Privacy
Beta, November 2026.
What stays on your Mac
Your projects: scripts, character and location notes, storyboards and pictures. They are kept in a file in your user library on this Mac and nowhere else. KinoFlow does not upload them, back them up or read them, except what you choose to send (below); if you delete the app's folder, they are gone.
What the server keeps
An account is an email address. With it the server keeps your credits balance and a line for each request Kino makes on your behalf: what kind it was, which model answered, how many tokens it used and what that cost. Those lines hold numbers and names only, never the words of your script, your prompts or the model's answers. The community keeps the discussions you take part in and the scenes you choose to share there; a shared scene is a copy, and withdrawing it removes the copy.
What the beta sends, if you agree
When the app first opens, it asks whether it may send how it is being used. If you agree, it sends the pages and features you use, the kinds of change you make and how many (not the words), errors and crashes, the app's version, and that you have it open. If you also tick the box, it sends the words you change, before and after, up to 500 characters at a time. If you say no, none of this is sent and the app works the same. You can change either answer in Settings › General, and delete what was sent there too. These records are kept for 90 days. Your answers are kept with your account, as the record of what you agreed to.
Feedback goes when you press Send, whatever you answered. It holds what you wrote and, if you leave them on, diagnostics (your Mac's version and memory, and the app's request logs, which you can read before sending) and a screenshot of the window, which is off until you tick it and can show your work. Feedback is kept for a year, and closing your account deletes it. Only KinoFlow's staff can read any of this.
Who else sees your words
When Kino reads, plans, draws or builds a space, the text and pictures it works on are sent through KinoFlow's server to the service that does the work. They are sent for that task only. KinoFlow's server passes them through and does not store them.
- Writing and reading: Google's Gemini, on Google Cloud (Vertex AI). If you choose Claude in Settings, Anthropic instead.
- Pictures: Google's Nano Banana models, on Google Cloud (Vertex AI). If you choose another picture model in Settings, fal.ai, which passes the request on to the model's maker.
- Spaces (beta): World Labs, which places your location photos in a space and draws the frames you ask for.
What they keep, under their terms for business customers: Google does not train its models on what it is sent; it may hold a request in a cache for up to 24 hours, and a request its automated checks flag as possible misuse is logged for up to 90 days. Anthropic and fal.ai do not train on it either. World Labs keeps a record of each job for 30 days, and its terms let it train on what it is sent unless the customer opts out. On 24 October 2026 KinoFlow turned off “Use my data to improve models” in its World Labs account. That applies only to what is sent from then on, so photos sent earlier are not covered, and World Labs does not say publicly whether the setting covers requests made through its API, which is how the app sends them.
The sign-in is run by Supabase, which also hosts the server's records and keeps a record of your sessions and sign-ins, including the IP address and the kind of device used. To stop invite codes being guessed, KinoFlow logs sign-in attempts, holding your IP address and email address only in a scrambled form (a keyed hash), and clears that log after 90 days. Kino is not offered in every region, so with each paid request the server works out the country of your IP address; when the hosting platform does not say, it asks ipapi.co, a lookup service in the United States. KinoFlow writes down neither the address nor the country.
kinoflow.ai and the downloads at dl.kinoflow.ai are served by Cloudflare, which sees your IP address as any web host does. The policy pages load their fonts from Google Fonts, so your browser asks Google for them.
AI tools you connect
Settings › Connections lets other AI tools work with your projects. It is off until you turn it on. Tools on this Mac, such as Claude Code or Cursor, talk to the app directly; tools on the web, such as Claude or ChatGPT, reach it through KinoFlow's relay at mcp.kinoflow.ai, once you sign in and allow them. A connected tool can read and change your projects, and what it reads goes to that tool's own service, under your agreement with it. The relay runs on Cloudflare. It passes each request and its answer through, and keeps only the list of tools, a count of this minute's requests, a line for each call (which tool, what kind of call, whether it worked) and a line each time your Mac connects.
KinoFlow sends three kinds of mail, through Resend: the sign-in code, your invitation, and notices about updates.
Deleting
In Settings › Account you can delete everything on this Mac; your account stays open. To close the account on the server and remove its records, write to hello@kinoflow.ai from the address the account is under.
Who is responsible
Newdance Films (Shanghai) Co., Ltd., Shanghai, China (“KinoFlow”) decides what is collected and why. Write to hello@kinoflow.ai for anything about your data; Zemin Li answers as the person in charge of privacy. The server's records are kept by Supabase in Singapore; its functions run wherever Supabase's network is nearest to you.
Age
KinoFlow is for people aged 16 and over. If you are younger, do not create an account.
