Skip to main content

Privacy Policy

Last updated: 9 May 2026

1. Data Controller

Kuton Labs Ltd ("we", "us", or "our") is the data controller responsible for your personal information. You can contact us regarding any privacy matters at the contact information provided at the end of this policy.

2. Information We Collect

We collect the following types of information:

  • Account Information: Email address, name, and authentication data when you create an account
  • Assessment Data: Responses to skill assessments and learning progress
  • Usage Data: How you interact with our platform, including pages visited and time spent
  • Payment Information: Billing details processed securely through our payment provider (Stripe)
  • Technical Data: IP address, browser type, and device information for security and analytics

3. Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Contract Performance: To provide our services and fulfill our obligations to you
  • Legitimate Interest: To improve our services, ensure security, and analyze usage patterns
  • Consent: Where you have provided explicit consent for specific processing activities
  • Legal Obligation: To comply with applicable laws and regulations

4. How We Use Your Information

We use your personal information to:

  • Provide and maintain our learning platform
  • Personalize your learning experience and recommendations
  • Process payments and manage subscriptions
  • Communicate with you about our services
  • Improve our platform and develop new features
  • Ensure security and prevent fraud
  • Comply with legal obligations

5. Data Sharing

We do not sell your personal data. We may share your information with:

  • Service Providers: Third-party providers who help us operate our platform (e.g., Authentication providers, payment providers)
  • Legal Requirements: When required by law or to protect our rights and safety
  • Business Transfers: In connection with any merger, sale, or transfer of assets

All third-party service providers are contractually bound to protect your data and use it only for the purposes specified.

6. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy or as required by law. Account data is retained while your account is active and for a reasonable period thereafter. You may request deletion of your data at any time.

7. Your GDPR Rights

Under GDPR, you have the following rights:

  • Right of Access: Request copies of your personal data
  • Right of Rectification: Request correction of inaccurate data
  • Right of Erasure: Request deletion of your personal data
  • Right to Restrict Processing: Request limitation of how we process your data
  • Right to Data Portability: Request transfer of your data to another service
  • Right to Object: Object to processing based on legitimate interests
  • Right to Withdraw Consent: Withdraw consent for consent-based processing

To exercise these rights, please contact us using the information below. We will respond within one month of receiving your request.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption, access controls, and regular security assessments. However, no system is completely secure, and we cannot guarantee absolute security.

9. International Transfers

Your data may be processed in countries outside the EU/EEA. When this occurs, we ensure adequate protection through appropriate safeguards such as Standard Contractual Clauses or adequacy decisions by the European Commission.

10. Cookies

We use essential cookies necessary for the operation of our platform. We do not use non-essential cookies that require consent under GDPR. Our cookies are used solely for authentication, security, and basic functionality.

11. Children's Data

Our service is not intended for children under 16. We do not knowingly collect personal data from children under 16. If you become aware that a child has provided us with personal data, please contact us immediately.

12. Changes to This Policy

We may update this privacy policy periodically. We will notify you of significant changes by posting the new policy on our website and updating the "last updated" date. Continued use of our service constitutes acceptance of the updated policy.

13. Supervisory Authority

If you are not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with your local data protection authority.

14. Contact Us

If you have any questions about this privacy policy or our data practices, please contact us at:

Email: contact@kutonlabs.com

We will respond to your inquiry within 30 days.