Effective July 15, 2026Version 2026-07-15 Current version

Kimeric Privacy Policy

Effective date: July 15, 2026

This Privacy Policy explains how Arith Studio LLC, a Michigan (United States) limited liability company ("Arith Studio," "we," "us," or "our"), collects, uses, and shares personal information in connection with the Kimeric software application, our website, and our account and subscription services (together, "Kimeric" or the "Service"). It applies to information we handle as a business, wherever you are located; it does not govern how the third-party AI providers you connect handle your information (see Section 5).

For the purposes of the European Union and United Kingdom General Data Protection Regulation ("GDPR") and similar laws, Arith Studio LLC is the controller of the personal information described in this Policy. You can reach us about anything in this Policy at support@kimeric.ai.

The short version

The most important thing to know is that Kimeric runs on your own computer. Your screenplays, the prompts the Software builds, the images and video you generate, and your AI provider API keys all stay on your machine and are never sent to us. We collect only the limited information needed to run your account and subscription — mainly your email address and your subscription status. We do not run analytics or usage tracking inside the Software, we do not sell your personal information, and we do not use it to train AI models. The sections below provide the detail.

1. Information we collect

1.1 Information you provide to us

Account information. When you create an account, we collect your email address, and any other information you choose to provide, such as your name.
Policy acceptances. When you accept our terms and policies or give a consent we are required to keep a record of (for example, the auto-renewal consent, or a consumer withdrawal-right acknowledgment), we record which version you accepted, a server timestamp, and the IP address of the request, as the legal record of that acceptance.
Communications. If you contact us (for example, at support@kimeric.ai) or send us feedback, we receive what you choose to send, including your email address and the contents of your message.

1.2 Information collected automatically (limited)

Subscription and license verification. To confirm that your subscription is active, the Software periodically communicates with our servers using account and license identifiers. We may also collect an IP address and/or a device or installation identifier to enforce one account per subscription and to help prevent abuse.
Region signals. When you visit our website or the Software verifies your license, our hosting platform derives an approximate country (and, in limited cases, region) from your IP address. We use this signal to comply with trade-sanctions and export-control laws (blocking access from embargoed jurisdictions) and to show region-appropriate legal terms. We do not build location profiles.
Update checks. The Software may check whether a newer version is available, which involves sending a version identifier and possibly an account or installation identifier.
Website cookies. Our website uses only strictly necessary and functional cookies — to operate the site and keep you signed in. We do not use advertising cookies or analytics cookies, which is why you will not see a cookie-consent banner on our site: there is nothing optional to consent to.

1.3 Payment information

When you subscribe, your payment is processed by our third-party payment provider, not by us. We do not collect or store your full payment card number. We receive limited information from the payment process, such as your subscription status, an associated email address or customer identifier, and possibly your country.

1.4 What we do not collect

Because of how Kimeric is built, there are important categories of information we do not collect:

Your content. We do not collect, receive, store, or have access to your screenplays, the prompts the Software builds, or the images and video you generate. These are created and kept on your own computer.
Your API keys. We do not collect, receive, store, log, or relay your AI provider API keys. They are entered and kept on your own computer and are sent only to the providers you connect.
In-app usage data. We do not run telemetry, analytics, usage tracking, or crash reporting that sends information about how you use the Software to us. The Software may keep records locally on your own computer — for example, a log of your own API usage and costs — but these remain on your machine and are never transmitted to us.

2. Your content and keys stay on your computer

Kimeric runs locally on your computer. Your Inputs (such as screenplays) and Outputs (the images and video you generate), along with your AI provider API keys, remain on your machine and are not transmitted to us.

When you generate content, the Software sends your requests directly from your computer to the third-party AI providers you have connected, using your own accounts and keys. We do not transmit, receive, or have access to that content. Each provider handles your content and requests under that provider's own privacy policy and terms — not this Policy. You should review the privacy policy of each provider you use. The providers Kimeric can connect to are listed in Section 5.

