Privacy Policy

1. Introduction

Kardly.ai ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered study assistant platform, including our website, mobile applications, and services (collectively, the "Service").

By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, password, and profile information when you create an account
• Content: Documents, PDFs, text, and study materials you upload or input into our Service
• Usage Data: Information about how you use our Service, including features accessed and time spent
• Communication: Messages, feedback, and correspondence you send to us

2.2 Automatically Collected Information

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Analytics: Pages visited, features used, click patterns, session duration
• Cookies and Tracking: We use cookies and similar tracking technologies to enhance your experience
• Log Data: Server logs, error reports, and diagnostic information

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, maintain, and improve our Service
• To process your requests and generate study materials (flashcards, summaries, quizzes)
• To authenticate your identity and manage your account
• To communicate with you about your account, updates, and support
• To analyze usage patterns and improve user experience
• To detect, prevent, and address technical issues and security threats
• To comply with legal obligations and enforce our Terms of Service
• To send you marketing communications (with your consent, where required)

4. Data Processing and AI

Our Service uses artificial intelligence to process your uploaded documents and generate study materials. When you upload content:

• Your documents are processed by our AI systems to extract and analyze content
• We may use third-party AI services to enhance our processing capabilities
• Your content is stored securely and is only accessible to you and authorized personnel
• We do not use your content to train AI models for other users without your explicit consent
• You retain all rights to your uploaded content

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

5.1 Service Providers

We may share information with third-party service providers who perform services on our behalf, such as:

• Cloud storage and hosting providers
• AI and machine learning service providers
• Analytics and monitoring services
• Payment processors
• Email and communication services

These providers are contractually obligated to protect your information and use it only for specified purposes.

5.2 Legal Requirements

We may disclose your information if required by law, court order, or government regulation, or to:

• Comply with legal processes or respond to government requests
• Enforce our Terms of Service and protect our rights
• Protect the safety of users or the public
• Prevent fraud or security threats

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections.

6. Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit (SSL/TLS) and at rest
• Secure authentication and access controls
• Regular security audits and vulnerability assessments
• Firewall and intrusion detection systems
• Employee training on data protection

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

7. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

7.1 Access and Portability

• Request access to your personal information
• Receive a copy of your data in a portable format

7.2 Correction and Deletion

• Request correction of inaccurate or incomplete information
• Request deletion of your personal information
• Delete your account and associated data through account settings

7.3 Objection and Restriction

• Object to processing of your personal information
• Request restriction of processing in certain circumstances
• Opt-out of marketing communications

7.4 Withdraw Consent

Where processing is based on consent, you may withdraw your consent at any time.

To exercise these rights, please contact us at info@kardly.ai. We will respond to your request within 30 days.

8. Children's Privacy

Our Service is not intended for children under the age of 13 (or 16 in the European Union). We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we become aware that we have collected information from a child without parental consent, we will take steps to delete that information.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy, including:

• Standard contractual clauses approved by relevant data protection authorities
• Compliance with applicable data protection laws, including GDPR
• Regular assessments of data transfer mechanisms

10. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Remember your preferences and settings
• Authenticate your identity
• Analyze usage patterns and improve our Service
• Provide personalized content and advertisements

You can control cookies through your browser settings. However, disabling cookies may limit your ability to use certain features of our Service.

11. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When you delete your account, we will delete or anonymize your personal information, except where we are required to retain it for legal, regulatory, or legitimate business purposes.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated Privacy Policy on this page
• Updating the "Last Updated" date
• Sending you an email notification (for significant changes)
• Displaying a notice on our Service

Your continued use of our Service after any changes constitutes acceptance of the updated Privacy Policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

14. GDPR Compliance (European Users)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

• Right to be Informed: You have the right to be informed about how we process your data
• Right of Access: You can request a copy of your personal data
• Right to Rectification: You can request correction of inaccurate data
• Right to Erasure: You can request deletion of your data ("right to be forgotten")
• Right to Restrict Processing: You can request limitation of data processing
• Right to Data Portability: You can receive your data in a structured, machine-readable format
• Right to Object: You can object to processing based on legitimate interests
• Rights Related to Automated Decision-Making: You have rights regarding automated processing

Our legal basis for processing your data includes: consent, contract performance, legal obligations, legitimate interests, and protection of vital interests.

15. CCPA Compliance (California Users)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You can request information about what personal information we collect, use, and disclose
• Right to Delete: You can request deletion of your personal information
• Right to Opt-Out: You can opt-out of the sale of personal information (we do not sell personal information)
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

To exercise your CCPA rights, please contact us at info@kardly.ai.