Security & Privacy Overview
How Kalima protects your account and your data, at a glance.
Your conversations are personal, and so is the data behind them. Kalima is built to keep your account safe, give you clear control over who can see your sessions, and let you exercise your privacy rights at any time. This page is a quick map of how those protections fit together, and where to go for the details.
How Kalima protects your account
Every account is protected by a layered set of safeguards that work quietly in the background, no setup required on your part.
- Strong passwords: New passwords must be at least 8 characters and include an uppercase letter, a lowercase letter, and a number.
- Google sign-in: Sign in with Google instead of a password, one click, nothing to remember or leak.
- Sign-in lockouts: After 5 failed sign-in attempts, an account is temporarily locked for 15 minutes to stop guessing.
- Automated abuse protection: Bot checks at sign-up and sign-in, plus rate limits, help keep automated and fraudulent activity out.
- Time-limited links: Verification links last 24 hours and password-reset links last 1 hour, and each can be used only once.
- Verified email: Verifying your email confirms you own the address before AI features and new sessions unlock.
A sign-in session stays valid for up to 7 days before you are asked to sign in again. When you sign out, the locally cached copy of your data is cleared from that device, useful on shared or public computers.
For the full details, password rules, resetting a forgotten password, Google sign-in, lockouts, and session length, see Account Security.
You control who can see your sessions
By default, your sessions are private to you. Sharing only happens when you choose it, and you can change or revoke access at any moment.
- Private by default. A new session is visible only to you until you decide to share it.
- Share on your terms. When you create a share link, you choose who can open it, anyone with the link, signed-in users only, specific people by email, or a whole team or organization, and you can add an optional password and expiry.
- Revoke instantly. Disabling a share link immediately disconnects anyone viewing it. Re-enabling it later keeps the same URL.
- Owner stays in control. Only the session owner can manage sharing for a session.
For sensitive recordings, add a password and an expiry date when you share. It keeps access tight and ensures the link stops working on its own once it is no longer needed.
Learn more in Sharing a Session and the full Roles & Permissions Reference.
Your privacy rights
Kalima supports the privacy rights you would expect, with self-service tools built right into your account.
Request a copy of your data. From your profile's Account tab, choose Request data export. You can submit one request every 7 days, and your data is delivered in roughly 1 to 2 weeks.
Delete your account permanently. From the Account tab's Danger Zone, choose Delete account, confirm your password (for email accounts), and type DELETE. Your transcripts, audio, and personal content are permanently removed, your remaining profile data is anonymized, and any active subscription is cancelled.
Account deletion is permanent and cannot be undone. A copy of your data export is delivered within about 1 to 2 weeks, so request your export first if you want to keep a record before deleting. Both actions require a verified email.
You can also stop marketing and lifecycle emails at any time with the one-click unsubscribe link in those emails, essential account messages like password resets and email verification always still come through.
See Your Data & Privacy for what Kalima stores, storage limits by plan, and exactly what export and deletion cover.
Security for teams and enterprises
Organizations get the same protections plus controls designed for managing many people at once.
Frequently asked questions
Yes. A session is visible only to you until you explicitly share it. You choose who can open a shared session and can revoke access at any time, which instantly disconnects current viewers.
Signing out clears the locally cached copy of your data from that device, so the next person to use it can't see your sessions. Your data remains safe in your account and is there when you sign back in.
After 5 failed sign-in attempts, an account is temporarily locked for 15 minutes as a protection against password guessing. Wait and try again, or reset your password. See Account Security.
Yes to both. Request a data export (one request every 7 days, delivered in about 1 to 2 weeks) or permanently delete your account, all from your profile's Account tab. Details are in Your Data & Privacy.
Single sign-on is available on the Enterprise plan and is configured together with the Kalima team. See Single Sign-On.