Privacy at KlarFort

Last updated: August 28, 2026

This Privacy Policy explains how EFMC DIGITAL FOR WEB-DESIGN CO. L.L.C S.O.C, referred to on this site as EFMC Digital LLC ("EFMC", "we", "us", or "our"), provides KlarFort and handles information. Where applicable, EFMC is the data controller for the personal data processed as described in this Policy. KlarFort is the product and brand name.

KlarFort is private by design. Your core portfolio records, original documents, and chat history live on your device. KlarFort does not persist your full portfolio tables on its servers. There are no ads, and your data is never sold.

When you choose an AI feature, KlarFort sends the request, files you attach, and the relevant portfolio context needed to answer it. KlarFort does not write chat messages, attachments, or portfolio snapshots to its persistent server storage. Selected AI outputs and rules are kept as described below. Personalized Insights reports, evidence links, snooze state, and resolution state stay on your device; KlarFort does not keep a durable server copy of those personalized reports or portfolio records. KlarFort still keeps the limited pseudonymous service, security, reporting, and deletion-safeguard records required to operate the wider service.

Privacy in plain language

Portable backups stay under your control

Export and import happen on your device. A portable backup can include your core financial records, supported settings, custom rules, saved risks, and other user-created content. KlarFort then hands the file to the save and share controls provided by iOS or Android. KlarFort's servers do not receive, route, or store the backup file.

You decide where the file goes. After you share or save it, the destination's privacy and security terms apply. The backup is not separately encrypted by KlarFort, so protect it like a financial document.

KlarFort on iOS and Android can import the backup. Each imported file can be up to 50 MB. Original document and attachment contents, chat history, authentication information, net-worth snapshot history, and generated Insights reports are not included.

Import combines data according to its type. Core financial records with matching IDs are updated, new core financial records are added, and core financial records that exist only on the destination remain there. Custom rules and import history from the backup replace those destination lists. Current compatible versions restore notification settings from the backup. A recognized last document kind is preserved, while the preferred document source and reuse choice reset to current defaults. Sharing-privacy choices also reset to current defaults rather than being restored.

Summary of data practices

This summary is provided to align with the disclosure formats used by Apple's App Privacy Details and Google Play's Data Safety section. The detailed sections below are authoritative.

• Data stored and linked to a pseudonymous service profile: a pseudonymous identifier; limited access, purchase-verification, security, and service records; an optional push delivery token; selected AI feature outputs; and information you submit when reporting an AI response. Personalized Insights reports are not added to this server profile.
• Data transmitted for consent-gated AI processing: your request, attached documents or images, and relevant portfolio context may be sent through our backend to Anthropic, Google, or OpenAI. KlarFort does not persist chat messages or attachments on its servers. Stored AI outputs and the local-only Insights contract are listed in What we store.
• Data kept on your device: your full portfolio records, documents, and chat history remain local unless you choose an action that transmits some of that content, such as an AI request or an AI response report.
• Data used for optional advertising measurement: after you choose Accept & Allow Measurement on KlarFort's single Terms & Privacy screen, a measurement provider may automatically report an app install and app sessions and, at most once, the first verified paid-subscription event, together with the limited identifiers and technical attribution data described below. On iOS, user-level measurement and provider-managed conversion values start only if you also authorize tracking through Apple's separate prompt. Before the app's interactive screens, iOS makes only a registration call for Apple's delayed aggregate App Store attribution; that call does not start a user-level measurement session, emit an SDK event, or select a conversion value.
• Data shared for sale, advertising, or cross-context behavioural advertising: KlarFort never sells your data. If you opt in to advertising measurement, the limited event, identifier, and attribution data described below may be processed by measurement and advertising partners to measure KlarFort ads. Depending on your jurisdiction, that processing may be considered targeted advertising, cross-context behavioural advertising, or "sharing" even though no data is sold.
• Data used for public website analytics: visits to klarfort.com and www.klarfort.com produce aggregate traffic and page-performance metrics through cookie-free Cloudflare Web Analytics, as described below. These metrics are separate from in-app advertising measurement and do not include KlarFort app content.
• Service providers we use to deliver and measure the product: Apple App Store and Google Play for subscription billing; AI providers for consent-gated AI processing; platform notification services for opted-in notification delivery; measurement and advertising partners for optional ad measurement; Apple for aggregate App Store attribution; a backend-hosting provider; and Cloudflare for public-website hosting, protection, and aggregate website analytics.

