Privacy Policy

Last updated 12 October 2026

Klire is run by one person. This policy is written plainly because I'd rather you actually read it than skim a wall of clauses.

Who is responsible

Klire ("Klire", "we", "I") is operated by Daniel Kirhmayer as an individual sole operator. There is currently no incorporated company behind it. For anything in this policy — including a request to delete your data — email hello@klireapp.com and it reaches me directly.

What Klire collects

When	What
You join the waitlist	Your email address, the referral source in the link you arrived from, your browser's user-agent string, and the time you signed up.
You get a beta account	Your email address and a password, handled by Supabase Auth. Your password is hashed — I never see it and cannot recover it.
You fill in your profile	Whatever you type: name, company name, funding stage. All optional.
You use the terminal	The figures you enter — cash, burn, revenue, expense lines, planned items, scenarios, transactions you add by hand, and any monthly reports you save.
You visit the site	Aggregate, anonymous page statistics via Plausible, on the landing page only. Plausible sets no cookies and collects no personal data. It is not loaded on the sign-in page, on these legal pages, or anywhere inside the terminal.

What Klire does not collect

Klire is not connected to any bank. The Mercury, Stripe and Plaid switches in the product are interface only — they are part of the design, not live integrations. Klire cannot see, read or move money in any real account, and no banking credentials are ever requested or stored. If that changes, this policy will be updated before it ships, not after.

The demo sends nothing. Numbers you type at klireapp.com/demo stay in your browser. No account is created and nothing is transmitted or stored — the page does not even open a connection to the database.
No tracking cookies. Browser storage is used for exactly two things: which colour theme you picked, and your sign-in session if you have an account.
No advertising, no data sales. Your data is never sold, rented, or shared with advertisers. There is no scenario in which that changes without your explicit opt-in.
No profiling or automated decisions that produce legal effects for you.

Why, and on what legal basis

Waitlist email — your consent, given when you submit the form. Used to tell you when the beta opens and to send occasional build updates. Reply "unsubscribe" to any of them and you're removed.
Account and terminal data — necessary to perform the service you asked for. Without storing your figures, the product cannot show them back to you.
Aggregate analytics — legitimate interest in knowing whether the site works. No individual is identifiable.

Where it is stored, and who else touches it

Klire is a small stack, and these are all of it:

Service	Role
Supabase	Database, authentication and server functions. Hosted on AWS in the United States (us-east-1). Your rows are protected by row-level security so one account cannot read another's data.
Netlify	Serves the website. Sees your IP address as part of delivering pages, as any web host does.
Resend	Delivers the welcome and product emails. Receives your email address for that purpose only.
Plausible	Privacy-focused, cookieless analytics. Aggregate counts only.
Google Fonts & jsDelivr	Serve the typefaces and one JavaScript library. Loading them exposes your IP address to those providers, as with most websites.

If you are in the EU or UK, note that your data is stored in the United States. Transfers rely on the providers' own standard contractual clauses.

How long it is kept

Waitlist entries — until you ask to be removed, or until the waitlist is retired.
Account and terminal data — until you delete your account or ask me to delete it.
Email delivery logs — kept by Resend on their own retention schedule.

Your rights

Wherever you live, you can ask for any of the following, and I will do it:

A copy of everything stored about you
Correction of anything wrong
Deletion of your account and all associated data
Removal from the waitlist and all emails
An export of your terminal data in a machine-readable format

Email hello@klireapp.com. The legal maximum is 30 days; in practice it will be the same week, because there is one of me and very few of you. If you are in the EU or UK and unhappy with how a request was handled, you may complain to your national data protection authority.

Security, stated honestly

Data is encrypted in transit and at rest by Supabase. Access to the database is restricted to the account owner. Row-level security means the app itself cannot read another user's rows even if it tried.

What I will not claim: Klire is a beta run by one person. It has not had an independent security audit and holds no compliance certification. Do not treat it as a system of record. Keep your authoritative figures wherever you keep them today.

Children

Klire is a business tool and is not intended for anyone under 16. If you believe a child has signed up, email me and I will delete the account.

Changes

If this policy changes materially — particularly if real bank connections are added — the date at the top will change and anyone with an account will be emailed before it takes effect.