Last Updated: September 15, 2026
Kaja (“Kaja”, “we”, “us” or “our”) provides an AI-powered learning application that lets users create personalized learning experiences, including courses, lessons, educational videos, interactive exercises, quizzes, mini-tests, final assessments, learning progress and AI-assisted educational content.
This Privacy Policy explains what information Kaja processes, why it is processed, how it may be shared with service providers, how long it may be retained, and the choices and rights available to users. By using Kaja, you acknowledge the practices described in this Privacy Policy.
1. Who is responsible for your data
The operator responsible for Kaja is:
Måns Lundblad
Sweden
Privacy contact:
kajaai.app@gmail.com
Support:
kajaai.app@gmail.com
2. Information Kaja may process
A. Account and authentication information
Kaja may process information needed to create and maintain an account, such as an internal user or account identifier, email address when supplied by an authentication provider, authentication provider, authentication and session information, and basic profile information supplied through supported sign-in methods.
Kaja may support Sign in with Apple and Google Sign-In. These providers may separately process information under their own privacy policies. Kaja only receives and processes information that the active sign-in implementation makes available and that is needed to provide the service.
B. Learning information
Kaja may process information you provide or generate while learning, including topics you want to learn, learning goals, onboarding answers, selected skill or experience level, course requests, generated courses, lesson progress and completion, quiz, mini-test and final assessment responses and results, learning progress, course history, and written answers or other learning inputs you submit. This information is used to provide and personalize your learning experience.
C. AI inputs and outputs
Kaja uses artificial intelligence. Inputs to AI-powered features may include a requested learning topic, learning goals, questions, written answers, course and lesson context, prompts, and other content necessary to create educational material. Outputs may include course structures, lessons, explanations, exercises, quizzes, mini-tests, assessments, tutor responses, summaries and educational notes. Information needed to generate these results may be processed by Kaja’s AI service providers.
D. Video and YouTube information
Kaja may identify and use publicly available YouTube videos as educational material. Depending on the active implementation, Kaja may process public YouTube URLs, video identifiers, publicly available video information, AI-generated notes or analysis relating to educational video content, and timestamps relevant to lessons. Kaja does not claim ownership of YouTube videos and does not state that it collects your YouTube watch history or YouTube account information. YouTube content remains third-party content subject to YouTube and Google’s applicable terms and policies.
E. Subscription and purchase information
Purchases made through the iOS app are processed by Apple’s App Store. Kaja may process subscription entitlement or status information needed to determine access to paid functionality, including active or inactive status, product identifiers, purchase or renewal status, entitlement information, and transaction-related identifiers needed to validate access. Kaja does not receive or store full credit or debit card numbers for App Store purchases.
Kaja uses RevenueCat to process app user IDs and end-user transaction information, including Apple receipt information, to manage and validate subscription entitlements. RevenueCat acts as a processor for its customers in relation to customer end-user information.
F. Technical, security and usage information
Kaja may process limited technical information needed to authenticate requests, maintain sessions, prevent abuse, enforce quotas and free or paid usage limits, investigate errors, protect the service and maintain reliability. This may include technical request information, timestamps, security or authentication events, quota information and service usage needed to operate Kaja. Kaja does not state that it collects precise location, contacts, photos, advertising identifiers or browsing history.
3. How information is collected
Information may be obtained directly from you; when you create or sign into an account; when you complete onboarding; when you request or complete learning content; automatically where necessary to operate and secure the service; from authentication providers; from Apple’s purchase infrastructure; and through service providers needed to operate Kaja.
4. Why Kaja uses information
Kaja may use information to create and authenticate accounts; provide Kaja; generate personalized learning content; find relevant educational videos; analyze educational material; generate courses, lessons, quizzes and assessments; save learning progress; provide AI tutor functionality; maintain subscriptions and entitlements; provide free trials or lessons; enforce usage limits; prevent fraud and abuse; protect accounts and infrastructure; troubleshoot technical problems; provide support; and comply with applicable legal obligations. Kaja does not use information for unrelated purposes without an appropriate legal basis or notice where required.
5. Artificial intelligence and Gemini
Kaja uses Google’s Gemini API to provide AI-powered learning functionality. Depending on the feature, information sent for processing may include learning topics and goals, course and lesson context, questions and answers, educational video URLs, and information needed to generate or evaluate learning content.
