Privacy Policy

1. Who We Are

Kulega is a product of Mulai Pte. Ltd., a company incorporated in Singapore (UEN: 201209457R), with its registered address at 10 Jalan Besar #07-06 Sim Lim Tower, Singapore 208787. In this Privacy Policy, "Kulega", "we", "us", and "our" refer to Mulai Pte. Ltd. This policy explains how we collect, use, and protect your personal data in connection with the kulega.com platform.

2. Data We Collect

• Account data: name, email address, and authentication details when you sign up.
• Profile and preferences: your chosen AI colleague name, communication style, timezone, and optionally your date of birth (used only to personalise AI interactions via biorhythm cycles — never shared with third parties).
• Conversation data: messages you send to your AI colleague, used to generate responses and build your colleague's working memory of your goals and preferences.
• AI memory summaries: condensed summaries of your interactions, stored to give the AI context across sessions. These are stored in your colleague profile and are deleted when your account is deleted.
• Activity and skill data: a log of actions the AI has taken on your behalf (emails sent, calendar events created, goals worked on), skill point transactions, and skill activation history.
• Connected account tokens: OAuth access and refresh tokens for Google (Gmail, Calendar) when you choose to connect them. These are stored encrypted and used only to act on your behalf. They are revoked immediately when you disconnect a skill.
• Team data: if you are on a Team plan, we store your team membership, role (owner, admin, or member), and your activity data is visible to your team's owner and admins.
• Payment data: billing information is processed directly by Stripe. We do not store card details. We retain records of plan type, subscription status, and Skill Points transactions.
• Analytics data: we use Google Analytics (GA4) to collect aggregated, anonymised data about how visitors use our website — pages visited, session duration, and traffic sources. This data does not identify you personally and is used only to improve the Service.
• Cookies: we use essential cookies for authentication and, with your consent, analytics cookies for Google Analytics.

3. How We Use Your Data

• To provide and improve the Service
• To process your messages with the AI model and execute skills on your behalf
• To build and maintain your AI colleague's working memory across sessions
• To run proactive AI tasks on your behalf based on goals you have set
• To manage your subscription and send billing-related emails
• To send transactional emails (welcome, subscription updates, team invites)
• To detect and prevent abuse
• To understand how the Service is used in aggregate (via Google Analytics)

We do not sell your personal data. We do not use your conversations to train AI models without your explicit consent.

4. Team Plans and Data Visibility

If you are a member of a Team plan, the following applies:

• The team Owner and any Admins can view your activity timeline, active skills count, and daily message usage.
• Your individual conversations with your AI colleague remain private — only the activity log (what the AI did) is visible to the Owner and Admins.
• Your AI memory summaries are private to you.
• Skill Points you use are deducted from the shared team pool, but individual usage breakdowns are not tracked per member at this time.

By accepting a team invite, you consent to this level of visibility.

5. Third-Party Services

We share data with the following third parties only as necessary to operate the Service:

• Google (Gemini API) — processes your messages to generate AI responses.
• Google (Gmail / Calendar APIs) — accessed only when you connect these skills, to act on your behalf.
• Firebase / Google Cloud — authentication, Firestore database, and Cloud Run infrastructure.
• Stripe — payment processing and subscription management.
• Google Analytics (GA4) — anonymised website usage analytics. You can opt out via your browser's cookie settings or a GA opt-out extension.
• Lark Suite — transactional email delivery (welcome emails, billing notifications, team invites).

6. Data Retention

We retain your data for as long as your account is active and your subscription is in good standing.

Individual accounts

If you delete your account, your personal data — including AI memory summaries, activity logs, goals, and colleague profile — will be permanently deleted within 30 days. OAuth tokens for connected skills are revoked and deleted immediately upon disconnection or account deletion.

Team plan on expiry

• 0–30 days after expiry: read-only grace period. All team data is preserved.
• 30–90 days after expiry: data is soft-deleted and inaccessible. Renewing within this window restores access.
• 90+ days after expiry: all team data is permanently and irreversibly deleted, including shared memory summaries, goals, and activity logs.

7. Cookies

We use:

• Essential cookies: required for authentication and security. Cannot be disabled.
• Analytics cookies: Google Analytics (GA4) collects anonymised usage data to help us understand how the Service is used. These are only set with your consent and can be disabled via your browser cookie settings.

8. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Object to or restrict processing
• Data portability
• Withdraw consent (e.g. disconnecting a Google skill revokes our access immediately)

To exercise any of these rights, email us at hello@kulega.com.

9. Security

We use industry-standard security practices including encrypted storage, HTTPS, Firebase Authentication, and role-based access controls. OAuth tokens are stored encrypted. No method of transmission over the internet is 100% secure — we cannot guarantee absolute security.

10. Children

The Service is not directed to children under 13. We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a notice on the Service.

12. Contact

Questions about this Privacy Policy? Contact us at hello@kulega.com.