Klarna
- The policy allows AI training; it does not describe an opt-out.
- Your data is used for personalized ads, including by third-party ad companies.
- Data is shared with partners and affiliates; you can opt out.
- The documents do not say who can read your content.
Klarna collects financial, device, ad, and face-scan data, trains models on activity, sells/shares for ads, and can close accounts without notice.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
- Uses your content for AI training with no opt-out
Collected
They collect account and money data, device IDs, location, browsing, ads data, and sometimes a face scan.
Read the exact line
Privacy policy
“Examples include your name, e-mail address, telephone number, postal address, device identifiers, IP addresses, geolocation information, and financial account information that you provide, such as credit or debit card numbers.”
Training
They use it for payments, credit scoring, ads, and training AI models on your activity data.
Read the exact line
Privacy policy
“We use and Activity Data to train, test, and improve our proprietary algorithms.”
Sharing
Service providers, merchants, credit bureaus, and ad partners can get data; some sharing counts as a sale.
Read the exact line
Privacy policy
“We have sold/shared the following categories of personal information in the prior 12 months.”
Kept
They keep data while they need it or the law requires; data may be kept forever.
Read the exact line
Privacy policy
“Personal information that has been or so that it cannot reasonably be used to infer information about you or otherwise be linked to you may be retained indefinitely.”
Controls
You can email or call to access or delete data, opt out of sale/sharing, and edit the AI assistant memory tab.
Read the exact line
Privacy policy
“To submit a request, email privacy@klarna.com, call +1 888 518-2771, or make a request through our Privacy page.”
Fine print
You must be 18; they can close access without notice; the site is as-is.
Read the exact line
Terms of service
“Klarna reserves the right to terminate access to your account and your ability to post to this Site with or without cause and with or without notice, for any reason or no reason”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Opt out of sale/sharing and profiling
US Regional Privacy Notice page, or privacy@klarna.com; or enable GPC in your browser
Request access, correction, or deletion
email privacy@klarna.com, call +1 888 518-2771, or the Privacy page webform
Limit nonaffiliate marketing sharing
Klarna App → Settings → Privacy (or app.klarna.com/login → Settings → Privacy)
Edit AI assistant memory
AI assistant interface memory tab
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
They use your shopping and account activity to train their AI and credit models.
Read the exact line
Privacy policy
“We use and Activity Data to train, test, and improve our proprietary algorithms.”
For example, your past buy-now-pay-later history can be used to improve how they score other people.
To prove who you are they can scan your face and send that to outside ID vendors.
Read the exact line
Privacy policy
“Klarna and/or the respective ID&V Vendor will ask you to take a selfie through the user flow through Klarna’s services.”
For example, when you verify an ID you take a selfie that a company like Onfido maps as a faceprint.
Ad partners can pass your data so other companies can target you.
Read the exact line
Privacy policy
“These marketing or advertising partners may allow third party companies to access information about you so that those companies may market other products you may be interested in.”
For example, after you shop in the app, another brand might show you ads based on that.
Under some state laws they treat some sharing as selling your data, with an opt-out.
Read the exact line
Privacy policy
“There are certain activities we perform that do fall under the very broad definition of “sale.””
For example, sharing your email or device ID with ad partners can count as a sale you can turn off.
They can shut off your access anytime and do not have to warn you first.
Read the exact line
Terms of service
“Klarna reserves the right to terminate access to your account and your ability to post to this Site with or without cause and with or without notice, for any reason or no reason”
For example, they could lock you out of the site today without an email explaining why.
If someone sues them because of how you used the site, you may have to pay their legal bills.
Read the exact line
Terms of service
“You agree to and hold Klarna Entities and their respective officers, directors, employees, agents, licensors and business partners harmless from and against any and all costs, damages, liabilities and expenses”
For example, if a review you posted leads to a lawsuit, they can ask you to cover their lawyer costs.
Reviews and other posts you share are public and other people can copy them.
Read the exact line
Terms of service
“You acknowledge that by sharing content you make it publicly available, meaning that information about you becomes available to others and may be used and shared further by other individuals.”
For example, a product review with your nickname can be seen and reshared by anyone.
