Privacy Policy

Who we are

We run Hey Klippi (heyklippi.com) and are responsible for your data. For anything privacy-related, write to [email protected].

What data we process

• Account: your e-mail address, plan, when the account was created, and your sign-in sessions. We don't store passwords; you sign in with a one-time e-mail link.
• Usage records: how many questions you asked and background tasks you ran, which model was used, token, audio-length and character counts, and the estimated cost. The content of your questions is not in these records.
• Device fingerprint: on the free plan only, a one-way hash (SHA-256) of the Windows machine ID. The raw ID never reaches our server. It exists so that deleting and re-creating an account can't reset the free limits.
• Payment: Our payment provider takes the payment. Your card details never reach us; we keep the subscription status, subscription and customer IDs, and your e-mail.
• Phone link (optional): your WhatsApp or Telegram chat ID and when you linked it.
• Suggestions: anything you write to us from the Suggest page.
• Affiliate code: if you arrived through an affiliate link, the code is kept in your browser for 30 days and saved to your account at first sign-in.

Where your screen and voice go when you ask

Klippi only works when you press the shortcut (or send a request from your phone). At that moment your screenshot, voice recording and text are sent to AI providers to produce the answer:

• OpenAI: generating the answer, speech-to-text and the standard voice.
• Anthropic: the model used for hard tasks on Pro and Beta plans.
• ElevenLabs: the natural (premium) voice, if selected.

Do we keep it

We don't store screenshots, voice recordings or the text of your questions in our database; we only keep the usage metadata above. The content is processed by the AI providers under their own terms and retention rules, which we don't control. If something sensitive is on screen (a password, banking details, a private conversation), don't press the shortcut.

Using it from your phone

Messages, voice messages, photos and files you send on WhatsApp or Telegram are forwarded to Klippi on your computer; results (files, screenshots, answers) come back to the same chat. This content is not stored in our database. WhatsApp messages pass through the Zernio relay service and Telegram messages through the Telegram Bot API; their own privacy terms apply. You can remove the link from the app at any time.

What stays on your computer

• Your settings and preferences are stored on this computer.
• If you use your own API key, it is stored only on this computer, protected with Windows encryption (DPAPI).
• File tasks only reach Downloads, Desktop, Documents, Pictures and the open folder; deleted files go to the Recycle Bin.
• The screen and microphone are only used when you press the shortcut.

Website, cookies and e-mail

• We don't use advertising or analytics cookies on the site. When you sign in, essential httpOnly cookies (hk_at, hk_rt) keep your session, and short-lived ones (hk_ls, hk_lc) are used during the sign-in flow.
• Your browser's local storage only holds the affiliate code and the plan you picked, so checkout can continue after sign-in.
• If you arrived through an affiliate link, our payment provider may set its own affiliate cookie.
• Sign-in links are sent by e-mail through Resend.

Why we process data

To provide the service and manage your account, enforce usage limits, run payments and subscriptions, prevent abuse and fraud, keep things secure, and meet our legal obligations. Our legal bases are performing the contract, legal obligations and our legitimate interests.

Who we share it with, and transfers abroad

We don't sell your data or use it for advertising. To run the service we use these processors: OpenAI, Anthropic and ElevenLabs (AI), our payment provider, Resend (e-mail), and Zernio and Telegram (phone access). Most of them operate outside Türkiye, so your data may be transferred abroad. By using these features (for example by pressing the shortcut or paying), you accept that transfer.

How long we keep it, and how to delete it

We keep account data until you delete your account. You can delete it yourself from the Account page: your account, sessions, the link between you and your usage history, and your phone links are deleted, and any active subscription ends. Usage cost records remain, de-identified. Payment records are kept for the legal retention period by our payment provider and by us, with the link to your account removed. To stop the free limit from being abused, the one-way device hash and its counters may remain, de-identified, after deletion.

Your rights

Depending on where you live (KVKK, GDPR and similar laws) you may have the right to access, correct, delete, object to processing of, and port your data. Write to [email protected] and we'll reply within a reasonable time. You don't need to write to delete your account.

Children

Hey Klippi isn't aimed at children. If you're not of legal age to enter a contract, use it with your parent's or guardian's permission.

Changes

If we update this policy we change the date at the top, and we'll announce important changes in the app or by e-mail.