept the analytics banner), and Sentry (error reports). We do not sell data or share it with advertisers.
Security
We protect your data with encryption in transit, access controls that scope every record to the logged-in user, secrets kept server-side only, and least-privilege access. No system is perfectly secure. What limits the damage here is what Klir does not hold: we never receive your bank login, and the read-only connection Plaid gives us carries no permission to move, send, or withdraw funds.
Your choices and rights
You can export a copy of your data, disconnect a bank account, or delete your account and all its data, at any time from your Settings page. For any other request about your data, email support@klirapp.com. Depending on where you live (for example California or the EU), you may have additional rights to access, correct, delete, or restrict use of your data, and to opt out of any “sale” or “sharing” (we do neither). We will honor valid requests as the law requires.
Data retention
We keep your financial data only while your account is open. When you delete your account, we immediately disconnect your bank connection through Plaid and permanently delete your account and the personal and financial data in it within 30 days, except limited records we must keep for legal or security reasons (for example fraud or tax records).
Joining our launch waitlist is separate from holding a Klir account. Deleting an account does not remove a waitlist entry. To have your email removed from the waitlist, email support@klirapp.com.
Children
Klir is not intended for children under 18. We do not knowingly collect data from children under that age.
Changes and contact
We will post any changes here with a new effective date. Questions or requests: support@klirapp.com. JMM Technologies LLC, New York.