Privacy Policy

Kindi AI Ltd — Last updated: May 2026

Who we are

Kindi AI Ltd (“Kindi”, “we”, “us”) operates the Kindi AI platform at kindiai.co.uk. We are a data controller registered in England and Wales.

Contact: pally@kindiai.co.uk

What data we collect

We collect the following personal data when you use Kindi:

• Account data — your name, email address, and job role, provided when your employer sets up your account.
• Capability data — responses you provide during your baseline assessment, evidence submissions you write, and development progress recorded over time. This is the core data Kindi exists to process.
• Usage data — when you log in, which pages you visit, and how you interact with the platform. Used for security and to improve the product.

How we use your data

We use your data to:

• Provide the capability assessment and development features of the platform
• Generate AI-assisted scoring, coaching prompts, and development insights on behalf of your employer
• Send you email notifications about your development activity (you can turn these off in settings)
• Maintain the security and performance of the platform

We do not sell your data. We do not use your data to serve advertising.

AI processing and data minimisation

Kindi uses artificial intelligence to analyse capability evidence and generate insights. Before any text you write is processed by our AI systems, it is passed through a pseudonymisation layer that automatically removes names, email addresses, phone numbers, and other personal identifiers.

This means your free-text evidence submissions are processed by our AI provider in anonymised form. Your name and identity are never included in AI processing requests.

Uploaded data

The platform is designed to process employee personal data only. It is not designed or intended to store customer or client personal data. Where your employer uploads performance data into the platform, they are responsible for ensuring that upload does not contain personal data relating to customers, clients, or other third parties.

Who we share data with

We share data with the following third-party processors, all operating under data processing agreements:

• Supabase — database and authentication infrastructure, hosted in the EU.
• Vercel — application hosting, EU region.
• Anthropic — AI processing. Personal identifiers are removed before any data is sent. Anthropic's API terms confirm that API inputs and outputs are not used to train AI models.
• Railway — pseudonymisation service infrastructure, EU region.
• Resend — transactional email delivery. Only your name and email address are transmitted, for the purpose of sending platform notifications.

We do not share your data with any other third parties except where required by law.

Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data (subject to our retention obligations)
• Object to processing
• Request a copy of your data in a portable format

To exercise any of these rights, contact us at pally@kindiai.co.uk. We will respond within one month.

Data retention

We retain personal data for as long as your employer's account is active, and for 6 years after account closure in line with UK employment record-keeping requirements. You may request earlier deletion of specific data where it is not required for legal compliance.

Legal basis for processing

We process your data on the basis of legitimate interests pursued by your employer (capability assessment and development), with whom Kindi has a Data Processing Agreement. Where you provide explicit consent (such as for optional notifications), you may withdraw that consent at any time.

Cookies

Kindi uses only essential cookies required for the platform to function (session authentication). We do not use tracking or advertising cookies.

Changes to this policy

We will notify users of material changes to this policy by email. The current version is always available at kindiai.co.uk/privacy.

Complaints

If you have concerns about how we handle your data, you can contact the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.