Privacy Notice

Last updated: August 30, 2026

1. Who we are

Kleveroo is operated by Smith Digital Ventures LLC, doing business as Kleveroo Games. We are the data controller for the personal data described below.

2. What we collect and why

Account data (email, username, display name, avatar color) — to create and maintain your account. Legal basis: contract performance.
Game data (scores, answers, session stats, leaderboard entries) — to operate the Service and show your progress. Legal basis: contract performance.
Content you create (boards, clues, trivia packs, uploaded clue images, AI prompts) — to store and display what you make. Clue images you attach to a board are stored at public web addresses, so please don't upload anything sensitive. Legal basis: contract performance.
Subscription data (subscription status, billing period) — to provide Kleveroo+. Legal basis: contract performance.
Technical data (IP address, device type, browser, basic usage telemetry) — for security, fraud prevention, and product improvement. Legal basis: legitimate interests.
First-party product analytics (a random anon_id stored in your browser, plus events like "board viewed", "game started", "game completed", and search terms typed into our board search) — to understand which games work and where people get stuck. Legal basis: legitimate interests.
Support messages (if you contact us) — to respond. Legal basis: legitimate interests.

Payment card details are collected directly by our payment provider, Stripe, and are not stored on our servers.

No third-party ad tracking. Kleveroo does not use advertising cookies, Meta Pixel, Google Analytics, session replay, or cross-site tracking tools. Our analytics are first-party and run on our own infrastructure. Our fonts are self-hosted, so your browser does not call Google Fonts. See the Cookie & local storage policy for the full list of what we store in your browser.

3. Who we share data with (subprocessors)

Kleveroo is built and operated by Smith Digital Ventures LLC (dba Kleveroo Games). We use third-party service providers to host, secure, operate, and improve the product.

We use a small number of service providers who process data on our behalf, under contract and only for the purposes below. We do not sell personal data.

Cloudflare — serves the Kleveroo website and app at the network edge and secures connections. It may process IP addresses, request headers, and requested URLs.
Supabase — hosts our database, sign-in/session handling, file storage, and realtime infrastructure for live rooms.
Google sign-in — only where you choose "Sign in with Google"; Google provides your email address and basic profile so we can create your account.
OpenAI — AI model provider for board and clue generation using GPT-5 family models.
Google AI / Gemini — AI model provider for uploaded-file text extraction, clue ranking, and board metadata suggestions using Gemini family models.
Stripe — payment processor and reseller of record for Kleveroo+ and AI credits. Stripe collects card details directly, manages subscriptions, calculates applicable sales tax / VAT / GST, issues invoices, and sends billing emails.
Lovable — current service provider for deployment management, managed operational tooling, transactional service support, and AI request routing.
Authorities — only when legally required.

Some backend and AI routing services are coordinated through Kleveroo's managed platform infrastructure.

Our subprocessors page lists each provider in more detail, including what data it may process and whether personal data may be involved.

Not used: Kleveroo does not send prompts, uploaded files, extracted text, or generated content to Perplexity, Anthropic, advertising networks, or third-party analytics tools. Product analytics are first-party and stored in our own database.

4. International transfers

Some of our service providers are located outside your country. Where personal data is transferred internationally we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

5. Data retention

We retain account and game data for as long as your account is active. If you delete your account or are inactive for an extended period, we delete or anonymise personal data that we no longer need, except where we are required to keep it (e.g. for tax records held by Stripe, and limited abuse-prevention records).

6. Your rights and how to make a request

Depending on where you live, you may have the right to access, rectify, erase, restrict, or port your personal data; to object to processing; to withdraw consent; and to lodge a complaint with a supervisory authority.

To make any of those requests — including deleting your account — use the Data & account requests form. A person on our team reviews every request; we don't run automatic deletions. We may confirm by email that the request comes from the account holder before acting on it, and we aim to respond within 30 days. We'll tell you what was deleted, what was anonymised, and anything we had to retain and why.

7. AI board generation

Kleveroo offers optional AI features that create Jeopardy-style boards, clues, and related content. Here is what happens when you use them:

What you provide. The topic or prompt you type, and any lesson plan, document, slide deck, or image you upload. Uploaded files are processed to extract their text; that extracted text is used as source material for your board.
Where it goes. Your prompt and extracted text are sent to the AI model providers listed above — OpenAI and Google AI / Gemini — so the board can be generated, routed through Kleveroo's managed AI gateway. We do not sell this content or share it for advertising.
What we store. We may store your prompt, the generated board, and technical metadata about the request — model used, token counts, estimated cost, latency, and timestamps — so we can operate the feature, prevent abuse, support you, and understand our costs.
Model training. Based on our current provider settings, your app content is not used to train the model providers' models. If that ever changes, we will update this notice.
Please don't submit sensitive student information. Do not upload student personal information, rosters, IEPs, medical or disciplinary records, or other sensitive records into AI prompts or file uploads. Kleveroo is not designed to receive that data.

Uploaded file text is used for the generation you requested and the record-keeping described above. AI output can be wrong and should be reviewed before you use it — full detail on how Kleveroo uses AI. You can ask us to delete your AI prompts and generated boards at any time via Data & account requests.

8. Students and classrooms

Board Battle is hosted from one screen by the teacher: students don't create accounts, don't join from their own devices, and aren't asked for any personal details. Live Trivia participants type a nickname they choose themselves. We don't intentionally collect student personal information anywhere in the product.

Teachers should not paste or upload student personal information — including rosters, IEPs, medical or disciplinary records, or images containing them — into prompts, boards, or clue images. See Student Privacy for the full guidance.

9. Security

We use appropriate technical and organisational measures, including encryption in transit, access controls, and row-level database access rules, to protect your data. We have not been formally certified or audited against any security or privacy standard, and we don't claim to be. Our security practices page sets out what we do today, and where the gaps still are.

10. Cookies

We use a small number of essential cookies and local storage entries to keep you signed in, remember your settings, and run first-party analytics. We do not use advertising cookies or cross-site trackers. Full detail in the Cookie & local storage policy.

11. Contact and requests

To request access, export, correction, or deletion of your data, use the Data & account requests form. For any other privacy question, email support@kleveroo.com.