Kontagion · Legal
Privacy Policy
Effective July 13, 2026 · Last updated October 17, 2026
The short version: your film is yours. We store your account and your media so the product works, we send specific pieces of your content to specific AI providers only when you ask for an AI operation, and Kontagion does not use your content to train its own models. The long version follows, and section 4 lists every cloud-bound operation in the product, generated from the same data the in-app privacy controls use.
01Who we are
Kontagion ("Kontagion," "we," "us") is a filmmaking suite operated by Humpday Media. For anything in this policy, contact info@kontagion.com. We are the data controller for the personal data described here.
01aVIP program activity and support
The VIP supplement is effective October 2, 2026, only upon separate VIP acceptance. When you accept a VIP invitation, we record the invitation, offer, agreement version, acceptance, access dates, credit gift and your support permissions. We connect authentication records, permitted product activity and generation outcomes to your trial so administrators can follow your progress and help with problems. These records are not a live screen recording and do not establish that you are online or satisfied. Privacy Mode and optional diagnostics choices continue to apply.
Administrators with your active observation permission can inspect your owned films in recorded, time-limited sessions. Optional assistance permission separately allows the supported changes shown in the assistance tools. Records identify the administrator, purpose, project and recorded changes. We also keep feedback you choose to provide and internal support notes. Feedback is voluntary; activity is not treated as a satisfaction rating. This permission does not include other owners' films, private messages, marketing use or model training.
Your VIP account shows your offer, support history and permission controls. Withdrawing support permission stops future support access without cancelling your remaining complimentary period. Security, consent and audit records follow the retention and rights provisions below. Existing accounts do not acquire these additional support permissions merely because this page is updated.
01bSupport and performance review of your projects
Authorized Kontagion staff may access and review the videos, images, generations and prompts in your projects for customer support, quality, reliability and performance purposes. Each access is logged with the staff member, the project and the time.
You can opt out per project by turning on Project / IP Privacy in that project's settings (owner only), and you can choose to have it on for every new project in Settings → Privacy. It is off unless you turn it on. While it is on, staff will not view that project's videos, images, generations or prompts for these purposes, unless you invite support in for a specific visit or have separately given support permission (section 1a). Changes to this setting are recorded.
Project / IP Privacy is different from Privacy Mode (section 4). Privacy Mode is a setting on your device that stops cloud operations. Project / IP Privacy controls staff review of a project. Neither stops the automated processing needed to provide the service, keep it secure, prevent abuse, or meet legal obligations.
02What we collect
- Account data — email address, display name, optional profile details (role, bio, location, avatar) you choose to add, and authentication records. If you sign in with Google or Apple, we receive the basic profile your provider shares.
- Your content — the projects, screenplays, schedules, timelines, media files, and conversations with Kyger that you create or upload. This is the product; we store it so you can work on it.
- Usage telemetry — product events (e.g. "project created," "export started"), error reports, and performance signals, tied to your account so we can debug your issues and improve the product. We do not run third-party advertising trackers. Privacy Mode (section 4) stops product-event telemetry at the source; crash and error reporting to our error service continues even then, and never includes your project content.
- Billing data — your plan, credit balance, and purchase history. Card details go directly to Stripe (section 5); we never see or store your card number.
- Support data — bug reports and feedback you submit, including the technical context attached to them (build version, page URL, browser).
03How we use it
- To provide the product: storing, rendering, syncing, and playing back your work.
- To run the AI operations you explicitly invoke (section 4).
- To process payments and enforce plan limits.
- To debug problems, prevent abuse, and improve the product.
- To review project content for support, quality, reliability and performance, unless you have turned on Project / IP Privacy for that project (section 1b).
- To send transactional email (sign-in confirmations, billing receipts, collaboration invites). No marketing email without separate consent.
We do not sell personal data. We share content with providers needed to fulfill operations you request. Authorized Kontagion staff see it only as described in sections 1a and 1b.
