Legal

Privacy Policy

Last updated 31 October 2026

This policy explains how Keep It Reel (“we”, “us”) collects, uses, shares and protects personal data when you use our website at kakis.sg and the Keep It Reel studio (together, the “Service”). We handle personal data in line with Singapore’s Personal Data Protection Act 2012 (PDPA).

What we collect

• Account details from Google. When you sign in with Google we receive your Google account identifier, email address and profile picture. We do not receive your Google password.
• Content you upload. Photos of yourself or of properties, and voice recordings you make or upload to create your avatar and videos.
• Content you create. Video topics, scripts, generated speech and generated videos, and your settings such as duration and resolution.
• Consent records. When you agree to create an avatar or voice clone, we record when you agreed and which version of the consent you accepted.
• Credits and billing records. Your credit balance and history, the plan you choose, and Stripe checkout references. Card details are entered on Stripe’s secure form and are never sent to or stored by us.
• Technical data. Information needed to run and secure the Service, such as request logs, IP addresses and timestamps kept by our servers.

How we use it

• To create and secure your account and keep you signed in.
• To build your avatar and voice clone, write scripts, and generate speech and videos when you ask us to.
• To track credits, apply free trials and process plan purchases.
• To operate, maintain, back up and protect the Service, and to prevent misuse.
• To meet legal obligations and respond to lawful requests.

We do not sell your personal data, show you third-party advertising, or use tracking or analytics cookies.

Your face and voice

Photos and voice recordings can identify you. We only create an avatar or voice clone after you give explicit consent in the studio, and we use them only to produce content for your own account. You must not upload another person’s face or voice unless they have agreed to it.

Who we share it with

We share data only with service providers that help us run the features you use, and only as needed for that feature:

• Google – sign-in.
• ElevenLabs – creating your voice clone and generating speech from your scripts (receives your voice recordings and script text).
• Higgsfield – generating videos (receives the photo, voice audio and settings for each video).
• Anthropic – the optional script writer (receives the topic and settings you enter).
• Stripe – payments (receives your payment and billing details directly).
• DigitalOcean – hosting; our servers and backups are located in Singapore.

Some of these providers process data outside Singapore. Where that happens, we rely on their contractual and security commitments to protect it to a standard comparable to the PDPA. We may also disclose data where required by law.

Cookies

We use a single essential cookie, kir_session, to keep you signed in. It is HttpOnly, limited to our site and expires after 8 hours or when you sign out. Google and Stripe may set their own cookies when you use their sign-in or payment forms.

How long we keep it

We keep your account, uploads and generated content while your account is active, so you can keep using them. You can remove finished videos from your workspace at any time. Backups taken when we update the Service are rotated and older copies are deleted automatically. Links to videos held by our video provider are temporary. When you ask us to delete your account, we delete your data from our systems and backups within a reasonable time, unless we need to keep a record by law.

Security

We use HTTPS throughout, store uploads privately per account, restrict server access, and keep provider credentials only on our servers. No system is completely secure, but we work to protect your data and will notify you and the authorities of a notifiable data breach as the PDPA requires.

Your choices and rights

You can ask to access or correct your personal data, ask how it has been used or disclosed, withdraw consent (for example, for your voice clone), or ask us to delete your account. Withdrawing consent may mean we can no longer provide some features. We will respond within a reasonable time.

Children

The Service is intended for adults and is not directed at anyone under 18.

Changes

We may update this policy as the Service changes. We will post the new version here with a new “last updated” date, and tell you in the studio about significant changes.

Contact

Contact details for privacy requests will be published on this page.