This Privacy Notice explains how Kaidra, operating Kaidra, processes personal data when you use the Kaidra application, website and related services.
1. Who we are
Kaidra is an AI-assisted learning service operated by Kaidra. For privacy enquiries, rights requests, complaints or account-deletion enquiries, contact support.kaidra@gmail.com.
2. Personal data we may process
- Account information: email address, account identifier, authentication information, account status and app preferences.
- Study materials: PDFs, images, scans, photographs, pasted text and other material you intentionally submit.
- Generated learning data: notes, quizzes, flashcards, AI conversations and related study activity.
- Subscription information: plan, entitlement status, product identifiers and purchase-verification information. Where Google Play processes payment, Kaidra does not need your complete payment-card details.
- Technical information: IP address, app version, device/OS information, timestamps, request logs, error and security records where reasonably necessary.
- Support information: information you provide in support requests, messages or feedback.
3. Sources of personal data
We generally obtain personal data directly from you, from your use of Kaidra, from devices used to access the service, and from service providers supporting authentication, subscriptions, hosting, storage and related functions.
4. Purposes of processing
We may process relevant data to create and maintain accounts; provide study features; process submitted material; generate notes, quizzes, flashcards and AI responses; store learning material; verify subscriptions and entitlements; provide support; prevent abuse or fraud; secure and troubleshoot the service; comply with applicable law; and establish, exercise or defend legal rights where reasonably necessary.
5. AI processing
Kaidra uses artificial-intelligence systems to provide learning features. When an AI feature is requested, relevant parts of submitted study material, prompts and necessary context may be transmitted to AI infrastructure or model providers so the requested output can be generated.
Depending on production configuration, service providers may include infrastructure and technology providers such as Supabase, Railway, OpenRouter and underlying AI model providers. Providers may change as the service evolves. Users should avoid uploading personal data that is unnecessary for their learning purpose, especially highly sensitive information about themselves or another person.
6. Disclosure and service providers
Personal data may be disclosed where reasonably necessary to cloud hosting, database, authentication and storage providers; AI infrastructure/model providers; payment and subscription platforms such as Google Play; security and technical-support providers; professional advisers; or regulators, courts and authorities where disclosure is required or permitted by law.
7. International transfers
Some providers or systems used by Kaidra may process or store information outside Malaysia. Where personal data is transferred across borders, we seek to apply safeguards required by applicable law and reasonable protections relating to processor arrangements and security.
8. Security
We use reasonable administrative, technical and organisational measures intended to protect personal data, which may include authenticated access, access controls, transport encryption, restricted administrative access and service-level security controls. No internet-connected system can guarantee absolute security.
9. Retention
We retain personal data only for as long as reasonably necessary for the purposes described in this Notice and where necessary for legal, security, fraud-prevention, accounting, dispute or regulatory requirements. Retention periods may differ by data type. Where appropriate, data may be deleted, anonymised or de-identified.
10. Account and data deletion
You may request deletion from Kaidra account settings or through the account deletion section of this website. We may need to verify that the requester controls the relevant account. Following a valid completed deletion request, associated personal data will be deleted or de-identified subject to lawful or legitimate retention requirements.
11. Your rights and choices
Subject to applicable law and permitted exceptions, you may contact us to request access to or correction of personal data, make enquiries about processing, limit certain processing, withdraw consent where processing depends on consent, or request deletion where applicable. Contact support.kaidra@gmail.com. We may request reasonable information to verify identity.
12. Young users
Kaidra is intended for users aged 13 and above. The age at which a person may independently consent to particular processing differs by jurisdiction. Where applicable law requires parental or guardian consent or authorisation, that permission should be obtained before providing personal data or using relevant features.
13. Cookies and this website
This static legal website is designed to operate without advertising cookies. Hosting infrastructure may process technical request information for security and delivery. If analytics or other tracking technologies are introduced, this Notice will be updated where required.
14. Marketing
Where Kaidra sends optional marketing communications, applicable choices or unsubscribe mechanisms will be provided. Operational messages about security, billing, account administration or service delivery are not necessarily marketing communications.
15. Changes to this Notice
We may update this Notice when services, technologies, providers or legal obligations change. The effective date above will be updated, and additional notice will be provided where required.