Privacy Policy

Last Updated: June 4, 2026

kliQ Labs, Inc., a California corporation, dba kliQ² (hereinafter referred to as "kliQ," "we," "us," or "our") respects your privacy. This Privacy Policy describes how we collect, use, share, and protect your personal information when you use the kliQ² Service.

This Privacy Policy applies to the kliQ² Service offered at https://kliq2.com. The Service is currently available only in the United States. Users outside the United States are not eligible to use the Service.

By using the Service, you agree to the practices described in this Privacy Policy. This Privacy Policy becomes effective with respect to you on the date you accept it or first use the Service.

1. SUMMARY OF KEY PRIVACY PRACTICES

• We do NOT sell your personal information.
• We do NOT perform facial recognition or biometric identification on any photos or data.
• We do NOT collect biometric data (no voiceprints, no face geometry, no fingerprints).
• We do NOT collect IP addresses, device identifiers, or use browser fingerprinting.
• We do NOT use marketing or advertising tracking pixels.
• We do NOT collect precise geolocation. ZIP code / city-level only.
• Phone numbers are optional. We collect phone numbers only if you choose to provide them, and use them only for account verification, two-factor authentication, account recovery, and transactional notifications. We do NOT send marketing SMS.
• We use Plausible Analytics (cookieless, privacy-focused).
• Your profile photo is not public. It is visible only to users with whom you have completed a kliQ.
• We use Anthropic's Claude AI to perform compatibility analysis. Anthropic does not train AI models on your data under commercial API terms.
• We retain your data while your account is active. Deleted accounts are archived for 3 months, then permanently deleted.

2. INFORMATION WE COLLECT

2.1 Information You Provide

• Account identifiers: name, email address
• Account credentials: password (stored as hashed/encrypted value)
• Questionnaire answers: including potentially sensitive personal information categories (see Section 2.5)
• Profile photo: displayed only to confirmed matches post-kliQ
• Activity/place photos: metadata extracted (activity classification, location indicators); underlying photo not retained
• Compatibility codes used in kliQs
• Phone number (optional): provided at your discretion at signup or in account settings. Phone number collection is never required. If you choose to provide a phone number, you may also separately opt-in to transactional SMS communications (see Section 2.7).
• Reports and feedback about other users and the Service
• Communications with kliQ

2.2 Information We Collect Automatically

• Essential cookies necessary for the Service to function (login session, security)
• Plausible Analytics — cookieless, no IP collection, no cross-site tracking
• Service usage data for operational logging

We do NOT collect IP addresses, device identifiers, or use browser fingerprinting.

2.3 Information From Other Users

• Reports about you from other users
• kliQs initiated by other users using your code
• Mismatch Notes about interactions with you

We do not verify information other users provide about you.

2.4 Information We Derive (Inferences)

• Compatibility scores
• Behavioral patterns
• Compatibility archetypes
• Reporting patterns (about you as a reporter)

2.5 Sensitive Personal Information

Under CPRA, the following questionnaire categories are sensitive personal information:

• Racial or ethnic origin
• Religious beliefs
• Sexual orientation
• Health information
• Financial circumstances (questionnaire context only; payment info handled by Stripe)

You are not required to disclose sensitive personal information. All questionnaire questions include "Prefer not to say" options.

We use sensitive personal information to:

• Generate compatibility analysis
• Improve the Service
• Comply with legal obligations

We do NOT use sensitive personal information for advertising, marketing, or sale to third parties.

You have the right to limit the use of your sensitive personal information by contacting kteam@kliqlabs.com.

2.6 What We Do NOT Collect

• Biometric data
• Facial recognition or face-feature extraction
• Voice samples
• IP addresses
• Device identifiers
• Browser fingerprints
• Precise geolocation
• Genetic data
• Information about users under 18
• Financial account information (handled by Stripe)

2.7 SMS Communications and Consent

Phone number collection is always optional. kliQ may collect your phone number at signup (optional) or when you provide it through your account settings.

Separate SMS opt-in is required for SMS communications. Providing your phone number does NOT, by itself, authorize kliQ to send you SMS messages. To receive SMS communications, you must separately opt in.

Consent record. When you opt in to SMS communications, kliQ stores in your account record:

• A consent flag indicating you have opted in
• The date and time of your consent
• The method of consent (web form, in-app, or other)

This consent record is retained as long as your account is active and as required for TCPA compliance.

