Privacy policy

This Privacy Policy governs how information about users of the Kakadu AI service, available through the mobile application, website, and other related digital products (hereinafter the "Service"), is processed and protected.

Using the Service means the User has read this Privacy Policy, understands its terms, and agrees to them. If the User does not agree with the terms of this Policy, they must stop using the Service.

1. General Provisions

1.1. The data controller and the entity organizing data processing within the Service is: KAKADU SECURE TECHNOLOGIES - FZCO, Trade License No. 67380, registered address: IFZA Business Park, Dubai Silicon Oasis, Dubai, United Arab Emirates. Phone: +971 056 377 3900. Support email: KakaduAi@yandex.ru. Support chat: available inside the app, "Support" section.

1.2. This Policy has been developed with reference to applicable data protection laws and internationally recognized data protection principles.

1.3. This Policy applies to all information the Administrator may obtain about the User while using the Service, including the mobile application, the web version, feedback forms, support requests, and other related features.

2. What Data We Process

2.1. In the course of using the Service, we may process the following User data: the mobile phone number used for registration and authorization in the Service, and the one-time confirmation code sent by SMS; the device push token used to send in-app notifications; an email address, which the User voluntarily provides through the support chat when submitting a refund request, for the purpose of sending the refund confirmation; account information; documents, images, files, and other materials that the User uploads, scans, creates, edits, stores, exports, or transfers through the Service; text extracted from documents and images using text recognition features; requests the User sends to the AI assistant, and the responses it generates; the User's correspondence with the support team; technical data related to the operation of the Service, including error reports, crash data, diagnostics, and service logs necessary to ensure the Service's functionality and security; data related to subscription payment and payment confirmation, to the extent necessary to record the payment and grant access to paid features.

2.2. We do not use an email address as a channel for registration, login, or general communication with the User: we receive an email address only in the single case described in Section 2.1 — when the User submits a refund request. We also do not request or collect data that is not required for the Service to function: the User's geolocation, contact list, or other device data unrelated to Kakadu AI's core functionality.

2.3. The User understands that when uploading documents to the Service, they independently determine the scope and nature of the information they place in the Service, and are responsible for the lawfulness of such uploads.

3. Cookies and Similar Technologies

3.1. The Service may use cookies and similar technologies to ensure the proper functioning of the web version, save settings, and enable login to the User account.

3.2. The User has the right to restrict the use of cookies in their browser settings; however, this may affect the functionality of certain features of the web version of the Service.

4. Purposes of Data Processing

4.1. The User's personal and other data is processed for the following purposes: creating and maintaining the User's account; providing access to the Service's features; processing the User's requests through the AI assistant and providing the responses it generates; storing, synchronizing, displaying, processing, exporting, and transferring documents at the User's request; operating document scanning, recognition, and editing features; handling support requests and providing assistance; reviewing refund requests and sending the refund confirmation to the email address provided by the User; ensuring information security and preventing unauthorized access, fraud, and abuse; confirming payment, granting paid access, and maintaining subscription records; improving the stability, performance, and quality of the Service; complying with applicable legal requirements.

4.2. We do not use the content of the User's documents for advertising purposes and do not sell User data to third parties.

5. Legal Grounds for Processing

5.1. The User's data is processed on the following legal grounds: the User's consent to the processing of personal data; the necessity of performing the agreement with the User, which consists of providing access to the Service and its features; the necessity of complying with applicable legal requirements; the Administrator's legitimate interest in ensuring the security, stability, and development of the Service, to the extent this does not infringe on the User's rights and freedoms.

6. Access to Documents and User Content

6.1. User content, including documents, images, scans, and text recognition results, is stored within the User's account.

6.2. The Administrator does not review Users' documents for personal purposes, does not use their content for its own commercial gain, and does not disclose such content to third parties, except where this is required: to provide technical support for the Service; at the User's own request; due to applicable legal requirements; to prevent violations of the rights of the Administrator, other Users, or third parties.

6.3. The User understands and agrees that in certain cases, limited technical access to data may be necessary to fix errors, restore functionality, review a support request, or ensure the security of the Service.

6.4. The User is solely responsible for the lawfulness of the content of documents placed in the Service, as well as for compliance with applicable law when using them.

7. Disclosure to Third Parties

7.1. We do not sell or disclose Users' personal data to third parties, except in cases expressly provided for by this Policy and applicable law.

7.2. Data may be shared with a limited circle of persons and services to the extent necessary for the Service to function, in particular: telecom operators and SMS-delivery services — to deliver the confirmation code during registration and login; hosting and server infrastructure providers; persons providing technical support and maintenance of the Service; government authorities and other authorized persons — in cases provided for by law.

7.3. Subscription payments are made through the Apple App Store or Google Play.

7.4. These payment platforms process payment data in accordance with their own rules and policies. The Administrator does not have access to and does not store Users' full payment details.

8. Data Storage and Security

8.1. User data is stored on secure servers, with access restricted to authorized personnel and systems required for the Service to operate.

8.2. Organizational and technical security measures are applied to protect data, including transmitting data over secure HTTPS connections and using modern encryption standards.

8.3. The app may use additional access-protection mechanisms, including a password, PIN code, Face ID, Touch ID, and other similar tools, if such a feature is supported by the User's device.

8.4. Despite the security measures taken, the User understands that no method of data transmission over the internet and no method of electronic storage can guarantee absolute security.

9. Data Retention Periods

9.1. User data is stored for the duration of the User's use of the Service and until the purposes of its processing are achieved, unless a longer retention period is required by law.

9.2. Correspondence with the support team may be retained for the period necessary to review the request, resolve any dispute, conduct internal quality analysis, and comply with legal requirements.

9.3. After a User's account is deleted, the data is subject to deletion or anonymization within a reasonable time, unless its further retention is required by law or to protect the Administrator's legitimate interests.

10. User Rights

10.1. The User has the right to: receive information about the processing of their personal data; request the correction, blocking, or deletion of their personal data; withdraw consent to the processing of personal data; delete their account; contact the Administrator on matters related to the processing of personal data.

10.2. To exercise these rights, the User may send a request to KakaduAi@yandex.ru or through the support chat in the app.

11. Age Restrictions

11.1. The Service has a content age rating of 16+.

11.2. The rules governing use of the Service and purchase of a paid subscription by persons under 18 years of age are set out in Section 4 of the Kakadu AI Terms of Use.

11.3. The Service is not directed at children under the age of 16. We do not knowingly collect personal data from children under 16 without the consent of a parent or legal guardian. If we become aware that we have collected personal data from a child under 16 without appropriate consent, we will take steps to delete that data.

12. Changes to This Policy

12.1. The Administrator may amend this Privacy Policy at any time.

12.2. A new version of the Policy takes effect from the moment it is posted on the website at: https://kakadu-app.com/en/legal/privacy-policy, unless a different date is specified separately.

12.3. The User is responsible for independently monitoring changes to the Policy. Continued use of the Service after a new version is published means the User agrees to such changes.

13. Contacts