← Back to Kalam

Privacy Policy

Last updated: October 20, 2026

1. What we collect

When you create an account, we collect your email address and display name. When you use Kalam, we store your generated content, preferences (theme, accent color), and usage data (generation count).

2. Threads integration

If you connect your Threads account, we store your Threads access token, user ID, and username in our database. Your access token is stored server-side only and is never sent to or accessible from the browser. We use this token to post content and fetch analytics on your behalf. You can disconnect Threads at any time, which deletes your token from our systems.

3. TikTok integration

If you connect your TikTok account, Kalam uses TikTok Login Kit and the TikTok Content Posting API. We receive and store your TikTok open ID, display name and profile picture link, plus the access and refresh tokens TikTok issues. The tokens are kept server-side only and are never sent to the browser. We use them only to show which TikTok account you are posting to, to read the posting options TikTok offers your account (such as privacy choices), and to publish the posts you choose to send from Kalam, either to your profile or to your TikTok drafts. Kalam sends TikTok the images and caption of each post you publish; nothing is posted without your action. We do not read your existing TikTok videos, followers or messages. You can disconnect TikTok at any time in Settings, which revokes Kalam's access with TikTok and deletes the tokens from our systems. You can also remove Kalam's access from your TikTok app settings.

4. Payment data

Payments are processed by Stripe. We never see or store your credit card number. Stripe may share your email and subscription status with us for billing purposes. See Stripe's Privacy Policy.

5. How we use your data

We use your data to provide the Service (generating content, scheduling posts, managing your account), improve the Service (anonymized usage analytics), and communicate with you (billing emails, service updates). We don't sell your data. We don't use your content to train AI models.

6. Data storage

Your data is stored in Google Firebase (Firestore) and served via Vercel. Both provide enterprise-grade security. Generated content is also cached locally in your browser's localStorage for convenience.

7. Cookies and local storage

We use browser localStorage to store your preferences (theme, accent color), cached content for faster loading, and session data. We don't use third-party tracking cookies.

8. Data retention

Your data is retained as long as your account is active. If you delete your account, we remove your data from our systems within 30 days. Some anonymized aggregate data may be retained for analytics.

9. Your rights

You can request a copy of your data, correction of inaccurate data, or deletion of your account and all associated data by emailing hello@kalam.so. We'll respond within 30 days.

10. Third-party services

Kalam uses Firebase (Google) for authentication and data storage, Vercel for hosting and serverless functions, Stripe for payment processing, Meta Threads API and the TikTok Content Posting API for social posting, and Anthropic/OpenAI for AI content generation. Each has their own privacy policy.

11. Children

Kalam is not intended for users under 13. We don't knowingly collect data from children.

12. Changes

We may update this policy. We'll notify users of material changes via email. Continued use after changes constitutes acceptance.

13. Contact

Privacy questions? Email hello@kalam.so