Privacy Policy
Privacy Policy
Last Updated: March 16, 2026
Kael Platform ("Kael" or "Platform") includes the Kael web application, official website, and any other features, functionalities, or services we provide now or later (together, the "Services"). Beijing Yuanhuohua Technology Co., Ltd. ("we," "us," or "our") operate them.
We care about your privacy and aim to protect your personal data. This Privacy Policy ("Policy") describes how we collect, use, share, and protect personal information when you use the Services or any site or platform that links here.
The Policy covers: what personal information we collect and how; how we use it and our legal bases; how we share it and with whom; your privacy rights (including under GDPR and U.S. laws such as CCPA/CPRA); how we protect and retain it. By using the Services you accept this Policy. If you do not accept it, do not use the Services. This Policy does not apply to third-party products, services, or content; those have their own privacy policies, which you should read. For acceptable use and content rules, see our Terms of Service and any usage or content policy we publish.
When we provide team, enterprise, or API services under a separate agreement with an organization, we may act as a data processor on that organization's behalf (they are the data controller). In that case, their instructions and our data processing terms apply; this Policy applies where we act as the data controller (e.g., when you use the Services with a personal account).
NOTICE TO USERS IN THE EEA OR UK: See the Addendum (Notice to European Users) below for more on your rights and our processing.
Index
- What we collect
- How we use your information
- How we share your information
- Your rights and choices
- Data security
- Data retention
- Minors
- Policy updates
- Contact us
- Addendum (European users; California users)
We may collect information you give us, information we get automatically, and information from other sources.
When you use the Services you may voluntarily provide personal information, for example:
- Registration: When you create an account we may collect username, password, date of birth (if applicable), email, and/or phone number. For organization accounts we may also collect your name, business email, phone, country, address, and organization details.
- User content: We collect what you create, upload, generate, or make available through the Services—e.g., profile (nickname, avatar), images, prompts, and other materials you create or share.
- Payment: For Paid Services (as in our Terms of Service) we use third-party payment processors. They may collect cards or other payment details. We do not store full card details but may keep transaction records for compliance and accounting.
- Communications: When you contact us for support, feedback, or questions (email, chat, etc.) we collect what you provide, including message content and related details.
- Surveys and promotions: With your consent we may collect information when you take part in surveys, studies, promotions, or events we run or sponsor.
- Please do not send us sensitive personal information (e.g., government ID numbers; data on race, ethnicity, political or religious beliefs; health; biometric or genetic data) unless we ask for it for a lawful purpose.
Information We Collect Automatically
When you use the Services, including when browsing without an account, we automatically collect certain device and usage information, such as:
- Device and technical data: IP address, browser type, user agent, carrier, time zone, device identifiers (including for advertising), device model, OS, network type, screen resolution.
- Usage: What you view, how long you interact, when you access, paths you take, clicks, searches, referring URL.
- Location: We may infer approximate location (country, region, or city) from IP or similar signals. We use this to protect your account, apply regional settings, comply with law, and improve the Services. With your permission we may collect precise location for location-based features.
- Cookies and similar tech: We use cookies, mobile IDs, and similar technologies to run and improve the Services. You can manage or disable cookies in your browser or device.
- Task and execution data: When you use features that run code or tasks (e.g., in a sandbox), we may collect execution logs, commands, and outputs as needed to provide the feature, debug, and maintain security. We may keep this for a limited time as described in Data Retention or product terms.
Information From Other Sources
If you sign up or sign in with a third-party account (e.g., Apple or Google) we may receive your username, public profile, and other information you allow them to share. We may share limited information with them for authentication and account linking.
Third-party AI/LLM providers: Parts of the Services use third-party AI or large language model ("LLM") providers. Those providers may process your inputs, prompts, and related data and may infer or share information with us. Their processing is governed by their privacy policies and our agreements with them.
2. How We Use Your Information
We use your information to run, provide, support, and administer the Platform and Services, enable features, secure your account, and to fulfill, enforce, and comply with our Terms of Service. In particular we use it to: verify eligibility and age; provide, operate, and maintain the Services and account features; fulfill your requests and perform internal operations (troubleshooting, analysis, testing, research, feedback); display or recommend your content to others per your settings; communicate with you (e.g., changes to Services, Terms, or policies); provide support and respond to inquiries; process transactions and support sales, subscriptions, refunds; protect the Platform and our community and defend our and others' rights and interests; enforce our terms and meet legal and regulatory obligations; detect, investigate, and prevent abuse, fraud, and illegal activity, including reviewing User Content and metadata for policy violations; and for other purposes we disclose at collection, with your consent, or as the law allows.
Where GDPR or similar laws apply we rely on one or more lawful bases, including: (a) contract performance; (b) consent; (c) legal obligation; (d) legitimate interests; (e) protection of vital interests (rare); (f) legal claims; (g) other bases under applicable law. You may withdraw consent at any time; withdrawal does not affect processing that already occurred.
