1. Introduction

This Privacy Policy ("Policy") governs the privacy practices of Kodu.ai (hereinafter referred to as "Kodu.ai," "we," "our," or "us") with respect to the collection, use, disclosure, and protection of personal information obtained from users (hereinafter referred to as "you" or "your") of our Claude Coder VSCode extension, Engineer voice agent product, and any related services (collectively, the "Services"). By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by the terms of this Policy.

2. Information Collection

Kodu.ai collects the following categories of information:

• Account Information: This includes, but is not limited to, email addresses and other information provided during account creation via Clerk authentication.
• Usage Data: Information pertaining to your use of our Services, including, without limitation, API calls, token usage, and interactions with third-party AI models (such as Anthropic's API) that we utilize. For Kodu Cloud and Claude Coder, we collect only token usage and cost data. This data is collected and processed only for the duration of your session and is not retained beyond the time required to provide the Services.
• Technical Data: This encompasses IP addresses, browser types, device information, and other technical identifiers necessary for the operation and security of our Services. This data is collected and processed in accordance with our zero data retention policy.
• Kodu Engineer Data: For our Kodu Engineer product, we may collect sanitized prompts and outputs to improve model accuracy and performance. This data collection is subject to user opt-in/opt-out preferences, as described in Section 6 of this Policy. We do not collect any user prompts or outputs from Kodu Cloud or Claude Coder.

3. Use of Information

Kodu.ai utilizes the collected information for the following purposes:

• To provide, maintain, and enhance our Services;
• To process transactions and manage your account;
• To send technical notices, updates, and support messages;
• To monitor and analyze trends, usage, and activities in connection with our Services;
• To detect, prevent, and address technical issues;
• To comply with legal obligations.

4. Data Sharing and Disclosure

Kodu.ai does not sell your personal information. We may, however, share your information in the following circumstances:

• With your express consent;
• To comply with legal obligations, including but not limited to, responding to subpoenas, court orders, or other legal processes;
• To protect and defend the rights, property, or safety of Kodu.ai, our users, or others;
• With service providers who assist us in providing the Services, subject to confidentiality agreements.

5. Data Retention

Kodu.ai retains your personal information for the duration necessary to fulfill the purposes outlined in this Policy, unless a longer retention period is required or permitted by law. We may also retain and use this information to comply with our legal obligations, resolve disputes, and enforce our agreements.

Notwithstanding the above, Kodu.ai employs a zero data retention policy for user data and content submitted to our Services. This means that we do not retain or store any user data or content beyond the duration of the user's session or the time required to process the data for the purpose it was submitted.

6. Data Usage for Service Improvement

In order to enhance the accuracy and effectiveness of our Kodu Engineer product, we may collect Kodu Engineer data such as sanitized prompts and outputs. This process is designed to improve model performance and user experience. We will provide mechanisms for users to opt in or out of data collection for service improvement purposes. These options will be clearly communicated and easily accessible within our Services.

In the future, we may introduce additional opt-in programs that allow users to contribute sanitized and anonymized data to support the broader user community. Such programs, if implemented, will be entirely voluntary and subject to separate terms and conditions.

Any use of user data for service improvement or community support will be conducted in strict accordance with this Privacy Policy, employing robust anonymization and sanitization techniques to protect user privacy and intellectual property rights.

7. Security Measures

Kodu.ai implements appropriate technical and organizational measures to protect the security of your personal information. However, please be advised that no method of transmission over the Internet or method of electronic storage is 100% secure.

8. Children's Privacy

The Services provided by Kodu.ai are not intended for use by individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a chil d under the age of 13, we will take steps to delete such information from our records.

9. Modifications to this Privacy Policy

Kodu.ai reserves the right to modify this Policy at any time. Any changes will be effective immediately upon posting the revised Policy on this page. We will notify you of any material changes by updating the "Effective Date" at the top of this Policy. Your continued use of the Services after the posting of any modifications constitutes your acceptance of such changes.

10. Contact Information

For any questions or concerns regarding this Privacy Policy, please contact us at:

Email: support@kodu.ai

11. Additional Protective Measures

Kodu.ai may, at its sole discretion and in accordance with applicable laws and regulations, implement additional measures to protect your personal information. These measures may include, but are not limited to:

• Enhanced encryption protocols for data transmission and storage;
• Implementation of multi-factor authentication for accessing sensitive information;
• Regular security audits and vulnerability assessments;
• Employee training programs on data protection and privacy best practices;
• Appointment of a Data Protection Officer to oversee compliance with data protection regulations;
• Implementation of data minimization practices to limit the collection and retention of personal information;
• Establishment of a breach notification protocol in compliance with applicable laws;
• Regular review and updating of data processing agreements with third-party service providers;
• Implementation of privacy-by-design principles in the development of new services or features.

The implementation of these additional measures shall be based on the current legal and regulatory landscape, industry best practices, and the specific risks associated with the processing of your personal information. Kodu.ai reserves the right to modify or enhance these measures as necessary to maintain the security and privacy of your information.

By continuing to use our Services, you acknowledge and agree that Kodu.ai may take these additional steps to protect your personal information as deemed necessary and appropriate.