The AI helper remembers past questions; you can look at and change that memory in the app.
Read the exact line
Privacy policy
“The AI assistant will retain information about you and your previous queries in its memory tab, which you can review and edit in the AI assistant interface.”
For example, if you asked about a purchase, that can stay in the memory tab until you edit it.
Their browser add-on tells them which sites you visit.
Read the exact line
Privacy policy
“When you browse the internet with the Klarna Desktop Extension enabled, we will receive the domain of the websites that you visit.”
For example, visiting a shoe store site with the extension on sends that site’s domain to Klarna.
They say they use standard security like encryption and locked files, but not 100% guaranteed.
Read the exact line
Privacy policy
“We use reasonable security measures to protect your personal information from unauthorized access and use in compliance with applicable law.”
For example, they claim files are encrypted, but they still tell you to protect your password.
Words to know
Legal words from the lines above, in plain English.
- device identifiers
- Codes that single out your phone or computer, used to recognise you across apps and sites. For example, the advertising ID on your phone lets two unrelated apps know they are seeing the same person.
- precise geolocation
- Your exact position, usually from GPS, often accurate to within a few metres. For example, an app can tell not just your city but which building you are in right now.
- de-identified
- Data with your name and obvious identifiers removed, though it can sometimes still be traced back to you. For example, your chats with names stripped out may still be kept and studied after you delete your account.
- personal data
- Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
- service providers
- Outside companies that handle your data on the app's instructions, such as a cloud host or an email sender. For example, the company that stores the app's files in the cloud sees your data but only does what the app tells it.
- third parties
- Any company or person other than you and the app, such as advertisers, partners or analytics firms. For example, an analytics company that receives a record of every screen you tap is a third party.
- indemnify
- You promise to pay the company's legal costs and losses if your use of the service gets it sued. For example, if you post a song you do not own and the label sues the app, you owe the app's lawyer bills.
- retention
- How long a company keeps your data before deleting it. For example, a policy might keep your messages for 30 days after you delete them, or for as long as it likes.
How we got here · grade F · score 27/100 · 15 of 15 policy answers backed by a verified quote · 2 not stated
What does the app collect beyond what it needs to work?
They collect far more than login and payments: device IDs, geolocation, third-party vendor data, browsing domains from the extension, and more.
Does it record your voice, face or body, and what happens to that?
They collect faceprints and selfies for ID checks and share that biometric data with outside ID vendors.
Are your chats and uploads used to train AI models, and is that off by default?
They use your transactional and activity data to train and improve their AI and credit models, with no general training opt-out described.
Can employees or contractors read your conversations, and when?
Not stated in the documents.
Are you profiled or tracked for advertising?
They use cookies and ad partners for targeted ads, including partners who may let other companies market to you.
Do they sell or share your data, and can you opt out?
They say some sharing with ad and analytics partners counts as a sale or share under state law, and you can opt out.
What rights do they take over what you type and what the AI makes?
Content you upload or share on the site is treated as public, and they take full rights in feedback you send.
How long do they keep your data after you delete it, and can you delete it in the app?
You delete by contacting them; they keep data as long as they have a business or legal need, and de-identified data may stay forever.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
The AI assistant keeps past queries in a memory tab you can review and edit in the interface.
Do they commit to basic security, and have they leaked data?
They describe reasonable security such as encryption and secured files, with no audit or leak history in these docs.
Is there a real age gate, and are teens protected?
The site terms say you must be at least 18; they only ask you to confirm that. Under-13 data is deleted if found.
Will they tell you when the rules change, and is the policy specific?
They can update the terms by posting them; keeping using the site means you accept. Privacy changes get an aim of advance notice.
Can they close your account without warning, and can you get your data out first?
They can end your access for any reason or none, with or without notice.
If something goes wrong, who pays?
The site is as-is with liability capped at actual direct damages, and you must indemnify them for claims from your use.
Do subscriptions renew on their own, and can you get a refund?
Not stated in the documents.
The privacy policy is 8,093 words at a professional or legal expert level (Flesch reading ease 1.4); the terms are 3,894 words at a professional or legal expert level.