What we store

KlarFort does not use an email address, name, or social-login identity as your account. The service operates a pseudonymous profile for access and verified subscriptions. It stores the following records:

• Pseudonymous access profile. KlarFort assigns a pseudonymous identifier used to provide access without creating an email, password, or social-login account.
• Access, purchase-verification, and abuse-prevention records. KlarFort keeps limited records needed to provide access, verify App Store or Google Play purchases, protect the service, and prevent repeated or fraudulent use. Those records are not sent to advertising providers. A verified first paid subscription may authorize only the separate, limited measurement event described below. Some of these records remain after account deletion because deleting them would allow the same access evidence to be reused.
• Purchase provenance and measurement eligibility. KlarFort may keep store-authenticated purchase dates and whether purchase evidence came from a production or test environment. Existing records can remain unknown until the store supplies authenticated evidence. The service may also retain an opaque event identifier solely to ensure that the first-paid-subscription measurement event is authorized once and that renewals, restores, plan changes, billing recovery, previews, introductory periods, replayed verification, and test or sandbox purchases do not become new conversion events. No receipt, order identifier, transaction identifier, price, currency, tier, cadence, portfolio value, or payment-card detail is sent with that event.
• Notification delivery token, category preference, and content capability (optional). If you enable push notifications, KlarFort stores the operating-system token needed for delivery, whether that device has Risk notifications enabled, and the notification-content and accepted-policy versions your app reports. They are removed on account deletion and stale registrations are cleaned after 30 days without an update. A device receives backend risk alerts only while its Risk category is enabled; older app registrations that did not report that choice are treated as disabled until an updated app confirms it. Older or not-yet-accepted app versions receive generic lock-screen text. After you accept this policy revision, review reminders may identify the review cadence, and a risk alert may identify only a broad risk category and whether its severity is warning or critical. Names, amounts, counts, scores, model-written findings, evidence, and recommendations remain inside the app.
• Temporary service-limit records. KlarFort keeps limited usage counts for up to 30 days to enforce service limits and prevent those limits from being reset through deletion and recreation. These records contain no prompt, portfolio record, attachment, AI output, or report excerpt.
• Selected AI outputs generated for you (only if you consent to AI features). The daily recommendation generated for your account (kept for up to 90 days), your latest background-monitoring analysis (one snapshot, replaced by each newer analysis), and the custom rules you create or accept from the assistant (kept until you delete them). These records are removed when you delete your account.
• Personalized Insights reports stay local. When this feature is available in your app version, generated personalized reports, evidence references, cadence history, and your snooze or resolution state stay in app-private storage on your device. KlarFort processes the data needed to generate each report but does not durably store personalized portfolio facts, rules, questions, search queries, or reports for this feature.
• AI response reports (only when you submit one). KlarFort stores a reference to the reported response and a short excerpt under your pseudonymous service profile so the report can be reviewed for safety. A report is not a support ticket and does not guarantee an individual reply. Up to 100 reports are retained per profile; each is removed within 365 days under scheduled cleanup or earlier when you delete your account.
• Deletion safeguards. KlarFort retains limited security records needed to keep deleted access invalid and to ensure erased active data is not restored during disaster recovery. These safeguards do not restore deleted portfolio or AI-output data.
• Security and operational records. Service logs may contain a pseudonymous identifier, request reference, timestamp, outcome, connection metadata, and security or error event. Logs are used to operate and protect the service and may be retained where necessary for security, fraud prevention, incident response, or legal obligations.

