Privacy Policy

Last updated: 8 July 2026

This Privacy Policy explains how Kudoo.ai ("we", "us") collects, uses, and protects personal data when you use our Service, in line with the Hong Kong Personal Data (Privacy) Ordinance (Cap. 486) (PDPO).

We may collect account details (such as name and email), profile and usage information (such as study progress, scores, and uploaded learning materials), technical data (such as device and log information), and payment-related data processed by our payment partners when billing is enabled.

We use personal data to operate the Service, personalise study content, provide customer support, maintain security, comply with legal obligations, and improve our products. We do not sell your personal data.

Sign in with Google

If you choose "Continue with Google", we receive from Google your email address, your name (if available in your Google profile), and a unique Google account identifier. Google may confirm that your email address is verified. We do not receive your Google password.

We use this Google user data only to create and sign you into your Kudoo account, link Google sign-in to an existing account with the same email, verify your email, and personalise the Service. We do not use Google user data for advertising, credit assessment, data brokerage, or training third-party AI models.

We do not sell Google user data. We do not disclose it to third parties except service providers that host or operate the Service on our behalf (under contract and only as needed to provide the Service), or when required by law. We do not transfer Google user data for targeted advertising or resale.

Google account data is stored for as long as your Kudoo account is active. You may request deletion of your account and associated personal data by contacting us. We protect account data using technical and organisational safeguards, including encrypted connections and access controls.

We retain data only as long as needed for these purposes or as required by law. When retention is no longer required, we delete or anonymise it. You may request access to or correction of your personal data, or withdraw consent where applicable; we will respond within a reasonable period.

We implement technical and organisational measures to protect personal data. Third-party processors (such as hosting or analytics providers) are required to safeguard data appropriately.

For questions about this policy or to exercise your rights, please contact us at [email protected].