Types of SMS we send (transactional only):

• Account verification codes
• Two-factor authentication (2FA) codes
• Account recovery (password reset) messages
• Security alerts (new login, suspicious activity)
• Transactional kliQ notifications (pending reveals, account activity)

Types of SMS we do NOT send:

• Marketing or promotional SMS
• Advertising SMS
• Referral or growth marketing SMS
• Re-engagement marketing SMS

Opting out of SMS. You may opt out of SMS at any time by:

• Replying "STOP" to any SMS message from kliQ
• Updating your preferences in your account settings
• Contacting kteam@kliqlabs.com

Opting out of SMS does NOT terminate your kliQ account. You will continue to receive notifications via email and in-app notification.

Standard message and data rates may apply to SMS communications, depending on your wireless carrier.

3. HOW WE USE YOUR INFORMATION

3.1 To Operate the Service

• Account management
• Compatibility analysis
• Profile photo display to confirmed matches only
• Reports and feedback processing
• Authentication and security
• Support response
• Phone number-based account verification, two-factor authentication, account recovery, and transactional SMS notifications (only when you have separately opted in to SMS — see Section 2.7)

3.2 To Improve the Service

• Refine compatibility logic and AI prompts
• Debug issues
• Internal research
• AI tuning within kliQ

3.3 To Communicate With You

• Account notifications
• Service updates
• Transactional emails
• Transactional SMS (only with your separate SMS opt-in)
• Inquiry responses

We do NOT send marketing communications (email or SMS) without your specific opt-in.

3.4 For Legal and Compliance Purposes

• Legal obligations
• Terms enforcement
• Fraud detection and response
• Protection of rights, safety, and property

3.5 For Business Operations

• Corporate operations
• Reporting
• Investor materials (aggregated, anonymized only)

4. HOW WE SHARE YOUR INFORMATION

4.1 With Other kliQ Users

• Compatibility output revealed to counterparties (compatibility-relevant insights, not raw personal data)
• Profile photo visible to confirmed matches only post-kliQ

Phone numbers are never shared with other users.

4.2 With Service Providers

We share information with service providers bound by Data Processing Agreements. Current service providers:

• Anthropic (San Francisco, CA): AI processing. Under Anthropic's commercial API terms, Anthropic does NOT train its AI models on your data. Phone numbers are NOT sent to Anthropic.
• Stripe (San Francisco, CA): Payment processing. kliQ does NOT receive or store your payment card or bank account information.
• Plausible Analytics (Tallinn, Estonia): Cookieless site analytics with no IP collection.
• Google Workspace (Mountain View, CA): Email infrastructure.
• Resend: Transactional email delivery.
• Twilio (San Francisco, CA): SMS infrastructure for account verification, two-factor authentication, account recovery, and transactional SMS notifications. Twilio receives your phone number only when you have separately opted in to SMS communications. Twilio operates under its own privacy policy at https://www.twilio.com/legal/privacy and is bound to kliQ via Data Processing Agreement.
• Vercel (San Francisco, CA): Website hosting infrastructure.

We will update this Privacy Policy when new service providers are added.

4.3 With Legal Authorities

We may share information with legal authorities when required to comply with subpoenas, court orders, or other legal obligations.

4.4 In Connection With Business Transactions

If kliQ Labs, Inc. is involved in a merger, acquisition, or sale of assets, your information may be transferred to the successor entity.

4.5 With Your Consent

We may share information for other purposes with your specific consent.

4.6 What We Do NOT Do

• We do NOT sell your personal information
• We do NOT share personal information for cross-context behavioral advertising
• We do NOT share with advertisers
• We do NOT share with data brokers
• We do NOT share phone numbers with any third party except Twilio for transactional SMS delivery (with your opt-in) and as required by law

5. AI PROCESSING AND YOUR DATA

• AI provider: Anthropic's Claude AI models
• What data is sent: Your questionnaire answers, codes you're analyzing against, prompts directing compatibility analysis
• What data is NOT sent to Anthropic: Phone numbers, payment information, account credentials
• Anthropic's training: Commercial API terms — Anthropic does NOT use your data to train AI models
• Anthropic's retention: Short operational retention under commercial API terms; deleted after that period
• kliQ's use: May use your data internally to refine prompts and improve Service; not exported to other AI providers

Questions about AI processing? Contact kteam@kliqlabs.com.

