Privacy Policy

Last updated: October 1, 2026

This policy explains how Kodium ("Kodium", "we", "us") collects, uses, shares, stores and deletes information when you use the Kodium website at kodium.app and the Kodium application at app.kodium.app (together, the "Service"). Kodium is a social media scheduling tool operated by Flobyte, Wyoming, United States.

1. Information we collect

Information you give us

Account information: your name, email address and password (stored only as a secure hash).
Content: the posts you create in Kodium, including captions, hashtags, images, videos, comments, scheduling times and the settings you choose for each post.
Communications: messages you send us by email, such as questions and support requests.

Payments

Kodium is a paid subscription. Payments are processed by Stripe, Inc. through Stripe Checkout and Stripe's billing tools. You enter your card or other payment details directly with Stripe; Kodium never sees or stores your full card number. From Stripe we receive your name, email address, billing country, the status of your subscription (such as active, cancelled or past due) and limited card details, namely the last 4 digits, card brand and expiry date, plus records of your payments and invoices. We use this to manage your subscription, show your billing details in the app, handle failed payments and keep the accounting records the law requires. Stripe also handles your payment data under its own Stripe Privacy Policy, for example to prevent fraud.

You can sign in to app.kodium.app with "Continue with Google" instead of a password. If you do, Google shares your name, email address and profile picture with Kodium. We use them only to sign you in to your Kodium account. We do not request access to your Gmail, Drive, contacts or any other Google data. You can remove Kodium's access at myaccount.google.com/permissions.

Information from social networks you connect

Today you can connect Facebook Pages and Instagram professional accounts. TikTok can be connected once TikTok approves Kodium's app. Other networks (such as YouTube, LinkedIn, X, Threads and Pinterest) are not switched on yet; the sections below describe what applies when they are.

When you connect a social media account, you sign in on that network's own login page and approve the permissions Kodium requests. Kodium never receives your social media password. Depending on the network and the permissions you approve, we receive:

Access tokens that let Kodium act for you within the approved permissions.
Basic profile information: account ID, display name, username and profile picture, so you can see which account a post will go to.
Account and post statistics (for example follower count, likes and views), where the network provides them, so you can see how your posts perform.
Publishing information the network returns after a post is published, such as the post ID and its link.

Meta (Facebook and Instagram)

If you connect Facebook Pages or Instagram professional accounts, Kodium uses Meta's official APIs to list the Pages and Instagram accounts you manage, publish the posts you schedule, and read basic insights for those posts.

TikTok

If you connect a TikTok account, Kodium uses TikTok Login Kit and the TikTok Content Posting API. With your permission we access:

Permission	What Kodium uses it for
user.info.basic, user.info.profile	Show your TikTok display name, username and avatar in Kodium so you know which account you are posting to.
user.info.stats	Show follower, following, like and video counts for the connected account.
video.list	Show your recently published videos and their links, so you can confirm that a scheduled post went live.
video.upload, video.publish	Upload the video you chose and publish it to your TikTok account with the caption and settings (such as privacy level and whether comments, Duet and Stitch are allowed) that you selected.

Before each TikTok post, Kodium shows the account's posting options as returned by TikTok and lets you choose them. Kodium does not publish to TikTok without you creating and scheduling the post.

Google (YouTube, coming soon)

YouTube is not switched on yet. Once it is, if you connect a YouTube channel, Kodium uses the YouTube API Services to upload and publish the videos you schedule and to show basic channel information. By connecting YouTube you also agree to the YouTube Terms of Service and the Google Privacy Policy.

Kodium's use and transfer of information received from Google APIs, including "Continue with Google" sign-in, adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Information collected automatically

Our servers and our network provider, Cloudflare, record technical data such as IP address, browser type and request times, used for security, abuse prevention and troubleshooting. The website's fonts are served from kodium.app itself, so visiting it does not send your IP address to a font provider. Kodium uses only the cookies needed to keep you signed in, plus security cookies that Cloudflare may set. The app's sign-in cookie is also sent to kodium.app; there it is only checked for presence, to show an "Open app" button instead of "Log in", and is not stored or logged. We do not use advertising or tracking cookies, and we do not sell data.

2. How we use information

To provide the Service: create, schedule and publish your posts to the accounts you connected.
To show you your connected accounts, scheduled posts and their results.
To keep the Service secure, prevent abuse and fix problems.
To process subscription payments, manage your billing and keep the records required by tax and accounting law.
To contact you about your account, your subscription or price changes, or to answer your requests.

We use data received from social networks and from Google only to provide the features you use. We do not use it for advertising, we do not sell it, and we do not use it to train AI models.

We share information only as needed to run the Service:

Social networks you connect receive the content you choose to publish to them.
Infrastructure providers: Hetzner Online GmbH (the servers we rent in Germany) and Cloudflare, Inc. (network security and delivery, United States).
Payment processing: Stripe, Inc. (United States) processes subscription payments, as described in Payments.
AI writing assistant: where the writing assistant is switched on and you use it, the text you send to it is processed by OpenAI (United States) to generate suggestions. Data received from social networks or Google is not sent to it.
Legal reasons: when required by law or to protect the rights and safety of users and others.

4. Storage, security and international transfers

Kodium data is stored on servers we rent from Hetzner Online GmbH in Germany. Access tokens and account data are stored in a private database that is not reachable from the internet. All traffic to the Service is encrypted with HTTPS. Access to production systems is limited to Flobyte staff who need it to run the Service.

Kodium is operated from the United States, and Cloudflare, Stripe and OpenAI process data in the United States, so your information may be accessed or processed outside the country where you live. When personal data from the EU, UK or Switzerland is transferred, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

5. Retention and deletion

Disconnecting a channel in Kodium revokes Kodium's access to it, and its stored access tokens are deleted within 30 days. You can also revoke access in the network's own settings: in Facebook, Settings & privacy → Settings → Business integrations (or Apps and websites); in TikTok, Settings and privacy → Security → Apps and services permissions.
Posts and media stay in your workspace until you delete them.
Deleting your account and data: email flokitechtips@gmail.com from your account's email address and ask us to delete your account. We delete your account, connected channels, tokens, posts and media within 30 days and confirm by email. Copies in backups are removed within a further 30 days.
Billing records (invoices, payment records and the billing details listed under Payments) are kept for as long as tax and accounting laws require, even after your account is deleted, generally for up to 10 years. Stripe keeps its own records under its privacy policy.
Server logs are kept for up to 30 days.

Deleting data in Kodium does not delete posts that were already published on a social network. You can remove those on the network itself.

6. Your rights

Depending on where you live (including under the EU/UK GDPR and US state privacy laws), you may have the right to access, correct, delete or export your personal data, to object to or restrict its processing, and to complain to a data protection authority. We process your data to perform our contract with you, to meet legal obligations such as keeping tax and accounting records, and, for security and abuse prevention, on the basis of our legitimate interests. To exercise any right, email flokitechtips@gmail.com. We reply within 30 days.

7. Children

Kodium is not intended for anyone under 18, and we do not knowingly collect data from children.

8. Changes

If we change this policy we will update the date at the top of this page, and for significant changes we will notify account holders by email.

9. Contact

Flobyte (Kodium)
Wyoming, United States
Email: flokitechtips@gmail.com