Your complete portfolio tables (assets, liabilities, cash flows, projects, and obligations) are not persisted on KlarFort servers. Outside optional ad measurement, KlarFort does not collect advertising identifiers. KlarFort does not collect precise location, contact lists, microphone data, health or fitness data, biometric data, or financial-account credentials. Content sent for consent-gated AI processing is not written to persistent KlarFort storage. The exceptions are the selected AI outputs and user-submitted reports described above; personalized Insights outputs are not an exception because they remain on the device.

Marketing website analytics

Both klarfort.com and www.klarfort.com use Cloudflare Web Analytics to measure aggregate website traffic and page performance. The metrics may include page paths, referring sites, country, general browser, device, and operating-system categories, navigation type, and page-performance timings. We use these reports to understand how the public website is used and improve its reliability and performance.

Cloudflare Web Analytics does not use cookies or local storage to collect these usage metrics, does not fingerprint individuals, and does not track individual visitors across Cloudflare customers' sites. KlarFort does not use it to build advertising profiles. This website analytics is separate from the optional in-app advertising measurement described below and does not receive any KlarFort portfolio records, documents, chat messages, or AI content.

Optional advertising measurement

KlarFort has no in-app ads. After the opening subscription screen, the app presents one Terms & Privacy screen with two clear actions. Accept & Allow Measurement accepts the Terms, Privacy Policy, and Disclaimer and opts in to the optional measurement described here. Accept Without Measurement accepts the same legal documents while keeping user-level measurement off. Both actions confirm that the user is at least 18, and both provide the same app access. The measurement choice is independent of the separate just-in-time AI consent and does not affect the seven-day Premium preview, purchasing, restoring purchases, or subscription benefits.

User-level measurement. If you allow it, KlarFort starts a measurement provider's SDK, which may automatically report the app install and app launches or sessions and, at most once, the first verified paid-subscription event. The provider may create or access a provider-generated device identifier and process an IP address, IP-derived approximate location, network information, app version, operating-system version, device model, and other standard app and device metadata. On iOS, this path starts only after Apple's App Tracking Transparency status is authorized and may use IDFV and the IDFA Apple then permits. On Android, it may use the Google Advertising ID (GAID), App Set ID, and Google Play Install Referrer data where available and permitted. The provider may share these limited events, identifiers, and attribution data with advertising partners to measure KlarFort campaigns and distinguish paid from organic acquisition. KlarFort does not set a custom measurement user ID or provide a backend measurement event ID to Apple or measurement and advertising partners. It does not send a name, email address, phone number, KlarFort account identifier, portfolio record, holding, balance, cash-flow amount, AI content, file, receipt, order or transaction identifier, price, revenue, currency, product, tier, or billing cadence.

Apple aggregate attribution. Before the app's interactive screens, iOS calls a registration-only bridge to register the install with Apple's privacy-preserving ad-attribution framework. That call does not start a user-level measurement session, emit an SDK event, select a conversion value, or store an Apple-attribution marker. After a user chooses Accept & Allow Measurement and authorizes Apple's separate tracking prompt, KlarFort starts user-level measurement with provider-managed conversion values; the configured provider model is then the sole conversion-value manager. KlarFort does not directly update an AdAttributionKit or SKAdNetwork conversion value. Apple controls delayed, signed postbacks and may send copies to the measurement provider and the relevant ad network. These aggregate postbacks do not expose an advertising identifier or identify a particular user or device to KlarFort or its measurement and advertising partners.

