Privacy Policy

Kinereel (kinereel.com, the "Service") is run by Mouad Berqia, an individual based in Morocco ("Kinereel", "we", "us"). We are the controller of the personal data described here: we decide why and how it is processed.

Questions, requests and complaints go to hello@kinereel.com. We read every message and reply within 30 days, usually much sooner.

Account data

Your email address. If you sign in with Google, your name and profile picture as Google shares them. We never receive your Google password.

Content you give us and we generate

Topics, links, scripts, edits and chat messages you write, files you upload (clips, images, logos, and voice samples if you use voice cloning), and what we generate for you: hooks, scripts, voice recordings, storyboard frames, animation code and videos.

Billing data

Whop processes your payment and tells us your plan, its status, billing period and Whop identifiers. We never see your card number.

Usage and cost records

For each step: its type, credits spent, time, status, and the AI tokens or compute used. We need these to enforce limits, refund failed steps and price fairly.

Technical data

IP address, browser and device type, and request logs, collected by our hosting providers to deliver the site, secure it and diagnose faults.

Messages

What you send us by email, and the transactional emails we send you (sign-in links and purchase confirmations, sent through Resend).

We do not intentionally collect sensitive categories of data. Please do not put them in a topic, script or upload. If you use voice cloning, a voice recording can identify you, so use only your own voice or one you have permission to use.

If you are in the European Economic Area, the United Kingdom or a similar region, the GDPR requires us to name a legal basis for each purpose.

Where we rely on legitimate interests, we have weighed them against your rights and expect you to see them as reasonable. You can object at any time (see Your rights).

We do not train AI models on your content, we do not sell your data, and we do not use it for advertising. We send no marketing email today. If that changes, we will ask for your consent first.

We use no automated decision-making that has legal or similarly significant effects on you. AI models generate your videos, and you review and approve each step.

We use the following service providers ("processors"). Each handles data only to provide its service to us.

Whop acts as an independent controller for payment, tax and fraud-prevention data it collects at checkout. Its own privacy policy applies to that data.

We may disclose data if the law requires it, to protect our rights or users, or in a sale or restructuring of the Service (we will tell you first). We do not share data with anyone else.

We are in Morocco, our main database and files sit in the EU, and several providers process data in the United States and China. So your data crosses borders.

For transfers out of the EEA or UK, we rely on the safeguards each provider offers, such as the EU Standard Contractual Clauses or the EU-US Data Privacy Framework. Where no such safeguard exists, as with a provider in China, we rely on the transfer being necessary to perform our contract with you, and we limit what we send: your content, without your name, email or other account identifiers.

You can ask us for a copy of the relevant safeguards by writing to hello@kinereel.com.

• Account data, projects and media: kept while your account exists, so you can come back to your videos.
• After you ask us to delete your account: we delete your account, projects and files within 30 days. Copies in provider backups are overwritten on the providers' normal backup cycle.
• Billing and credit records: kept as long as accounting and tax rules require, then deleted or anonymized. Whop keeps payment records under its own policy and the law.
• Technical logs: kept by our hosts for short periods that they set, normally weeks, not years.
• Emails to us: kept while needed to deal with your request, plus a reasonable period after.

Under the GDPR and UK GDPR

You can ask us to give you access to your data, correct it, delete it, restrict its use, or send it to you in a portable format. You can object to processing based on legitimate interests, and withdraw consent where we rely on it. You can complain to your data protection authority. In the EU, that is the authority in the country where you live, work or believe an infringement happened.

Under the CCPA and other US state laws

If you live in California or a state with a similar law, you can ask what personal information we hold, ask us to delete or correct it, and not be treated worse for using these rights. We do not sell or share personal information for cross-context behavioral advertising, so there is nothing to opt out of.

Under Moroccan law

Law 09-08 gives you the right to access, rectify and object to the processing of your personal data. You can contact the CNDP, Morocco's data protection authority, if you believe we have not respected it.

How to use them

Email hello@kinereel.com from the address you sign in with to access, correct or delete your data, or to delete your whole account. We may ask you to confirm your identity first. We answer within 30 days.

Kinereel sets one cookie: a first-party sign-in cookie from Supabase that keeps you signed in. It is strictly necessary, so it needs no consent banner. It is removed when you sign out or it expires.

The app also uses your browser's session storage for a few seconds around checkout, to tell whether your new plan has arrived. It stays in your tab and holds no personal data.

We use no analytics, advertising or tracking cookies. Embedded checkout and sign-in pages from Whop and Google set their own cookies on their own domains.

Kinereel is not for anyone under 16. We do not knowingly collect data from children. If you believe a child has given us data, write to hello@kinereel.com and we will delete it.

We protect data with encryption in transit (HTTPS), per-user access rules in the database, private file storage with signed, expiring links, and secrets kept out of the browser. Access to production systems is limited to the operator.

No system is perfectly secure. If a breach affects your data, we will tell you and the authorities where the law requires, without undue delay.

We update this policy when our practices change, for instance when we add a provider. We change the date at the top and, for material changes, email active users in advance. Older versions are available on request.

hello@kinereel.com, from the address you use with Kinereel if the request is about your account. Operator: Mouad Berqia, Morocco.