6. DATA RETENTION

6.1 Active Accounts

Retained while active and in good standing.

6.2 Inactive and Paused Accounts

• Freemium tier (inactive): Retained up to 10 years from last activity, then evaluated for deletion
• Paused accounts: Retained while in paused status

6.3 Deleted Accounts

When you request deletion:

• Account moves to archive bucket separate from active data
• Archive retained for 3 months from your deletion request
• After 3 months, permanently deleted from all kliQ systems
• You will receive a clear warning during deletion that data will be permanently deleted after 3 months and cannot be recovered
• During the 3-month archive period, you may request reactivation

6.4 Legal and Audit Retention

Some data may be retained beyond standard periods for legal compliance, audit logs, SMS consent records (TCPA), or active legal matters.

6.5 Anonymized Data

Aggregated, anonymized data that does not identify you may be retained indefinitely.

7. YOUR PRIVACY RIGHTS

7.1 Rights Under California Law (CCPA / CPRA)

• Right to Know
• Right to Delete
• Right to Correct
• Right to Limit Use of Sensitive Personal Information
• Right to Opt-Out of Sale or Sharing (we do not sell or share for behavioral advertising)
• Right to Non-Discrimination

7.2 How to Exercise Your Rights

Contact:

• Email: kteam@kliqlabs.com
• Address: kliQ Labs, Inc., 225 Locust, Sausalito, CA 94965

We respond to verified requests within 45 days per California law.

7.3 Verification

We will verify your identity before fulfilling a privacy rights request.

7.4 Authorized Agents

You may designate an authorized agent. We require verification.

8. SECURITY

We implement reasonable security measures:

• Encryption of sensitive data in transit and at rest
• Hashed and salted password storage
• Access controls
• Audit logging
• Service provider Data Processing Agreements

No system is perfectly secure. We will notify you of data breaches as required by applicable law.

9. CHILDREN'S PRIVACY

The Service is intended for users 18 years of age and older. We do not knowingly collect personal information from anyone under 18.

If we discover data from a user under 18, we will delete it, close the account, and prevent future collection.

Parents or guardians: contact kteam@kliqlabs.com.

10. INTERNATIONAL USERS

The Service is currently available only to users in the United States. Users outside the United States are not eligible.

If you are located outside the United States:

• Your data is processed in the United States
• We do not have GDPR-compliant infrastructure for European users
• Your access may be technically blocked

We may expand internationally and will update this Privacy Policy accordingly.

11. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy. For material changes:

• Posted at https://kliq2.com/privacy
• "Last Updated" date updated
• Notification by email or through the Service

Continued use after a change constitutes acceptance.

12. CONTACT US

• Email: kteam@kliqlabs.com
• Mail: kliQ Labs, Inc. dba kliQ², 225 Locust, Sausalito, CA 94965

13. ADDITIONAL CALIFORNIA-SPECIFIC DISCLOSURES

13.1 Categories of Personal Information Collected (Past 12 Months)

13.2 Sources of Personal Information

• Directly from you (questionnaire, account, communications, optional phone number)
• From other users (reports, kliQs initiated)
• Automatically (limited essential cookies, Plausible aggregate analytics)
• Service providers (Stripe payment data — kliQ does not store)

13.3 Business Purposes for Use

See Section 3.

13.4 Categories of Third Parties

• Service providers (Section 4.2)
• Legal authorities when required
• Other kliQ users (compatibility output and profile photos post-match)

13.5 Sale or Sharing for Behavioral Advertising

We do NOT sell personal information. We do NOT share personal information for cross-context behavioral advertising.

13.6 Retention Schedule

See Section 6.

13.7 Notice at Collection

This Privacy Policy serves as the notice at collection required under CCPA/CPRA.

13.8 California Civil Code § 1789.3 Consumer Notice

The Complaint Assistance Unit of the Division of Consumer Services of the California Department of Consumer Affairs may be contacted in writing at 1625 North Market Blvd., Suite N 112, Sacramento, CA 95834, or by telephone at (800) 952-5210.

14. TRADEMARK NOTICE

kliQ²™ and the kliQ²™ logo are trademarks of kliQ Labs, Inc. Federal trademark applications are pending. The fictitious business name "kliQ²" is registered with Marin County, California.

Last Updated: June 4, 2026

kliQ Labs, Inc. dba kliQ²™ 225 Locust Sausalito, CA 94965 kteam@kliqlabs.com