Choice, delayed consent, and withdrawal. The opening subscription screen appears before the unified Terms & Privacy choice. If a first paid subscription is verified there, the app may keep only an opaque measurement event identifier briefly on the device while you make that choice. That identifier is local authorization and deduplication state: it is never forwarded to Apple or measurement and advertising partners. The first-paid event is reported only if you choose to allow measurement and, on iOS, authorize tracking; otherwise the identifier is deleted. KlarFort does not backfill other events. If you choose Accept Without Measurement or Apple's tracking status is denied or restricted, iOS performs only the registration-only aggregate install path, with no provider-managed subscription conversion. You can turn Ad Measurement off in Settings to stop future user-level sharing and managed subscription conversions and clear pending local measurement state. Changing this setting cannot prevent or recall an aggregate install registration or data already received by Apple or measurement and advertising partners; their retention and rights-request procedures apply to that data.

AI features require your consent

KlarFort offers optional AI assistance: chat with the in-app assistant, daily insight notes, document import, and periodic background monitoring on paid tiers. These features are off until you agree to use them. The first time you open an AI feature, the app presents a consent screen that explains what will be shared and with whom; nothing is sent to any AI provider until you tap Agree and Continue. You can withdraw this consent at any time in the app under Settings > AI Data Sharing. Withdrawing consent immediately blocks any new AI request from the app and cancels an assistant response that is still streaming; a request already submitted to our servers finishes processing, and nothing further is sent.

When you use an AI feature, the app transmits a payload through our backend to our AI providers for processing, and the response is returned to you. The payload may contain:

• The text of the question or prompt you wrote.
• Any document, image, or other file you yourself attach to the request.
• A snapshot of the portfolio records you entered in the app (asset, liability, cash-flow, obligation, and project entries with their names, amounts, dates, and notes), together with derived metrics such as net worth, runway, and risk signals, your custom rules, and your default currency.

KlarFort does not automatically add your name, email address, service-access credentials, or purchase credentials to the AI payload. Text and files you choose to submit may themselves contain personal information, so review them before sending. Requests are made by our servers on your behalf, so your device identifier and network address are not supplied to the AI provider as request identity fields.

Who receives it. Conversational and analysis requests are processed by the AI providers we may use: Anthropic PBC, Google LLC, or OpenAI, L.L.C. Documents and images you attach may also be processed by Google LLC to read their contents before your request is answered. Whichever providers process a request act as service providers under enterprise data-processing terms that restrict processing to delivering the service to us, impose confidentiality and security obligations consistent with the protections in this policy, and prohibit using your data to train their models.

Search and research separation. Some AI features may use public web search or public market and economic reference sources. When you use chat search, the search provider may receive a query derived from your request. KlarFort directs the assistant not to include private portfolio details in that query. Personalized Insights research sends public-research services only generic research requests or public reference values, not your raw question, rules, names, notes, amounts, portfolio rows, scores, or identifiers.

Retention. Your messages, attachments, and portfolio snapshots are used only to process your request and a short retry window; they are not written to persistent KlarFort server storage. KlarFort keeps the selected outputs listed in What we store: daily recommendations (up to 90 days), the latest monitoring analysis (replaced by each newer one), and custom rules. Personalized Insights reports and actions remain on your device.

Reporting an AI response

Reporting is optional. When you use the in-app report action, KlarFort sends and stores a reference to the reported response and a short excerpt under your pseudonymous service profile for safety review. The report does not transmit your full conversation unless that content is part of the excerpt shown by the app. Up to 100 reports are retained per profile; each is removed within 365 days under scheduled cleanup or earlier with the deletable data when you delete your account. Use the contact channel below for a support request or a reply.

Third-party services

Service providers involved in delivering KlarFort include:

