Kontagion · Legal
Privacy Policy
Effective July 13, 2026
The short version: your film is yours. We store your account and your media so the product works, we send specific pieces of your content to specific AI providers only when you ask for an AI operation, and Kontagion does not use your content to train its own models. The long version follows, and section 4 lists every cloud-bound operation in the product, generated from the same data the in-app privacy controls use.
01Who we are
Kontagion ("Kontagion," "we," "us") is a filmmaking suite operated by Humpday Media. For anything in this policy, contact info@kontagion.com. We are the data controller for the personal data described here.
02What we collect
- Account data — email address, display name, optional profile details (role, bio, location, avatar) you choose to add, and authentication records. If you sign in with Google or Apple, we receive the basic profile your provider shares.
- Your content — the projects, screenplays, schedules, timelines, media files, and conversations with Kyger that you create or upload. This is the product; we store it so you can work on it.
- Usage telemetry — product events (e.g. "project created," "export started"), error reports, and performance signals, tied to your account so we can debug your issues and improve the product. We do not run third-party advertising trackers. Privacy Mode (section 4) stops product-event telemetry at the source; crash and error reporting to our error service continues even then, and never includes your project content.
- Billing data — your plan, credit balance, and purchase history. Card details go directly to Stripe (section 5); we never see or store your card number.
- Support data — bug reports and feedback you submit, including the technical context attached to them (build version, page URL, browser).
03How we use it
- To provide the product: storing, rendering, syncing, and playing back your work.
- To run the AI operations you explicitly invoke (section 4).
- To process payments and enforce plan limits.
- To debug problems, prevent abuse, and improve the product.
- To send transactional email (sign-in confirmations, billing receipts, collaboration invites). No marketing email without separate consent.
We do not sell personal data. We do not share your content with anyone except the providers needed to fulfill an operation you requested.
04Exactly what each AI operation transmits
Every cloud-bound operation in Kontagion is registered in a machine-readable policy table inside the product — the same table that powers Privacy Mode (Settings), which blocks all of these operations with a clean error when enabled. This list is rendered from that table, so it always matches what the product actually does:
| Operation | What is transmitted | Data flow |
|---|---|---|
| Whisper transcription | the audio file of the selected clip | We send it out; only metadata comes back |
| Voice prompt to Kyger | the short audio recording you spoke | We send it out; only metadata comes back |
| AI voiceover (TTS) | the script text — and the synthesised audio comes back | We send it out; the generated result comes back to your account |
| AI sound effect generation | the SFX prompt — and the synthesised audio comes back | We send it out; the generated result comes back to your account |
| AI voice isolation | the clip's audio file — the noise-stripped dialogue comes back | We send it out; the generated result comes back to your account |
| AI image generation | your prompt, a short description of your film, and — when you've attached photographs to a character — those photographs, plus how that character is described in words. The new image comes back | We send it out; the generated result comes back to your account |
| AI clip generation | your prompt, a short description of your film, and any photographs or frames you've attached to the people in the shot. The finished clip comes back | We send it out; the generated result comes back to your account |
| AI clip transform | the source clip's media URL + prompt + parameters | We send it out; only metadata comes back |
| AI music generation | the composed prompt — the music file comes back | We send it out; the generated result comes back to your account |
| Chat with Kyger | your message, plus a page or two about your film: its title and logline, what you've decided about your characters — including how you've described them — your locations, the look you're after, and where your cut stands. If you attach an image to the chat, that image goes too | Continuous while you use the feature |
| Kyger writing assists | the scene/screenplay text or storyboard brief being worked on | We send it out; the generated result comes back to your account |
| Kyger frame analysis | a captured video frame (image) + a short context note | We send it out; only metadata comes back |
| KIQ film analysis | your screenplay, project metadata, and film file properties | We send it out; the generated result comes back to your account |
| Video export (Remotion Lambda) | every clip's media URL + the cut spec | We send it out; the generated result comes back to your account |
| Collab presence | your playhead + clip selection 4× per second | Continuous while you use the feature |
| Collab mutation stream | every clip / track / timeline change you make | Continuous while you use the feature |
| Stock media search + import | your search text goes to Pexels/Pixabay; the picked file downloads into your library | We send it out; the generated result comes back to your account |
| Save LUT to your library | the encoded 3D color table (a derived, non-reversible artifact — not the original .cube) lands in your private library | We send it out; only metadata comes back |
| Kyger learns your style (for your own assistant) | the NAMES of the edits/grades you accept + accept-vs-reject counts per surface (never your prompts, scene text, or names) — stored against your own account to bias your Kyger's defaults | We send it out; the generated result comes back to your account |
Nothing on this list runs in the background: each operation happens only when you press the button or ask Kyger for it.