3. How we use information, and our legal bases

We use the limited information we collect to:

provide, maintain, and support Kimeric and your account, and process your subscription and payments through our payment provider (legal basis: performance of our contract with you);
authenticate you and verify that your subscription is active (contract);
respond to your support requests and feedback (contract; our legitimate interests in supporting our users);
secure the Service and detect, prevent, and address fraud, abuse, and violations of our terms — including enforcing one account per subscription (our legitimate interests in protecting the Service and our users);
send you service- and account-related communications, such as renewal, price-change, or policy-change notices (contract; legal obligation where a notice is legally required);
keep records of your policy acceptances and consents, and exercise or defend legal claims (our legitimate interests; legal obligation);
comply with our legal obligations — including tax, accounting, trade-sanctions, and export-control laws (legal obligation); and
enforce our agreements (our legitimate interests).

Where we rely on legitimate interests, we have balanced those interests against your rights and use the minimum information needed. We do not use your personal information for any form of automated decision-making that produces legal or similarly significant effects about you, and we do not profile you.

We do not sell your personal information, we do not use it for third-party advertising, and we do not use it to train artificial-intelligence models.

4. How we share information

We share personal information only as described here:

Service providers (processors). We use third-party companies to operate parts of our business on our behalf, and we share information with them only as needed to provide the Service, under contracts that restrict how they may use it. These include our authentication provider, our payment provider, our hosting and database providers, and our email provider (Google Workspace).
Legal and safety. We may disclose information to comply with applicable law, regulation, legal process, or governmental request (including sanctions-compliance obligations); to enforce our Terms of Service and Acceptable Use Policy; or to protect the rights, property, or safety of Arith Studio, our users, or others.
Business transfers. If we are involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this Policy.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

5. Third-party AI providers

Kimeric coordinates requests to third-party AI providers — currently Anthropic, Google, OpenAI, Kling, WaveSpeed, and Topaz — using your own accounts and keys. As described in Section 2, your content is sent directly from your computer to these providers; we do not receive it. Your use of each provider, and that provider's handling of your content and personal information, is governed by that provider's own terms and privacy policy — including where that provider is located outside your country. We encourage you to review them.

6. Data retention

We keep the limited information we collect only as long as we need it:

Account information (email, account identifiers) — for as long as your account is active, and for a limited period afterward as needed to comply with legal obligations, resolve disputes, and enforce our agreements, after which we delete or de-identify it.
IP addresses and stale installation metadata collected for license verification and abuse prevention — automatically pruned on a rolling basis, currently within 90 days.
Policy-acceptance and consent records — for as long as your account exists and afterward for the period needed to demonstrate compliance and defend legal claims (generally the applicable statute of limitations).
Subscription and payment records — held by our payment provider under its policies (it is the merchant of record); we retain only the limited subscription records described above, for the period tax and accounting law requires.

Because we never receive your content or your API keys, there is nothing of that kind for us to retain or delete.

7. Your privacy rights

7.1 Rights available to everyone

Wherever you live, you may: access the personal information we hold about you; ask us to correct it; and ask us to delete your account and the personal information associated with it, subject to information we must keep to comply with law or resolve disputes. You can update your email address in your account portal, and you can exercise any of these rights by contacting support@kimeric.ai from the email address on your account. We respond to all requests within one month. Note that deleting your account does not affect content stored on your own computer, which remains under your control, or information held by the AI providers you connected.

We will not discriminate against you for exercising any privacy right.

