Who we are
Kineo is operated by LEUNG KA LUNG, an individual (sole proprietor) based in the Hong Kong SAR, who is the data controller responsible for the personal data processed through Kineo. For any privacy request — a data export, a correction, or account deletion — contact us at support@kineo.studio.
What we collect
Account & login info: Your email address, used solely for account creation, secure login, and verification. Generation data: Your text prompts, model configurations, generated video links, and task statuses. Custom assets (optional): Portrait photos and voice samples you upload for custom avatar and voice cloning.
Analytics & advertising attribution
Site analytics: We use cookie-less, privacy-friendly analytics (Vercel Analytics, Cloudflare Web Analytics) to measure traffic and page performance in aggregate. These do not identify you individually. Advertising attribution: If you arrive via a paid ad (e.g. Google Ads), we set a short-lived first-party cookie recording which campaign referred you (the ad platform, medium, and campaign name only — never an ad network's own click ID). This tells us which channels are worth continuing to advertise on. It is used solely for our own internal reporting, is never sold or shared with a third party, and expires automatically after 30 days if you don't create an account.
Your API key security
Key protection: We encrypt your API keys with industry-standard authenticated encryption and store them in a dedicated secrets vault, isolated so that no other user can ever access yours. Your key is never shown in your browser or written to your device. Used only for your generations: Your key is decrypted on our servers solely to send your request to the compute provider, and is permanently deleted when you remove the key or close your account.
Data storage
Secure storage: All user data and custom assets are kept in secure cloud data centers protected by strong firewalls. Video protection: Your generated videos are stored in encrypted cloud storage and served through time-limited secure links (Signed URLs) to prevent unauthorized access. Only you and the people you share a link with can watch them.
Third-party services
Our compute provider (currently WaveSpeed) runs the AI for voice, image, and video generation. When you create a video, your encrypted key and prompts are securely sent to them solely to render your request. Their use of that data is governed by their own privacy policy.
Data retention
Your generated content and uploaded assets are kept until you choose to delete them. You can delete your account and clear all associated history at any time in your settings.
Contact us
For any privacy questions, data export, or account deletion requests, contact our support team at support@kineo.studio.