Kona Superintelligence (“Company,” “we,” “us,” or “our”) is committed to transparency about how we handle your data. This Privacy Policy explains what we collect, how we use it, and the choices you have. It applies to all of our products, websites, applications, APIs, and services (“Services”), including our website at https://kona.sh.

By using our Services, you are accepting and consenting to this Privacy Policy.

1. Information We Collect

We collect information from three main sources: directly from you, automatically from your devices, and from third parties, to operate, secure, and improve the Services.

a. Information You Provide Directly

Account Details: Name, email, password, username, and other identifiers
Project Content: Prompts, documents, code, images, designs, notes, and any other content you input or upload
Feedback & Support Communications: Suggestions, bug reports, questions, surveys, or messages sent via email or in-app tools
Payment Data: Billing address, payment method, transaction records (processed securely via our payment providers)
Profile Information: Optional information such as bio, location, skills, or preferences

b. Information Collected Automatically

Usage Metrics: Session duration, navigation patterns, feature usage frequency, error logs
Device & Technical Data: IP address, browser/OS details, device identifiers, time zone, language preferences
Location Data: Approximate location from IP or precise location if device permissions are granted
Cookies & Tracking: We use cookies, beacons, pixels, and similar technologies for analytics, personalization, and security

c. Information from Third Parties

Publicly Available Data: Professional profiles, social media information, or other public data
Business Contact Data: Information from partners, analytics providers, and marketing platforms
Third-Party Integrations: Data from connected services you authorize

2. How We Use Your Information

We use your information to:

Provide & Operate the Services: Account setup, content hosting, project collaboration, and customer support
Personalize & Improve Experiences: Tailor recommendations, adapt workflows, optimize platform features
Research & Model Development: Train, fine-tune, evaluate, and enhance our AI models
Analytics & Insights: Measure usage trends, optimize performance, and inform product strategies
Communicate With You: Service updates, security alerts, and promotional offers (where permitted)
Security, Fraud Prevention & Compliance: Detect misuse, enforce terms, protect against threats, and comply with legal obligations

3. Data Retention & Deletion

We keep information for as long as necessary to operate the Services, meet legal, security, and operational requirements.

Retention Guidelines:

Account Data: Stored while your account is active and for a reasonable period after closure
Project Content: May be retained for operational continuity and, where possible, anonymized for research
Logs & Analytics: Kept in identifiable form, then aggregated or anonymized
Deleted Content: Removed from active systems within 30 days unless retention is required for legal or operational purposes

We may retain anonymized or aggregated data indefinitely.

4. Confidentiality & Isolation of Customer Data

Your Content will not be shared with or made visible to other customers unless you explicitly choose to share it. We will not sell, rent, or disclose your confidential information to third parties except as described in this Policy or required by law.

We maintain technical and organizational measures including encryption, access restrictions, and monitoring to prevent unauthorized access, disclosure, or leakage of your Content.

5. Model Training & Feedback Use

We may use the content you provide, along with related metadata, to train, test, and improve our AI models.

Before use in model development, we will:

Remove or obfuscate direct identifiers where possible
Apply aggregation or anonymization techniques to minimize re-identification risks

If permitted in your jurisdiction, this use is automatic unless you opt out by contacting hi@kona.sh.

6. How We Share Your Information

We may share your data with:

Service Providers: For hosting, analytics, security, communications, and payment processing
Affiliates & Partners: To help deliver, integrate, or promote our Services
Legal & Safety Recipients: When required by law, legal processes, or to protect our rights, safety, and security
Business Transactions: In connection with mergers, acquisitions, or financing events
Aggregated or De-identified Data: Shared for analytics, research, or marketing purposes where you cannot reasonably be identified

We do not sell your personal information.

7. Your Rights & Choices

Depending on where you live, you may have the right to:

Access and receive a copy of your personal data
Correct inaccurate or incomplete data
Request deletion of your personal data
Restrict or object to certain processing
Receive a portable copy of your data
Withdraw consent where processing is based on consent
Opt out of marketing communications or AI model training

To exercise these rights, email hi@kona.sh. We may verify your identity before processing your request.

8. Security Measures

We implement technical, administrative, and organizational safeguards to protect your information. While no system is completely secure, we take steps to prevent unauthorized access, use, or disclosure.

Security measures include:

Encryption: Data encrypted in transit (TLS/SSL) and at rest
Access Controls: Role-based access, multi-factor authentication available
Security Monitoring: Continuous monitoring for threats and vulnerabilities
Regular Audits: Security assessments and code reviews
Incident Response: Established procedures for security incidents

9. Cookies and Tracking Technologies

We use cookies and similar technologies to:

Essential Operations: Maintain your session and authentication
Preferences: Remember your settings and customizations
Analytics: Understand how you use our platform
Performance: Monitor and improve platform speed and reliability
Security: Detect and prevent fraud or abuse

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may limit platform functionality.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers, including:

Standard contractual clauses where required
Ensuring recipients provide adequate data protection
Only transferring data to countries with adequate privacy laws

11. Children's Privacy

Our Services are not directed to children under 18 (or the applicable age in your region). If we learn we have collected data from a child under 18, we will delete it promptly. If you believe we have information from or about a child under 18, please contact us at hi@kona.sh.

12. Do-Not-Track Signals

Most web browsers include Do-Not-Track (“DNT”) features. We do not currently respond to DNT signals as no uniform standard has been adopted. If a standard is established that we must follow, we will update this policy accordingly.

13. U.S. State Privacy Rights

Residents of certain U.S. states (including California, Virginia, Colorado, Connecticut, Utah, and others) have additional privacy rights under state law:

Your State Privacy Rights May Include:

Right to Know: What personal information we collect, process, share
Right to Access: Obtain a copy of your personal information
Right to Delete: Request deletion of your personal information (with certain exceptions)
Right to Correct: Request correction of inaccurate personal information
Right to Portability: Receive your data in a portable, readily usable format
Right to Opt-Out: Opt out of sale, targeted advertising, or profiling
Right to Non-Discrimination: Not be discriminated against for exercising privacy rights
Right to Appeal: Appeal our decision regarding your privacy request

To exercise your rights, contact us at hi@kona.sh with your specific request and state of residence. We will respond within the timeframe required by your state's law (typically 45-60 days).

14. Legal Basis for Processing (EEA/UK Residents)

If you are located in the European Economic Area or United Kingdom, we process your personal information based on:

Contract: Processing necessary to fulfill our contract with you
Legitimate Interests: Our legitimate business interests that don't override your rights
Consent: Where you have given explicit consent
Legal Obligation: To comply with applicable laws

You may withdraw consent at any time where we rely on consent as our legal basis.

15. Changes to This Policy

We may update this Privacy Policy periodically. Significant changes will be communicated via email or in-app notifications before they take effect. We encourage you to review this policy periodically to stay informed about our data practices.

16. Contact Us

Kona Superintelligence Privacy Team
Kailua-Kona, Hawaii
Email: hi@kona.sh