Draft for review — this document has not yet been approved by Klymb’s legal counsel. Bracketed items are placeholders.
1. Responsible party
Klymb [(Pty) Ltd] is the responsible party for personal information processed through the Services, as defined in the Protection of Personal Information Act, 4 of 2013 (“POPIA”). Our Information Officer can be reached at privacy@klymb.co.za.
2. What we collect
- Account details: name, email address and sign-in provider.
- Personalisation answers (only with your consent): goals, money habits, experience, risk appetite, estimated budget, platforms, markets, watchlist and trading cadence.
- Community content: posts, comments, votes and profile information you choose to share.
- Klymb AI conversations: the questions you ask and the answers generated.
- Technical data: device, browser, approximate location from IP address, and usage events (see our Cookie Policy).
3. Why we use it
- To provide and secure your account and the Services.
- To personalise your dashboard, strategies, signals and insights — based on your consent, which you may withdraw at any time.
- To moderate the community and enforce our Terms.
- To improve the product, with analytics that are aggregated where possible.
- To send product updates and market digests, only if you opt in.
- To meet legal and regulatory obligations.
4. Who we share it with
We do not sell your personal information. We share it only with:
- service providers (operators) that host, secure and support the Services under written agreements;
- AI model providers (currently Google Gemini) to generate Klymb AI responses — prompts are sent without your account identifiers;
- payment processors, for paid plans; and
- authorities, where the law requires it.
5. Cross-border transfers
Some providers process data outside South Africa. We only transfer personal information where the recipient is subject to laws, binding rules or agreements that provide adequate protection, as required by section 72 of POPIA.
6. Retention and security
We keep personal information only as long as needed for the purposes above or as required by law, then delete or de-identify it. We use reasonable technical and organisational measures, including encryption in transit and access controls, to protect it.
7. Your rights
You may ask to access, correct or delete your personal information, object to processing, or withdraw consent, by emailing privacy@klymb.co.za or using Account setup in KlymbOS. You also have the right to complain to the Information Regulator (inforegulator.org.za).