Gemini may be used for educational research, course planning and generation, lesson generation, quizzes, assessments, explanations, tutor responses, and analysis of public educational videos. Google processes information according to the Google and Gemini terms, privacy policy and data-processing arrangements applicable to the Gemini API configuration used by Kaja. Kaja does not claim that Google never retains data or never uses data for training; this depends on the exact API tier and configuration.
6. Third-party service providers
Kaja relies on the following service providers to operate the service:
- Supabase — authentication, database, server-side infrastructure, Edge Functions, account information, learning progress, application data, and security or quota enforcement. Privacy Policy.
- Google / Gemini — AI-powered educational content, course and lesson generation, educational research where enabled, public video understanding and tutor functionality. Google Privacy Policy.
- Apple — Sign in with Apple where used, App Store distribution and in-app subscriptions or purchases. Apple Privacy Policy.
- Google Sign-In — account authentication where enabled. Google Privacy Policy.
- RevenueCat — subscription status, entitlement management and purchase validation infrastructure. RevenueCat Privacy Policy.
- YouTube — public educational video content and related services where enabled. Google Privacy Policy.
7. Data sharing
Kaja may disclose information to service providers needed to operate Kaja, when you request a feature that requires processing, where required by law, where necessary to protect users, Kaja or others, or in connection with a legitimate corporate transaction subject to applicable legal protections. Kaja does not sell personal information for money.
8. Legal bases for processing
For users in the EEA, UK and other jurisdictions where relevant, Kaja may rely on performance of a contract or service requested by you, consent, legitimate interests such as security, fraud prevention and service reliability, and compliance with legal obligations. The applicable basis depends on the processing activity.
9. Data retention
Kaja retains personal information only for as long as reasonably necessary to provide the service, maintain your account and learning progress, protect against security or fraud, resolve disputes, enforce agreements, and comply with applicable law. Account and learning information may generally remain while your account exists. When an account is deleted, Kaja will delete or anonymize associated personal information according to the actual deletion implementation, except information legitimately retained for legal, security, fraud-prevention or accounting purposes. Kaja does not state fixed retention periods unless they are implemented and verified.
10. Account and data deletion
You can request or delete your Kaja account from within the Kaja app. If you cannot access the app, contact kajaai.app@gmail.com. Further instructions are available at https://kajaapp.netlify.app/delete-account.
Deleting a Kaja account does not necessarily cancel an active App Store subscription. Subscriptions must be managed through Apple’s subscription management system unless the app expressly provides otherwise. Kaja cannot promise deletion of information held independently by third-party providers beyond the applicable processor and deletion arrangements.
11. User privacy rights
Depending on applicable law, you may have the right to access, correct or delete personal information; restrict or object to certain processing; withdraw consent where processing is based on consent; receive certain information in portable form; and lodge a complaint with a competent data protection authority. Send requests to kajaai.app@gmail.com. We may need to verify your identity before fulfilling a request.
12. International data transfers
Kaja’s service providers may process information in countries other than the country where you live. Where required, appropriate legal safeguards are used for international transfers. Kaja does not promise that all information remains in Sweden or the EU unless its actual infrastructure guarantees that outcome.
13. Security
Kaja uses reasonable technical and organizational measures intended to protect information. These may include authenticated backend access, server-side API credentials, access controls, database security rules, rate limiting or abuse controls where applicable, and secure transport mechanisms. No internet service can guarantee absolute security.
14. Age requirement
Kaja is intended only for adults aged 18 and older. Kaja does not knowingly permit people under 18 to create an account or use the service. Contact us if you believe a person under 18 has provided personal information through Kaja.
15. Free trial and usage limits
Certain Kaja functionality may be limited according to your account or subscription state. Eligible users may receive a 3-day App Store trial with up to one course-generation credit during that trial. Usage information may be processed to determine whether the trial course has been used and to prevent trial abuse. Final subscription and trial terms are described in the Terms of Service and the App Store purchase interface.
16. No advertising tracking
Kaja does not currently use personal information for third-party targeted advertising. The Kaja website does not currently use advertising trackers or analytics cookies. This policy will be updated before advertising, tracking or website analytics is introduced.
17. Changes to this Privacy Policy
We may update this Privacy Policy when Kaja changes, legal requirements change, or service providers or features change. The Last Updated date identifies the latest version. Material changes will be communicated where required by law.
18. Contact
Privacy questions:
kajaai.app@gmail.com
General support:
kajaai.app@gmail.com
Data controller / operator: Måns Lundblad,
Sweden