Privacy Policy

Kai’s Education – Privacy Policy

Effective Date: 20 Febuary 2026
Previous Update: 22 Aug 2025

Overview

At Kai’s Education, safeguarding privacy is fundamental to our mission. This Privacy Policy explains how we collect, use, protect, and manage information across Kai’s Education websites and services, including:

• www.kaiseducation.com
• kailab.kaiseducation.com
• app.kaisclan.ai
• www.kainundrum.com
• learn.kaiseducation.com

and our applications:

• KaiBot
• Kainundrum Lite
• Kainundrum Swift
• Kai’s Eye Robot Tracker
• Kai’s AR Virtual Viewer
• Kai’s Virtual Meta Viewer (VR)
• Market Math
• Literacy Kitchen

Privacy at a Glance

• No student emails required
• No advertising or data selling
• No student profiling
• Student aliases only (no real names required)
• Teacher/parent-controlled accounts
• Minimal data collection
• Encrypted data at rest and in transit
• No student data used for AI training
• Parents and schools retain control
• Deletion available on request

Our Apps and Services

We design our platforms to minimise data collection and protect student privacy.

We do not knowingly collect direct personally identifiable information (PII) from children. Any limited student-related data is provided by a parent, guardian, or teacher solely for the purpose of delivering educational services.

• We do not collect identifiable location data.
• We do not use third-party advertising.
• We do not sell or share personal information.
• We do not use student data for advertising, profiling, or AI model training.

Data Security Practices

Kai’s Education follows the Center for Internet Security (CIS) Critical Security Controls, a globally recognised cybersecurity framework.

Our safeguards include:

• Access control & authentication: Role-based access and multi-factor authentication
• Encryption: Industry-standard encryption for data in transit and at rest
• Security audits: Regular internal reviews and vulnerability assessments
• Incident response: A documented Breach Response Plan
• Continuous improvement: Ongoing staff training and security reviews

Compliance with Privacy Regulations

General Data Protection Regulation (GDPR)

Data Controller: Kai’s Education
Data Protection Officer: Bruce Jackson
Address: 2/10 Ben Lomond Crescent, Pakuranga, Auckland 2010, New Zealand
Email: [email protected]

We uphold GDPR principles including data minimisation, transparency, access and correction rights, and lawful international transfers.

Lawful bases for processing:

• Consent (teacher/parent account creation)
• Contractual necessity (service delivery)
• Legitimate interests (security and troubleshooting only)

International transfers: EU data may be stored in New Zealand or the United States. New Zealand is recognised by the European Commission as providing adequate protection. Where required, Standard Contractual Clauses (SCCs) are used.

United States

FERPA: Kai’s Education does not create or store official student education records. When used in U.S. schools, Kai’s Education acts as a “school official” solely to provide contracted services and only under the direct control of the school or district.

CCPA / CPRA (California): We do not sell or share personal information. California residents may request access or deletion by contacting [email protected].

COPPA (Children under 13 – U.S.):

• Only parents or teachers may create accounts
• Verifiable parental consent is required where applicable
• Parents may request deletion at any time

While Kai’s Education follows COPPA requirements, we have not undertaken formal third-party certification.

Australia – Privacy Act 1988 (APPs)

Kai’s Education complies with the Australian Privacy Principles, including transparency, access and correction rights, data security, and overseas transfer protections.

New Zealand – Privacy Act 2020

We comply with all 13 Information Privacy Principles and will notify the Office of the Privacy Commissioner and affected individuals of any notifiable breach.

Māori Data Sovereignty

Kai’s Education recognises Māori Data Sovereignty and treats data relating to Māori learners and communities as a taonga. We respect rangatiratanga, tikanga, and mātauranga Māori, and engage appropriately where Māori data is involved.

Student Aliases and Teacher-Controlled Input

Kai’s Education platforms, including kailab.kaiseducation.com and app.kaisclan.ai, are designed to use student aliases, not real names.

Teachers, parents, and guardians are instructed during setup not to enter personally identifiable information when creating student aliases.

Kai’s Education does not require, request, or encourage the use of real student names.

If identifiable information is entered contrary to platform guidance:

• The data remains under the control of the school or account holder
• The information is not used for analytics, advertising, or AI training
• Correction or deletion may be requested at any time
• Kai’s Education is not responsible for information entered in violation of documented guidance

Information We Collect

Automatically Collected (Non-Personal)

• IP address (used for country-level location only)
• Device type, browser, operating system
• Usage events and system logs

Teacher / Parent Account Data

• Email address
• Encrypted password
• Optional alias
• Device information (non-identifiable)

Student Data

• No student emails or passwords collected
• Optional alias (teacher-controlled)
• Device and OS information (non-identifiable)

Third-Party Service Providers and Subprocessors

Kai’s Education uses a limited number of trusted service providers for business operations. No student personal data or student-generated content is intentionally shared with these providers.

• PostHog – Product analytics (non-identifiable usage data only)
• Zoho CRM – Adult contact and support management
• Gmail – Customer communications
• Slack – Internal operational coordination
• WordPress – Website hosting and adult contact forms
• n8n – Workflow automation (limited operational data)
• Google AI Studio – Internal staff tooling only; no student data submitted

A current list of subprocessors is available upon request.

Cookies & Analytics

We use cookies and similar technologies to improve usability and understand adult usage of our websites. Analytics are aggregated, non-identifiable, and never used for advertising or student profiling.

Data Retention & Disposal

• Data retained only while accounts are active or legally required
• Deleted upon request or inactivity
• Secure deletion or anonymisation applied
• Financial data handled by third-party payment processors only

User Responsibilities

• Keep passwords confidential
• Lock devices when unattended
• Avoid entering student PII where instructed not to

Breach Response

Kai’s Education maintains a documented Breach Response Plan to investigate, contain, and notify affected parties in accordance with applicable law.

Contact

Email: [email protected]

Address:
Kai’s Education
2/10 Ben Lomond Crescent
Pakuranga, Auckland 2010
New Zealand

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated to users and, where required, parental or school consent will be obtained before applying new uses of data.