Privacy Policy

We collect only what Klyte needs to work:

• Account details. Your email address, used to send sign-in links. Our authentication provider also keeps sign-in records, such as the time and IP address of each sign-in.
• App Store Connect key. If you connect App Store Connect, we store your key ID, issuer ID and private key (.p8). The private key is encrypted before it's saved and is only decrypted on our servers to call Apple's API for you.
• Your apps and listings. The apps you add, their App Store listing text and screenshots, your keyword field (if you connect App Store Connect), keyword ranks, audit results, weekly plans and screenshot reviews.
• Changes you make. A history of each listing change you apply through Klyte, including the text before and after, so you can undo it.
• Free audit visitors. If you run a free audit without an account, we store the app you audited and a one-way, salted hash of your IP address. We use the hash only to limit how many audits one visitor can run. We can't turn it back into your IP address.
• App developers' business contacts. When an app appears in an audit, as the audited app or a competitor, we note its developer's name and website from Apple's public data, and look for a contact email published on that website. We use it only to tell developers about Klyte. Every email we send has an unsubscribe link, and we don't sell or share these contacts.
• Screenshots you upload. Images you add to the screenshot editor are processed in your browser. If you ask Klyte to write captions, the images are sent to our AI provider to generate them and aren't stored by Klyte.

We don't use advertising trackers, and we don't sell or rent your personal information. We count page visits and measure page speed with Vercel Web Analytics and Speed Insights, which use no cookies and don't identify you.

• To sign you in and keep your account secure.
• To audit your listing, compare it with competitors, check keyword ranks and suggest changes.
• To apply the listing changes you approve to App Store Connect. Klyte never submits your app for review.
• To prevent abuse, such as bots running free audits or sending sign-in emails.
• To answer you when you contact us.
• To email app developers about Klyte, using business contact details they published on their own website. This is based on our legitimate interest in telling developers about a relevant tool, and you can opt out at any time.

We use these service providers to run Klyte. Each processes data only to provide its service to us:

• Supabase: database and sign-in, including sending sign-in emails.
• Vercel: hosting the website and running our servers, plus anonymous visit counts and page speed (no cookies).
• Anthropic: AI analysis of listing text and screenshots for audits, suggestions and captions. Under Anthropic's commercial terms, data sent through its API isn't used to train its models.
• Inngest: running audits and weekly plans in the background.
• Cloudflare Turnstile: checking that visitors to the free audit and sign-in pages are people, not bots.
• Apple: we read public App Store data from Apple, and if you connect App Store Connect, we use Apple's API with your key to read and update your listing.

We may also share information if the law requires it, or as part of a merger or sale of the business, in which case this policy continues to apply to your data.

Klyte uses a cookie only to keep you signed in. Your browser's local storage remembers your theme, your screenshot editor style and which fixes you've marked as kept. These never leave your device. Cloudflare Turnstile may set its own data to tell people from bots.

• Account data, apps, audits and change history: until you delete your account.
• App Store Connect key: until you disconnect it in Integrations, which deletes it immediately.
• Free audits without an account: up to 12 months. Rate-limit counters: about two days.
• Developer business contacts: until you ask us to delete them. If you unsubscribe, we keep only a note not to email you again.

You can disconnect App Store Connect at any time. To get a copy of your data, correct it, or delete your account and everything in it, email support@r5iot.com. We'll respond within 30 days.

Depending on where you live (for example in the EU, UK or California), you may have further rights, such as to object to processing or to complain to a data protection authority. We'll honor these requests as the law requires.

Private keys are encrypted at rest, database access is restricted per account, and connections use HTTPS. No system is perfectly secure, but we'll notify you without undue delay if a breach affects your data.

Klyte is a tool for app developers and isn't meant for anyone under 16. We don't knowingly collect their data.

If we change this policy, we'll update the date at the top. If a change is significant, we'll tell you by email or in Klyte before it takes effect.