• Apple App Store and Google Play, which handle paid subscription billing, provide receipt or purchase information used to verify your tier, and send authenticated subscription-lifecycle signals. KlarFort does not see your payment-card details.
• Anthropic, Google, and OpenAI, the AI providers we may use for consent-gated AI features, which receive the payload described in AI features require your consent only after you agree and only when you use those features.
• Public research and market-data services, which may receive a query derived from your request when you use chat search, or generic research requests and public reference values for Personalized Insights. KlarFort directs chat search not to include private portfolio details.
• Apple Push Notification service (APNs) and Firebase Cloud Messaging (FCM), used only as transport for the notifications you opted into. KlarFort also enforces the per-device Risk-category choice before sending a backend risk alert.
• Hetzner Online GmbH, which hosts KlarFort's backend and database infrastructure.
• Cloudflare, Inc., which hosts and protects the public klarfort.com and www.klarfort.com websites and provides the aggregate Cloudflare Web Analytics described above. The analytics receives website traffic and page-performance metrics, not your in-app portfolio or other KlarFort app content.
• Measurement and advertising partners, which may process user-level install, session, first-paid-subscription, identifier, network, app, device, and attribution data only after the required in-app choice and, on iOS, tracking authorization. A measurement provider may also receive Apple's delayed aggregate postback copies from the registration-only iOS install path and may pass the limited measurement data to connected advertising partners selected by KlarFort. These partners do not receive KlarFort portfolio or AI content through this integration.
• Apple ad-attribution services, which may deliver delayed aggregate App Store campaign postbacks and configured postback copies without exposing a user-level advertising identifier.

The app contains a measurement SDK but contains no ad-serving or social-login SDK. KlarFort does not display ads in the app.

What we do not do

• No connected financial accounts or automatic aggregation. KlarFort does not connect to bank, brokerage, or exchange accounts, collect financial-account credentials, or automatically retrieve or aggregate records from financial institutions.
• No custody or tracked-asset transactions. KlarFort does not hold or move money or financial assets and does not execute, route, or facilitate transactions involving the accounts, assets, or instruments you track.
• No KlarFort backup hosting. Portable backup files are not received, routed, or stored by KlarFort servers.
• No in-app advertising. The product has no ad surfaces. The optional measurement integration described above measures KlarFort's own advertising and does not select or display ads inside KlarFort.
• No social sign-in providers. We do not request access to third-party identity profiles.
• No data selling. Your information is not for sale and never will be.

Subscriptions and in-app purchases

If you subscribe, billing is handled by Apple App Store or Google Play. Their terms and native purchase sheet govern your purchase, including the price and billing period, auto-renewal, billing cycles, family sharing, and price changes. KlarFort subscriptions carry no store trial period; the optional app-managed preview requires no payment method and is never billed by any store. KlarFort processes the purchase information needed to confirm your tier and protect against misuse. KlarFort does not see, store, or process your payment-card details. Cancellation is performed in the same store account that originated the purchase, not by deleting your KlarFort profile. Unless you cancel in that store, billing continues on the store's normal schedule after KlarFort account deletion.

Data retention

• Daily recommendations are kept for up to 90 days. The latest monitoring analysis replaces the previous analysis. Custom rules remain until you delete them where the app provides that action or delete your account. Personalized Insights reports and actions remain on your device rather than under this server retention schedule. Up to 100 AI response reports are retained per profile, each for no more than 365 days under scheduled cleanup or until earlier account deletion.
• Optional push-token records are removed on account deletion and stale registrations are routinely cleaned. Temporary service-limit records may remain for up to 30 days so deletion and recreation cannot reset current limits.
• Limited access, purchase-verification, and abuse-prevention records may be retained indefinitely where needed to prevent duplicate or fraudulent use. They are not sent to advertising providers; only the separate opaque first-paid measurement authorization described above can be used to permit one limited event.
• Your optional Ad Measurement choice and pending event state are stored on the device until you turn the feature off, reset the app, or the state is no longer needed. The opaque server-side first-paid event identifier may remain as a deduplication safeguard and is not sent to attribution providers. Apple and measurement and advertising partners apply their own retention periods to data and aggregate postbacks they receive.
• Cloudflare retains unsampled Web Analytics beacon data for seven days and aggregates it to around 10% of the original volume for longer-term storage. KlarFort can access Web Analytics data for the previous six months. KlarFort does not use these aggregate reports to create a person-level website analytics profile, and they are not part of your app-profile retention.
• Deletion safeguards remain after active profile data is erased so deleted access stays invalid and erased content is not restored.
• Encrypted disaster-recovery copies may contain earlier data for up to seven days. Completed deletion requests are reapplied before a recovered copy can serve.
• Security, operational, support, and legally required records are retained only as needed for their stated security, incident-response, request-handling, fraud-prevention, or legal purpose. KlarFort does not promise a fixed deletion date where the applicable obligation or security need determines the period.

