Privacy Policy

This Privacy Policy is issued by Kneade MB, company code 307635076, registered at V. Nagevičiaus g. 3, LT-08237 Vilnius, Lithuania (“Kneade,” “we,” “us,” “our”). Kneade operates the Kneade website and AI tutoring service (the “Service”). It explains what personal data we collect, why, how we use and share it, and the choices and rights available to you and, where applicable, your child.

If you are a parent or guardian who creates a Kneade account and purchases lessons for a child (a “Student”), you are the “Account Holder,” and this Policy is addressed to you.

Account and billing information (Account Holder)

Name, email address, and login credentials. Billing details processed by Stripe, our payment processor (we never see or store full card numbers). Any messages you send us.

Student profile information

A generated username for the Student, their grade level, and, optionally, a display name you provide. Student logins have no email address, phone number, or other independent way to contact us or anyone else. They exist solely to let the Student use lessons you purchased. We do not knowingly collect a Student’s contact information, government ID, or precise location.

Lesson and learning data

The text transcript of the conversation between the Student and the AI tutor, whiteboard content and written work, any homework images the Account Holder uploads, and the diagnostic results, skill progress, and pedagogy notes the tutor generates. See Section 4 for how lesson audio specifically is handled.

Usage and technical data

Device, browser, IP address, and interaction data, collected automatically and through the cookies described below.

We and our vendors use cookies, pixels, and local storage across the Service for the following purposes.

Essential. Keeping you logged in, remembering settings, and securing the Service.

Analytics and product improvement. Microsoft Clarity records aggregated usage patterns, clicks, and page interactions to help us understand and improve the Service. We do not use Clarity to build advertising profiles of Students.

Advertising and attribution. Meta (Facebook) Pixel and Conversions API measure the effectiveness of our advertising and help us reach prospective parents. This may involve sharing hashed contact details of the Account Holder with Meta for ad matching, as permitted under Meta’s terms.

We do not knowingly serve targeted advertising to children, and Student logins are not used to build advertising profiles. You can control cookies through your browser settings and manage Meta ad personalization at facebook.com/ads/preferences. Some Service functionality depends on essential cookies and cannot be disabled.

Lessons happen over a real-time audio connection between the Student and the AI tutor. During a live lesson, audio streams to our speech-recognition and voice vendors (Section 6) to generate the tutor’s responses in real time.

Today we retain the text transcript of that conversation, meaning what was said and by whom, as part of the Student’s learning record. We do not currently store the raw audio itself. We reserve the right to also record and retain lesson audio, and where relevant whiteboard or screen capture, going forward, for purposes that include quality assurance, tutor and safety monitoring, improving our AI models through research and development, and other business purposes described in this Policy. Recordings we retain are only accessible to personnel and vendors bound by confidentiality obligations, and are handled with the same safeguards described throughout this Policy.

By creating an account and purchasing or activating lessons for a Student, the Account Holder agrees to this Policy, including this Section, on the Student’s behalf.

We use information to provide, personalize, and operate the Service, process payments and manage accounts, generate progress reports and adapt lesson content, maintain safety, prevent abuse and enforce our Terms, improve our AI models and pedagogy (using de-identified or aggregated data where feasible), communicate with the Account Holder about the Service, billing, and, with consent, marketing, and to comply with legal obligations.

We share data with the vendors that help us run the Service, each bound by its own data-processing agreement with us and limited to the purposes described in this Policy: Stripe (payments), Supabase (database and file storage), LiveKit (real-time lesson audio and video transport), Deepgram (speech-to-text), Cartesia (text-to-speech), OpenAI and Anthropic (the language models powering the tutor), and Microsoft Clarity and Meta Pixel and Conversions API (Section 3).

We may also disclose data to professional advisors, a successor entity in a merger or acquisition, or authorities where required by law.

We may also license, share, or sell aggregated, de-identified, or anonymized data derived from use of the Service, including from lesson transcripts, whiteboard activity, and audio, to research partners or other third parties, for example to support education research or product development. Where such data could reasonably identify a specific Student, we treat it as personal data under this Policy and do not license or sell it beyond the vendor relationships and disclosures described here.

We are established in Lithuania. Several of our vendors process data outside the EU and EEA, including in the United States. Where we transfer personal data internationally, we rely on Standard Contractual Clauses, an adequacy decision, or another lawful transfer mechanism.

We keep account and lesson data for as long as the account is active, and for a reasonable period afterward (typically up to 24 months of inactivity) to allow reactivation and meet accounting and legal obligations, after which it is deleted or anonymized. You may request earlier deletion at any time. See Section 10.

We process personal data on the following bases: performance of a contract with the Account Holder to deliver the Service, legitimate interests in improving and securing the Service and preventing fraud, consent for marketing cookies and for lesson participation by a Student on the Account Holder’s consent, and legal obligation for matters such as tax and accounting.

Depending on your location, you, as Account Holder, for yourself and on your Student’s behalf, may have the right to access, correct, export, or delete the personal data we hold, object to or restrict certain processing, and withdraw consent at any time. Deleting a Student’s data may end that Student’s access to their past lesson history. To exercise any of these rights, contact us at legal@kneade.com. EEA and UK users also have the right to lodge a complaint with their local data protection authority.

Kneade is built for children to use under a parent or guardian’s account, never independently. We only collect the limited Student information described in Section 2, and only after the Account Holder, an adult, has created the account, agreed to this Policy and our Terms of Service, and purchased or activated lessons on the Student’s behalf. This is how we obtain and document verifiable parental consent for any collection of a child’s personal data, consistent with the U.S. Children’s Online Privacy Protection Act (COPPA) and Article 8 of the GDPR.

We do not knowingly allow a child to create their own account, provide their own contact information, or use the Service outside of a parent-managed account. If we learn a child has provided personal data to us other than as described here, we will delete it. A parent or guardian may review, request deletion of, or refuse further collection of their Student’s data at any time by contacting us at legal@kneade.com.

We use industry-standard technical and organizational measures, including encryption in transit, access controls, and vendor due diligence, to protect personal data. No system is perfectly secure, and we cannot guarantee absolute security.

We may update this Privacy Policy from time to time. If we make material changes, we will notify the Account Holder, for example by email or a notice on the Service, before they take effect. Continued use of the Service after changes take effect constitutes acceptance.

Kneade MB, company code 307635076, V. Nagevičiaus g. 3, LT-08237 Vilnius, Lithuania. legal@kneade.com