How Kleo Works

Kleo is for people who feel overwhelmed with managing personal health and are looking to have an empowering health and wellbeing experience going forward. Kleo helps manage physical and mental health needs, creating a central safe space for staying on track of key health activities like appointments, while documenting health moments along the way.

Every health journey is unique, and Kleo has a toolbox that helps manage anything related to annual health, from general health visits, to fertility treatments, surgery, skincare journeys and beyond.

Soon, it will be for family health management as well, helping you take care of yourself and those that you love too.

Dr Bernhard Insam, who trained in Austria, is a Specialist Gastroenterologist in private practice with +30 years of experience in treating patients just like you. Now, he is a preferred provider for Discovery Health, Momentum Health and other leading medical insurance providers in South Africa. He prepares Kleo's verified health plans ensuring expert, trusted information is instantly available to you.

Kleo follows the U.S. health guidelines for screening recommendations in Kleo for two main reasons:

1.⁠ ⁠Clinical rigor and global trust: The U.S. has invested heavily in medical research and public health infrastructure. As a result, their screening guidelines — like those from the U.S. Preventive Services Task Force (USPSTF) — are internationally respected for being evidence-based, regularly updated, and widely referenced.

2.⁠ ⁠Compliance alignment: We’re registering Kleo in the U.S. and aim to meet the more stringent regulatory expectations there. Using U.S. guidelines ensures we’re aligned with global best practices from both a clinical and compliance perspective.

While South Africa does have national health protocols, it does not have a publicly accessible, centralized set of preventive screening guidelines that are as detailed, consistently updated, or transparent as those in the U.S. In practice, many South African clinicians reference international frameworks (like the U.S. or WHO) when making screening recommendations, especially in private care. 

We follow South African and New York regulations, namely the New York SHIELD Act and the U.S. FTC Health Breach Notification Rule. 

Kleo is not a HIPAA covered entity, meaning we are not an app type that is required to be HIPAA complaint, mainly due to the fact that you manage your own health data and it isn't shared with any insurer or provider on your behalf via Kleo. Even though this is the case, we have a roadmap in place to meet HIPAA standards as we grow in the U.S. as trust is at the heart at everything we do and want our users to have as much peace of mind as possible.

For Kleo’s MVP, security and data protection have been a key consideration, even at this early stage! Here is a summary on our technical infrastructure.

💪 Frontend - FLUTTERFLOW

Our frontend is built on FlutterFlow, and we use Supabase as our backend (authentication, database, and storage).

Here’s how each layer contributes to a secure architecture:

• Secure API integration: All calls to Supabase are made via secure HTTPS, ensuring encryption in transit.

• User Authentication handling: FlutterFlow integrates natively with Supabase Auth, using secure tokens for session management.

• Role-based access control (RBAC) support via Supabase’s row-level security policies ensures that users only access data they’re authorized to see.

💥 Backend - SUPABASE

• Authentication: We use Supabase’s built-in authentication (email/password and OAuth support), which includes:

• Secure session handling with JWTs

• Row-Level Security (RLS): This is a powerful PostgreSQL feature used by Supabase to restrict database access at the row level. Each table includes policies that ensure users can only read/write their own data.

• Storage security: Files uploaded by users (e.g. health records) are protected by Row Level Security

• Realtime monitoring and logs: Supabase provides an audit trail of database access and operations, which helps us track and analyze usage for anomalies.

Security Testing & Risk Mitigation

• MVP threat model: We’ve applied best practices around least-privilege access, encrypted communication, and secure authentication flows.

• Manual review: As a startup MVP, our focus has been on validating functionality while applying secure defaults through our stack.

• Future roadmap: As we scale, we will continue to increase the measures as we go from a low code mvp to a custom code app.

Basic Profile Information

When you complete your onboarding, we collect basic information. If you wish, you can even use a nickname on the app. This information helps us improve your experience and, in the future, offer features like location-based support or content that align with your needs.

Personal Health Records are 100% yours

When it comes to your personal health records, images, documents, and notes — those are entirely yours. We cannot view your uploaded documents, images, PDFs, or the contents of your notes. We have set up our business in a way that absolutely no one but you can view this sensitive information at any point. The only thing we can access is the file name you choose to give them.

Access Restrictions

Most importantly, access to all of this above information is access controlled. The founder of Kleo Health has access to the information.

Upon our founders request, our Lead Developer assists by creating a simple dashboard to display this data inside an internal dashboard. This access is given every 3 months for a few hours of development.

How Data is Used to Improve Kleo

Your health journey deserves privacy, respect, and empowerment — and that’s what we’re committed to. Right now, the information we collect, along with usage data of features, is used to develop a better product for you. As we grow beyond our closed beta, we will be anonymizing data even further and will continue to update our FAQs to this effect.

Yes. We periodically assess our tools in accordance with our security policy, because we believe that data integrity starts with high internal processes and standards.

Yes, please view it here: https://kleo.health/privacy-policy

We'd always love to hear from you. In your profile in the app, you can click "contact support" or you can email anna@kleo.health as well, both land up in our founders inbox. Expect a reply, our founder loves to actively engage with our early explorers of the app.

Yes, Kleo may use anonymized and aggregated data (data that cannot identify you) for research, health insights, or partnerships.

Women’s health has been under-researched for decades, and there are so many ways health systems need to improve to better support you and your family. By sharing anonymized data responsibly, Kleo wants to help close the gaps — contributing to global research, better treatments and care plans, and a healthier future for all.