Data deletion

You can delete your account at any time:

• From inside the app: open Settings, choose Delete Account, and confirm. After the service confirms deletion, KlarFort removes local app data, including local Insights reports and actions, and deletes the active profile data described above.
• Without the app: follow the public request process at klarfort.com/delete-account. KlarFort accounts do not have an email address on file, so the address you email from does not identify a profile. Support will request secure purchase or device-context verification sufficient to locate the pseudonymous profile without exposing or deleting another person's data.

Reset App Data is not account deletion. Reset clears local app data, including the Ad Measurement choice and pending measurement events, and disconnects the current device, but it does not request server erasure, recall data already sent to attribution providers, or remove stored AI outputs and reports. To erase active server data, use Delete Account first and wait for it to succeed before resetting or uninstalling.

The limited access, purchase-verification, abuse-prevention, service-limit, and deletion-safeguard records described in Data retention are not all erased with active profile data. Historical recovery copies may retain prior data for up to seven days, but completed deletion requests are reapplied before a recovered copy can serve. Active store subscriptions must be cancelled separately in the App Store or Google Play account that originated the purchase. Deleting KlarFort does not cancel billing. A later verified recreation does not restore erased active profile or local data.

Children

KlarFort is for adults age 18 or older and is not offered to minors, including with parent or guardian consent. We do not knowingly retain account information for anyone under 18. If you are a parent or guardian and believe a minor has created an account, please contact us and we will delete it. KlarFort does not knowingly collect personal information in violation of the Children's Online Privacy Protection Act (COPPA).

International transfers

Our infrastructure operates from facilities that may be located outside your country of residence. By using KlarFort you consent to your account information being processed in those jurisdictions, subject to the protections in this policy. Where required, transfers from the European Economic Area, the United Kingdom, or Switzerland are made under appropriate safeguards such as the Standard Contractual Clauses.

Your rights (GDPR, UK GDPR, EEA, Switzerland)

If you are in the European Economic Area, the United Kingdom, or Switzerland, you may have rights to access, correct, restrict, port, and erase personal data, and to object to processing or withdraw consent. Our lawful bases are: contract to deliver a subscription; consent for consent-gated AI features, notifications, and user-level advertising measurement; legitimate interests, where permitted, for privacy-preserving aggregate campaign measurement, privacy-preserving aggregate website traffic and page-performance measurement, service security, limit enforcement, fraud prevention, repeated-misuse prevention, and investigation of reported AI responses; and legal obligation where applicable. AI consent can be withdrawn under Settings > AI Data Sharing, and advertising-measurement consent can be withdrawn under Settings > Ad Measurement. To exercise a right, use the in-app deletion action or email contact@klarfort.com. Because no account email is stored, support must securely verify the pseudonymous profile before acting on a profile-specific request. You also have the right to lodge a complaint with your local supervisory authority.

California residents (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the CPRA, gives you the right to know what personal information we collect, the right to delete it, the right to correct it, the right to limit the use of sensitive personal information, the right to opt out of "sale" or "sharing", and the right not to be discriminated against for exercising these rights.