05Subprocessors and service providers
This is our public subprocessor list. We use each provider for a specific job:
- Supabase — database, authentication, and media storage. Where all your content lives.
- Stripe — payments. Your card details go to Stripe directly and never touch our servers.
- Lovable AI Gateway (Anthropic / OpenAI models) — powers Kyger chat and speech-to-text transcription.
- Anthropic — directly processes selected project context and extracted frame descriptions when you request KIq analysis.
- FAL — routes selected image and video generation requests to the model you choose.
- Runway, Higgsfield, Kling, Seedance — AI video and image generation, when you request it.
- ElevenLabs — AI voiceover, sound-effect, and music generation, when you request it.
- Remotion Lambda (AWS) — renders your final video export in the cloud.
- Sentry — receives scrubbed crash and performance diagnostics; project content is excluded.
- Resend — delivers transactional email such as invitations and account notices.
Each receives only what section 4 describes for the operation you invoked, and only when you invoke it.
See the maintained subprocessor register for purposes, data categories, processing geography, and change notices.
06Model training
Kontagion does not use your content to train its own models. AI operations use commercial provider APIs. Those providers process the inputs and outputs needed to fulfill your request under their own enterprise or API data terms, which may include limited abuse-monitoring retention. We review those terms before enabling a provider and will update this policy before materially changing how your content is used.
07Your rights
You can access your data (it's in the product), correct it (profile and project surfaces are editable), export it (media downloads, screenplay export to FDX/Fountain, timeline export to OTIO/FCPXML/EDL), and delete it (delete projects and media in-app). For full account deletion, use the deletion control in Settings; it includes a grace period during which you can cancel. For a complete data export or another rights request, email info@kontagion.com from your account address — we fulfill verified requests within 30 days.
08Data retention
- Your content stays as long as your account does, or until you delete it.
- Deleted projects and media are removed from production systems promptly and fall out of backups on their rotation cycle.
- Telemetry and error logs are kept for product-improvement purposes and pruned on a rolling basis.
- Billing records are retained as long as tax and accounting law requires.
10Children
Kontagion is not directed at children under 13 (or the higher minimum age your jurisdiction sets), and we don't knowingly collect their data. If you believe a child has created an account, contact us and we'll delete it.
11International users (GDPR / CCPA)
If you're in the EU/EEA or UK, the rights in section 7 map to your GDPR rights (access, rectification, erasure, portability, restriction, objection), our legal bases are contract performance (running the product you signed up for) and legitimate interest (security, debugging), and you may lodge a complaint with your supervisory authority. If you're a California resident, the same section covers your CCPA rights to know, delete, and correct — and since we don't sell or share personal data for advertising, there's nothing to opt out of. Our infrastructure and subprocessors primarily process data in the United States and may process it in other countries where they operate. Where data-protection law requires a transfer mechanism, we rely on the provider's applicable contractual safeguards, such as Standard Contractual Clauses. Contact us for the current transfer details.
12Changes to this policy
When this policy changes materially we'll update the effective date at the top and notify signed-in users in the product before the change applies. The current version always lives at this URL.
13Contact
Privacy questions, rights requests, or anything unclear: info@kontagion.com. See also our Terms of Service.