7.2 European Economic Area, United Kingdom, and Switzerland

If you are in the EEA, the UK, or Switzerland, data-protection law gives you the following rights regarding your personal information, subject to its conditions and exemptions:

the right of access to your personal information, and to information about how we process it;
the right to rectification of inaccurate or incomplete information;
the right to erasure ("right to be forgotten");
the right to restriction of processing;
the right to data portability — to receive the information you provided to us in a structured, commonly used, machine-readable format;
the right to object to processing based on our legitimate interests, on grounds relating to your particular situation, and an unconditional right to object to direct marketing (note: we do not do direct marketing based on profiling);
the right to withdraw consent at any time, where processing is based on consent, without affecting prior processing; and
the right to lodge a complaint with your local supervisory authority (in the EEA, your national data-protection authority; in the UK, the Information Commissioner's Office; in Switzerland, the FDPIC). We would appreciate the chance to address your concern first, but you may contact your authority at any time.

Section 3 describes the purposes of our processing and the legal basis for each. You are never under a statutory or contractual obligation to provide us personal information, but we cannot provide the Service without the account information described in Section 1.1.

7.3 California

If you are a California resident, the California Consumer Privacy Act, as amended (the "CCPA"), provides you with certain rights regarding your personal information:

the right to know the categories and specific pieces of personal information we have collected, the sources, the purposes, and the categories of recipients;
the right to delete personal information we have collected from you, subject to exceptions;
the right to correct inaccurate personal information;
the right to opt out of the sale or sharing of personal information — note that we do not sell your personal information or share it for cross-context behavioral advertising, so there is nothing to opt out of, and browser opt-out signals such as Global Privacy Control require no action from us;
the right to limit the use of sensitive personal information — note that we do not collect sensitive personal information as defined under the CCPA; and
the right not to receive discriminatory treatment for exercising these rights.

To exercise these rights, contact us at support@kimeric.ai. We will verify your request using the information associated with your account, and you may use an authorized agent to submit a request on your behalf where the law permits.

7.4 Other regions

Privacy laws in other places where Kimeric is available — for example, Canada (PIPEDA), Brazil (LGPD), Australia (the Privacy Act) — give you rights that substantially overlap with those described above, typically including access, correction, and deletion. We honor the rights that apply to you under your local law; contact us at support@kimeric.ai and we will handle your request under the law of your region. If your local law gives you the right to complain to a privacy regulator, you also have that right.

7.5 Communications

We will send you service- and account-related messages necessary to operate your account; where we send any optional messages, you may opt out.

8. Children

Kimeric is intended for adults and is not directed to children. You must be at least 18 years old to use Kimeric. We do not knowingly collect personal information from anyone under 18, and if we learn that we have, we will delete it.

9. Security

The most sensitive information involved in using Kimeric — your content and your API keys — never reaches us, because it stays on your own computer; that design is itself an important protection. For the limited account information we do hold, we use reasonable administrative and technical measures intended to protect it, including encryption in transit and at rest for our account database. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a breach affecting your personal information requires notification under applicable law, we will notify you and the relevant authorities as the law requires.

10. International use and data transfers

Kimeric is operated from the United States, and the limited personal information we collect is processed in the United States (and in other countries where our service providers operate). These countries may have data-protection laws different from those of your country.

If you are in the EEA, the UK, or Switzerland, we transfer your personal information to the United States only with appropriate safeguards: our service providers are bound by data-processing agreements that incorporate the European Commission's Standard Contractual Clauses (and the UK and Swiss addenda where applicable), and/or participate in the EU-U.S. Data Privacy Framework and its UK and Swiss extensions. You may contact us at support@kimeric.ai for more information about the safeguards applied to your information.

Kimeric is not offered in jurisdictions subject to comprehensive U.S. sanctions, as described in our Terms of Service.

11. Changes to this Policy

We may update this Policy from time to time. When we do, we will post the updated Policy and revise the effective date above, and we will provide additional notice where required by law. Superseded versions remain available in the policy archive on our website. If you continue to use Kimeric after the changes take effect, you accept the updated Policy.

12. Contact us

If you have questions about this Policy or our privacy practices, or want to exercise any of the rights above, contact us at support@kimeric.ai. We are Arith Studio LLC, a Michigan (United States) limited liability company.