Notice at collection. The categories of personal information involved in KlarFort, the purposes for which they are used, whether they are stored on our servers or transmitted ephemerally, and the retention period for each are:

• Identifiers (a pseudonymous service identifier, limited access and purchase-verification identifiers, optional push token, request reference, connection metadata, and, only after optional measurement consent, SDID; IDFV and authorized IDFA on iOS; and GAID and App Set ID on Android): used for access, service delivery, security, notification delivery, fraud prevention, and optional advertising measurement; retained as described in What we store, Optional advertising measurement, and Data retention.
• Commercial information / Purchase History (the store, product, tier, purchase status, renewal information, verification information, and whether a first paid subscription occurred): used to verify access and prevent duplicate or fraudulent use; the fact of a first paid subscription, without price or product detail, may also be used for optional advertising measurement. Limited verification records may be retained indefinitely as described above.
• Internet or other electronic network activity information (service requests, limited usage counts, optional push delivery data, after optional measurement consent, app-install, session, and attribution activity, and public-website page paths, referrers, country, general browser, device, and operating-system categories, navigation type, and performance timings): used to operate, protect, deliver, and optionally measure the service and to understand and improve the public website. Temporary service-limit records may remain for up to 30 days solely to enforce current limits. Website analytics retention is described in Data retention.
• User-attached content for consent-gated AI features (your prompt text, the portfolio snapshot described in AI features require your consent, and any document, image, or other file you yourself attach to a request, which may include financial information, files, photos, or images): used solely to fulfil the AI request you sent; not written to KlarFort server storage; processed by Anthropic, Google, or OpenAI as service providers under contractual data-processing terms.
• AI outputs generated for you (daily recommendations, the latest monitoring analysis, custom rules, and local personalized Insights reports): used to show you your own insights without regenerating them. The selected outputs and rules are retained on the server as described in What we store and Data retention; personalized Insights reports remain in app-private storage on your device. Both are removed through the applicable account-deletion and local-reset flow.
• Reported AI response content (a reference to the response and an excerpt): submitted only when you report a response; up to 100 reports are stored under the pseudonymous service profile for safety review, each for no more than 365 days under scheduled cleanup or until earlier account deletion.

Sale and sharing. KlarFort does not sell personal information. If you choose Accept & Allow Measurement, limited identifier, install, session, and first-paid-subscription data may be disclosed to measurement and advertising partners; this may be considered "sharing" or targeted advertising under California or other state law. KlarFort obtains an affirmative opt-in before user-level measurement and provides an in-app control to stop future sharing. Apple aggregate attribution does not identify a particular user or device.

Sensitive personal information. AI content you choose to send may contain financial or other sensitive information. KlarFort uses it only to fulfil the request you initiated and does not use it to infer characteristics for advertising, sale, or unrelated profiling. You do not need to file a request to limit those unrelated uses; KlarFort does not perform them.

Right of non-discrimination. We will not deny you the Service, charge you a different price, or provide a different level of quality for exercising any of these rights.

To exercise your CCPA rights, use the deletion-request page or email contact@klarfort.com. We respond to verifiable requests within 45 days, with a single 45-day extension where reasonably necessary, in line with the timelines set by California law.

Other US state privacy rights

Residents of other US states with comprehensive consumer-privacy laws (including but not limited to Colorado, Connecticut, Delaware, Indiana, Iowa, Montana, Oregon, Tennessee, Texas, Utah, and Virginia) may have rights similar to those described in the GDPR and CCPA sections above. The same email and deletion-request channels apply.

Security

We apply current industry-standard practices, including encrypted transport, restricted production access, monitoring, and data minimization, to protect the pseudonymous service data we hold and communication between the app, our servers, and consent-gated AI providers. No system is perfectly secure. To report a security concern, use the responsible-disclosure channel.

Changes to this policy

If we materially change how we handle your data, we will update this page, revise the Last updated date, and surface a notice in the app on next launch. Your continued use of the Service after a change becomes effective constitutes acceptance of the revised policy. We will not retroactively make material changes that reduce your privacy rights without your consent. Editorial clarifications and fuller disclosures that do not change how KlarFort handles data do not trigger a new in-app acceptance notice.

Contact

Questions, requests, or concerns about this policy may be sent to the privacy-support address below. Full provider, licence, address, telephone, and corporate-contact details are available on the Contact page.