Where you are
Japan. Under the Act on the Protection of Personal Information, your email address and usage records are used to provide the service, bill it and answer you. The words and pictures you send Kino are provided to third parties outside Japan, only so that they can do the task, under the terms described above: Google in the United States (with the global endpoint KinoFlow uses, a request may be handled in any country where Google Cloud runs), World Labs in the United States, and, if you choose them, Anthropic and fal.ai in the United States. Your email address and records are held by Supabase in Singapore, which handles requests wherever its network is nearest, and served through Cloudflare in the United States; mail goes through Resend, and your IP address may be looked up at ipapi.co, both in the United States. Japan has not recognised these countries as having a system equivalent to its own, and those providers' handling is bound by their terms. You may ask for disclosure, correction, suspension of use or deletion of your personal information at hello@kinoflow.ai.
Taiwan. As the Personal Data Protection Act (個人資料保護法第 8 條) asks: KinoFlow collects your email address and the usage records described above, for the purposes of providing the service, billing and support (代號 069 契約、090 消費者、135 資通服務), for as long as your account exists or for the shorter periods stated above, in Taiwan, in Singapore (where Supabase keeps the records), in the United States (where the providers named above and Cloudflare are) and in any other country where Google Cloud or Supabase handles a request, by automated means. You have the right to ask what is held, to read and copy it, to correct it, to stop its collection, processing or use, and to delete it; without an email address no account can be opened.
California and the rest of the United States. KinoFlow collects identifiers (your email address), usage records, and the content you choose to send Kino, for the purposes above. KinoFlow does not sell personal information and does not share it for cross-context advertising, and does not collect sensitive personal information beyond what signing in needs, so there is no “Do not sell or share” link to offer. You may ask to know, correct or delete what is held, and you are not treated differently for asking, at hello@kinoflow.ai.
Canada. By using KinoFlow you consent to the collection described here, as PIPEDA and Québec's Law 25 understand it. The person in charge of privacy, and the address for a complaint or an access request, are above.
Questions
hello@kinoflow.ai
隐私说明
内测版，2026 年 11 月。
留在你 Mac 上的
你的项目：剧本、人物和场景的描述、分镜和图片。它们保存在这台 Mac 你的用户资料库里的一个文件中，别处没有。KinoFlow 不会上传、备份或读取它们，除非你选择发送（见下文）；删掉应用的文件夹，它们就没了。
服务器保存的
一个账号就是一个邮箱地址。服务器为它保存积分余额，以及 Kino 替你发出的每次请求的一行记录：是什么种类、哪个模型回答的、用了多少 token、花了多少钱。这些记录只有数字和名称，从不包含剧本的文字、你的提示词或模型的回答。社区保存你参与的讨论和你主动分享到那里的场次；分享的是一份副本，收回就会删除副本。
内测版发送的内容（你同意时）
