privacy policy.
kleosvic is a small studio. it keeps what it needs, and nothing else. this page explains what that means when you use this site, sign in with an account, or run one of our apps.
what we hold
to sign you in we keep your email. if you add them, a display name and a profile picture. that is the whole list. nothing else is collected.
why
to sign you in, and to show you your account. your data is not used for anything else.
where it lives
your account data is stored by supabase, the service we build on for authentication and the database. the site itself is served by render. your data stays inside those services. we do not sell it, we do not rent it, and we do not show you ads.
who helps us run it
we rely on a few processors: supabase for accounts and storage, render for hosting, and cloudflare for the human check on the sign-in pages (cloudflare turnstile reads basic signals like your ip address to block bots). sign-in emails go out through our email provider. none of them may use your data for their own purposes.
sign-in emails
when you sign in we send you a one-time link by email. those messages go out through our email provider and are never used for marketing.
cookies
we use a session cookie so you stay signed in, and a locale cookie to remember your language. we do not run google analytics without your consent: only if you accept optional analytics does google tag manager load measurement. your browser's global privacy control signal is respected, and analytics stays off.
your age
you must be at least 13 years old, or the age your country's law requires for digital consent when that is higher, to create an account. we do not knowingly keep data of younger people. if you believe a child under that age gave us their data, write to hello@kleosvic.com and we will remove it.
your rights
you can see and correct your name and picture any time from your account. you can request a copy of your data, or ask us to delete your account entirely. you can also withdraw your consent to analytics at any time. to do so, write to hello@kleosvic.com. if you are in the european union, you also have the right to lodge a complaint with your local data protection authority. we do not use automated decision-making or profiling.
data transfers
supabase, render and cloudflare may process data outside the european economic area. they use standard contractual clauses to protect your data in accordance with gdpr requirements.
retention
we keep your account data while your account exists. once you ask us to delete it, it is gone.
questions
privacy questions go to hello@kleosvic.com.
kleos music — privacy
kleos music is a local player. your audio files never leave your device.
what it sends
to bring you lyrics, the real album and the explicit badge, the app uses public APIs from lrclib.net, deezer.com, and itunes.apple.com. it sends only the song's own metadata (title, artist, album) to fetch these details. no account, no device identifier, no listening history and no file name ever appear in those requests, and every one of them is encrypted. these services operate under their own privacy policies.
when it asks
before the first of those lookups the app shows you exactly this, once, on your own phone, and nothing is sent until you dismiss it. those lookups are what unlock lyrics, album details and the badge — the rest of the player works with no connection at all. if you never open a song, nothing is ever asked.
what it keeps
your library, your likes, your lists, when you last played each song, and the lyrics and album details it looked up — all of it stays in the app's own private storage on your device. nothing is uploaded to us. deleting a song or uninstalling the app removes it; until then it sits there, readable only by the app itself.
lyrics
when lyrics are not already inside your own file, they come from lrclib.net, a free lyrics database. they are other people's work and we claim none of them. the app credits lrclib.net wherever it shows them.
last updated, august 2026. kleosvic, an independent software studio.