# Privacy Policy for Klyx **Last Updated: September 14, 2026** ## Introduction Klyx ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we handle information when you use our mobile application. ## Information We Collect **We do not collect any personal information.** Klyx is designed with privacy as a core principle. The app does not: - Collect or store personal information on our servers - Track your usage or behavior - Use analytics or tracking services - Display advertisements - Share any data with third parties (except Klaviyo as described below) ## How Klyx Works Klyx is a **viewer app** for your Klaviyo account. The app connects directly to Klaviyo's public API using an API key that you provide. All marketing data (campaigns, profiles, lists, flows) is transmitted directly between your iOS device and Klaviyo's servers. **We do not intercept, store, or have access to your Klaviyo data.** ## Third-Party Services Klyx connects directly to **Klaviyo's public API** (https://a.klaviyo.com/api/). When you use Klyx: - Your device communicates directly with Klaviyo's servers - We never see or store your Klaviyo data - All API requests are made with your personal API key - Data flows directly from Klaviyo to your device Please refer to [Klaviyo's Privacy Policy](https://www.klaviyo.com/legal/privacy) for information about how Klaviyo handles your marketing data. ## Data Storage on Your Device Klyx stores the following data **locally on your device only**: ### Secure Storage (iOS Keychain) - **Klaviyo API Keys** - Your Private API Keys are stored securely in the iOS Keychain, which is encrypted and protected by your device's security features (the same security used by banking apps) ### Local Cache (App Container) - **Campaign data** - Cached locally to improve app performance and enable offline viewing - **Profile data** - Temporarily cached for quick access - **List and segment data** - Cached to reduce API calls - **App preferences** - Settings like your default account selection **This cached data:** - Remains on your device only - Is automatically cleared when you remove an account - Is deleted when you uninstall the app - Is never transmitted to any server other than Klaviyo's API ## iOS Privacy Manifest As required by Apple, Klyx includes a Privacy Manifest that declares the following API usage: - **UserDefaults API** - Used to store app preferences and account settings locally on your device ## Permissions Klyx requires the following iOS permissions: - **Internet Access** - Required to communicate with Klaviyo's API - **Keychain Access** - Required to securely store your API keys We do not request access to: - Your location - Your contacts - Your photos or photo library - Your camera or microphone - Any other device sensors or personal data ## Data Security Your data is protected by: - **Keychain Encryption** - API keys stored in iOS Keychain with hardware-level encryption - **HTTPS/TLS** - All communication with Klaviyo's API uses encrypted HTTPS connections - **No Server Storage** - We don't operate any servers that store your data - **Local Only** - All cached data remains on your device under your control ## In-App Purchases Klyx offers optional premium features via In-App Purchase (processed by Apple). We do not: - Collect payment information (Apple handles all transactions) - Store purchase history on external servers - Access your Apple ID or payment details Apple's privacy policy governs all purchase transactions. We only verify your subscription status through Apple's StoreKit framework. ## Children's Privacy Klyx is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. ## Data Retention and Deletion Since all data is stored locally on your device: - You can remove accounts from within the app at any time (Settings → Account Management) - Removing an account deletes its cached data and API key - Uninstalling the app removes all local data - Your marketing data remains in your Klaviyo account (managed through Klaviyo) ## International Data Transfers Because Klyx communicates directly with Klaviyo's API, your data may be transferred to and processed in countries where Klaviyo operates servers. Please refer to Klaviyo's privacy policy for details about their data processing practices. ## Changes to This Policy We may update this Privacy Policy from time to time. We will notify you of any changes by: - Updating the "Last Updated" date at the top of this policy - Posting a notice in the app (for material changes) Continued use of the app after changes constitutes acceptance of the updated policy. ## Your Rights You have the right to: - **Access your data** - All data is stored locally on your device in Settings → General → iPhone Storage → Klyx - **Delete your data** - Remove accounts from within the app, or uninstall the app to delete all data - **Export your data** - Your data remains in your Klaviyo account; use Klaviyo's export features ## Contact Us If you have questions about this Privacy Policy or Klyx's privacy practices, please contact: **Email:** bjorn@bjornmann.com **GitHub:** https://github.com/bjornmann/klyx For questions about how Klaviyo handles your marketing data, please contact Klaviyo directly or visit their privacy policy at https://www.klaviyo.com/legal/privacy --- ## Summary **In Plain English:** Klyx is a simple viewer app for your Klaviyo account. We don't run any servers, we don't collect your data, and we don't track you. Your API keys are stored securely on your iPhone using Apple's Keychain (the same security used by banking apps). Everything you see in the app comes directly from Klaviyo's servers and is cached temporarily on your phone to make the app faster. When you delete Klyx or remove an account, all that local data is deleted. We never see it, store it, or share it.