第一次打开应用时，它会问你能否发送使用情况。你同意后，它发送用到的页面和功能、改动的类型和次数（不含文字）、出错和闪退记录、应用版本，以及你正在使用应用这件事。如果你同时勾选，它还发送你改动的文字（改前和改后，每次最多 500 字）。你不同意时，这些都不发送，应用的功能没有任何区别。你可以随时在「设置 › 通用」里修改，也可以在那里删除已发送的数据。这些记录保存 90 天。你的选择随账号保存，作为你同意过什么的记录。
反馈只在你按下「发送反馈」时发出，和上面的选择无关。内容是你写的文字；如果你保留勾选，还有诊断信息（Mac 的版本和内存、应用的请求日志，发送前可以查看）；如果你勾选，还有这个窗口的截图，截图可能显示你的作品。反馈保存一年，关闭账号时一并删除。这些内容只有 KinoFlow 的工作人员能看到。
还有谁会看到你的文字
Kino 读剧本、规划、画图或建空间时，它处理的文字和图片会经 KinoFlow 的服务器发给做这件事的服务，只为那一次任务而发送。KinoFlow 的服务器只做转发，不存储。
- 写作和读剧本：Google 的 Gemini，运行在 Google Cloud（Vertex AI）上。如果你在设置里改选 Claude，就改由 Anthropic 处理。
- 画图：Google 的 Nano Banana 模型，运行在 Google Cloud（Vertex AI）上。如果你在设置里改选其它画图模型，就由 fal.ai 处理，它会把请求转给模型的开发方。
- 空间（内测）：World Labs，把你拍的场地照片放进一个空间，并画出你要的画面。
它们按各自面向企业客户的条款保存的内容：Google 不用收到的内容训练模型，可能把请求放在缓存里最多 24 小时，被它的自动检查标记为可能滥用的请求会记录最多 90 天；Anthropic 和 fal.ai 同样不用它训练；World Labs 保留每个任务的记录 30 天，它的条款允许它用收到的内容训练模型，除非客户选择退出。2026 年 10 月 24 日，KinoFlow 在自己的 World Labs 账户里关闭了「Use my data to improve models」。这只对之后发送的内容生效，更早发送的照片不在其内；World Labs 也没有公开说明这个设置是否覆盖通过 API 发送的请求，而应用正是通过 API 发送的。
登录由 Supabase 提供，服务器上的记录也托管在它那里，它会保存你的会话和登录记录，包括 IP 地址和设备类型。为防止邀请码被猜中，KinoFlow 会记录登录尝试，其中的 IP 地址和邮箱地址只以加密形式（带密钥的哈希）保存，这份日志 90 天后清除。Kino 不在所有地区提供，所以每次扣费的请求，服务器都会判断你的 IP 地址所在的国家；托管平台没有给出时，会向美国的查询服务 ipapi.co 查询。KinoFlow 不会记下地址和国家。
网站 kinoflow.ai 和下载站 dl.kinoflow.ai 由 Cloudflare 提供，它和任何网站托管方一样能看到你的 IP 地址。隐私、条款等页面的字体来自 Google Fonts，所以你的浏览器会向 Google 请求字体。
你接入的 AI 工具
「设置 › 连接」可以让其他 AI 工具处理你的项目，你打开之前一直关着。这台 Mac 上的工具（如 Claude Code、Cursor）直接连到应用；网页上的工具（如 Claude、ChatGPT）在你登录并允许之后，经 KinoFlow 的中继 mcp.kinoflow.ai 连到应用。接入的工具可以读取和修改你的项目，它读到的内容会发给它自己的服务，按你和它之间的约定处理。中继运行在 Cloudflare 上，只转发每次请求和回答，只保存工具列表、这一分钟的请求次数、每次调用的一行记录（哪个工具、哪类调用、成功与否），以及你的 Mac 每次连上时的一行记录。
邮件
KinoFlow 通过 Resend 发送三种邮件：登录验证码、邀请信和版本更新通知。
删除
在「设置 › 账户」里可以删除这台 Mac 上的全部内容，账号不会因此关闭。要关闭服务器上的账号并删除其记录，请用账号所用的邮箱写信到 hello@kinoflow.ai。
谁负责
Newdance Films (Shanghai) Co., Ltd.（中国上海）（「KinoFlow」）决定收集什么、为什么收集。有关你的数据的任何事，写信到 hello@kinoflow.ai；由李泽民作为隐私负责人答复。服务器上的记录由 Supabase 保存在新加坡；服务器函数在 Supabase 离你最近的节点运行。
年龄
KinoFlow 面向 16 岁及以上的人。未满 16 岁请不要注册账号。
按地区
日本。依据个人情报保护法，你的邮箱地址和使用记录用于提供服务、计费和答复你。你发给 Kino 的文字和图片会提供给日本境外的第三方，只为完成那一次任务，并受上文所述的条款约束：位于美国的 Google（KinoFlow 使用的是全球端点，请求可能在 Google Cloud 所在的任何国家处理）、位于美国的 World Labs，以及你改选时，位于美国的 Anthropic 和 fal.ai。你的邮箱地址和记录由 Supabase 保存在新加坡（它在离你最近的节点处理请求），并经位于美国的 Cloudflare 提供服务；邮件经位于美国的 Resend 发送，你的 IP 地址可能发给位于美国的 ipapi.co 查询。日本没有认定这些国家拥有与日本同等的制度，这些提供方的处理受其条款约束。你可以写信到 hello@kinoflow.ai 请求开示、订正、停止利用或删除你的个人信息。
台湾。依个人资料保护法第 8 条告知：KinoFlow 收集你的邮箱地址和上文所述的使用记录，目的为提供服务、计费和支持（代号 069 契约、090 消费者、135 资通服务），期间为账号存续期间或上文写明的较短期间，地区为台湾、新加坡（Supabase 保存记录之处）、美国（上述提供方与 Cloudflare 所在地），以及 Google Cloud 或 Supabase 处理请求时所在的其他国家，方式为自动化处理。你有权查询、阅览、复制、补充更正、停止收集处理利用，以及删除；不提供邮箱地址就无法开立账号。
加州与美国其他地区。KinoFlow 收集识别信息（邮箱地址）、使用记录，以及你主动发给 Kino 的内容，用途如上。KinoFlow 不出售个人信息，不为跨情境广告而共享，除登录所需外不收集敏感个人信息，因此没有「不要出售或共享」的链接可提供。你可以写信到 hello@kinoflow.ai 要求知悉、更正或删除所持有的信息，不会因此被区别对待。
加拿大。使用 KinoFlow 即表示你同意本页所述的收集，与 PIPEDA 和魁北克第 25 号法律的理解一致。隐私负责人以及投诉或查询的联系方式见上。
有问题
hello@kinoflow.ai