04Exactly what each AI operation transmits
Every cloud-bound operation in Kontagion is registered in a machine-readable policy table inside the product — the same table that powers Privacy Mode (Settings), which blocks all of these operations with a clean error when enabled. This list is rendered from that table, so it always matches what the product actually does:
| Operation | What is transmitted | Data flow |
|---|---|---|
| Whisper transcription | the audio file of the selected clip | We send it out; only metadata comes back |
| Voice prompt to Kyger | the short audio recording you spoke | We send it out; only metadata comes back |
| AI voiceover (TTS) | the script text — and the synthesised audio comes back | We send it out; the generated result comes back to your account |
| AI sound effect generation | the SFX prompt — and the synthesised audio comes back | We send it out; the generated result comes back to your account |
| AI voice isolation | the clip's audio file — the noise-stripped dialogue comes back | We send it out; the generated result comes back to your account |
| AI image generation | your prompt, a short description of your film, and — when you've attached photographs to a character — those photographs, plus how that character is described in words. The new image comes back | We send it out; the generated result comes back to your account |
| AI clip generation | your prompt, a short description of your film, and any photographs or frames you've attached to the people in the shot. The finished clip comes back | We send it out; the generated result comes back to your account |
| AI clip transform | the source clip's media URL + prompt + parameters | We send it out; only metadata comes back |
| AI music generation | the composed prompt — the music file comes back | We send it out; the generated result comes back to your account |
| Chat with Kyger | your message, plus a page or two about your film: its title and logline, what you've decided about your characters — including how you've described them — your locations, the look you're after, and where your cut stands. If you attach an image to the chat, that image goes too | Continuous while you use the feature |
| Kyger writing assists | the scene/screenplay text or storyboard brief being worked on | We send it out; the generated result comes back to your account |
| Kyger frame analysis | a captured video frame (image) + a short context note | We send it out; only metadata comes back |
| KIQ film analysis | your screenplay, project metadata, and film file properties | We send it out; the generated result comes back to your account |
| Video export (Remotion Lambda) | every clip's media URL + the cut spec | We send it out; the generated result comes back to your account |
| Collab presence | your playhead + clip selection 4× per second | Continuous while you use the feature |
| Collab mutation stream | every clip / track / timeline change you make | Continuous while you use the feature |
| Stock media search + import | your search text goes to Pexels/Pixabay; the picked file downloads into your library | We send it out; the generated result comes back to your account |
| Save LUT to your library | the encoded 3D color table (a derived, non-reversible artifact — not the original .cube) lands in your private library | We send it out; only metadata comes back |
| Kyger learns your style (for your own assistant) | the NAMES of the edits/grades you accept + accept-vs-reject counts per surface (never your prompts, scene text, or names) — stored against your own account to bias your Kyger's defaults | We send it out; the generated result comes back to your account |
Nothing on this list runs in the background: each operation happens only when you press the button or ask Kyger for it.
05Subprocessors and service providers
This is our public subprocessor list. We use each provider for a specific job:
- Supabase — database, authentication, and media storage. Where all your content lives.
- Stripe — payments. Your card details go to Stripe directly and never touch our servers.
- OpenAI — powers Kyger chat, speech-to-text transcription, generated voice, and the OpenAI image models, and runs safety checks on prompts.
- Anthropic — answers Kyger chat when OpenAI is unavailable, and directly processes selected project context and extracted frame descriptions when you request KIq analysis.
- Google (Gemini API) — generates images with Google models when you request them, and runs automated quality checks on generated media.
- FAL — routes selected image and video generation requests to the model you choose.
- AtlasCloud — processes requested image and video generation using selected models, including prompts, selected input media, and generated output.
- Runway, Higgsfield, Kling, Seedance — AI video and image generation, when you request it.
- ElevenLabs — AI voiceover, sound-effect, and music generation, when you request it.
- Remotion Lambda (AWS) — renders your final video export in the cloud.
- Sentry — receives scrubbed crash and performance diagnostics; project content is excluded.
- Resend — delivers transactional email such as invitations and account notices.
Each receives only what section 4 describes for the operation you invoked, and only when you invoke it.
See the maintained subprocessor register for purposes, data categories, processing geography, and change notices.
06Model training
Kontagion does not use your content to train its own models. AI operations use commercial provider APIs. Those providers process the inputs and outputs needed to fulfill your request under their own enterprise or API data terms, which may include limited abuse-monitoring retention. We review those terms before enabling a provider and will update this policy before materially changing how your content is used.
07Your rights
You can access your data (it's in the product), correct it (profile and project surfaces are editable), export it (media downloads, screenplay export to FDX/Fountain, timeline export to OTIO/FCPXML/EDL), and delete it (delete projects and media in-app). For full account deletion, use the deletion control in Settings; it includes a grace period during which you can cancel. For a complete data export or another rights request, email info@kontagion.com from your account address — we fulfill verified requests within 30 days.
08Data retention
- Your content stays as long as your account does, or until you delete it.
- Deleted projects and media are removed from production systems promptly and fall out of backups on their rotation cycle.
- Telemetry and error logs are kept for product-improvement purposes and pruned on a rolling basis.
- Billing records are retained as long as tax and accounting law requires.
10Children
Kontagion is not directed at children under 13 (or the higher minimum age your jurisdiction sets), and we don't knowingly collect their data. If you believe a child has created an account, contact us and we'll delete it.
11International users (GDPR / CCPA)
If you're in the EU/EEA or UK, the rights in section 7 map to your GDPR rights (access, rectification, erasure, portability, restriction, objection), our legal bases are contract performance (running the product you signed up for) and legitimate interest (security, debugging), and you may lodge a complaint with your supervisory authority. If you're a California resident, the same section covers your CCPA rights to know, delete, and correct — and since we don't sell or share personal data for advertising, there's nothing to opt out of. Our infrastructure and subprocessors primarily process data in the United States and may process it in other countries where they operate. Where data-protection law requires a transfer mechanism, we rely on the provider's applicable contractual safeguards, such as Standard Contractual Clauses. Contact us for the current transfer details.
12Changes to this policy
When this policy changes materially we'll update the effective date at the top and notify signed-in users in the product before the change applies. The current version always lives at this URL.
13Contact
Privacy questions, rights requests, or anything unclear: info@kontagion.com. See also our Terms of Service.