We may aggregate or de-identify data so it no longer identifies you and use it for the purposes described in this Policy.
3. How We Share Your Information
We do not sell your personal information. We may share it with third parties for the purposes in this Policy and as the law allows, including:
- Service providers and partners: Payment processors, hosting and cloud providers, analytics and measurement, and (where law and your preferences allow) advertising and marketing partners. They process data on our behalf under strict contractual terms.
- Our corporate group: Subsidiaries, parents, and affiliates under common control, including outside your country, with appropriate safeguards for international transfers.
- Legal and compliance: Law enforcement, regulators, courts, or others when we believe in good faith that disclosure is needed to comply with law, enforce our Terms, address fraud or security, or protect rights or safety.
- Sale or merger: In connection with a merger, acquisition, asset sale, financing, restructuring, bankruptcy, or similar. We will require the recipient to honor this Policy or provide equivalent protection.
- With your consent: For other purposes if you consent or direct us. Where the law requires, we will get explicit consent first.
International transfers: Your information may be stored and processed outside your country. We currently use servers in mainland China and may use affiliates and providers elsewhere. When we transfer data from the EEA, UK, or Switzerland to countries without adequate protection we use appropriate safeguards (e.g., Standard Contractual Clauses, UK Addendum, or other approved tools).
You can view and update a lot of your profile by signing in. More controls are in Settings. Depending on where you are and the law, you may have the right to: request confirmation that we process your data and a copy of it; ask us to correct inaccuracies; request deletion ("right to be forgotten") in certain cases; request restriction of processing; request a portable copy of your data and transfer to another controller where feasible; withdraw consent where processing is based on consent; opt out of "sale" or "sharing" or cross-context behavioral advertising (e.g., under CCPA/CPRA) where applicable; object to certain processing, including direct marketing; and lodge a complaint with a data protection authority.
If you link your account to a third-party service (e.g., Apple or Google) you can revoke our access in that service's settings. Revoking does not apply to data we already received.
Do Not Track: Some browsers send a "Do Not Track" signal. We do not currently respond to it. For cookies, see above.
To exercise these rights or ask questions, contact support@unispark.ai. We will respond as required by law.
We use reasonable technical and organizational measures to protect personal data from unauthorized access, use, disclosure, alteration, and destruction. Transmission over the internet is not fully secure; we cannot guarantee security of data you send via the Services, and you transmit at your own risk. We ask that you use a strong password and do not share it or reuse it elsewhere.
We generally keep your information as long as needed for the purposes in this Policy, including to provide the Services. Retention for specific products or features (e.g., sandbox or execution data) may differ and may be in product terms or on request. We may keep data longer where the law requires or for legal claims. After you stop using the Services, we may keep data in aggregated, anonymized form. We may also retain data as needed to comply with law, resolve disputes, and enforce agreements.
The Services are not aimed at children under 13 (or the applicable minimum age). If you believe we have collected data from a child under that age, contact support@unispark.ai.
We may update this Policy from time to time to reflect our practices, technology, legal requirements, or other factors. For material changes we will notify you via the Services or by other reasonable means. The "Last Updated" date at the top shows when changes take effect. We encourage you to review the Policy periodically. Continued use after the effective date of an update means you accept the new terms. If you do not accept them, stop using the services.
For questions or concerns about this Policy or our handling of personal information, contact support@unispark.ai. For privacy matters you may also contact our privacy team or Data Protection Officer at that address or any dedicated contact we publish. We aim to respond to privacy requests within 15 days after verifying your identity; complex requests may need more information. If you believe we have processed your data inconsistently with this Policy or the law, please contact us first; we will review and address your concern. This does not affect your right to complain to a data protection authority or pursue other remedies under law or our Terms of Service.
This section applies if you are in the European Economic Area ("EEA") or the United Kingdom ("UK"). "Personal information" in this Policy includes "personal data" under the EU GDPR and UK GDPR. Beijing Yuanhuohua Technology Co., Ltd. is the data controller for processing covered by this Policy under European law. Our legal bases are in section 2 and include contract, consent, legal obligation, legitimate interests, and (in rare cases) vital interests or legal claims. You have the rights in section 4 (access, rectification, erasure, restriction, portability, objection, withdrawal of consent). Exercise them by contacting support@unispark.ai. You may also lodge a complaint with a supervisory authority where you live. Where we must appoint a representative in the EEA or UK we will publish contact details via the Services or on request.
This section applies to California residents and where our Services are subject to the California Consumer Privacy Act ("CCPA") as amended by the California Privacy Rights Act ("CPRA"). We do not sell personal information. What we collect and how we use it are in sections 1 and 2. You have the right to know what we collect and how it is used and disclosed, to request deletion, to request correction, to opt out of "sale" or "sharing" (we do not currently sell or share for cross-context behavioral advertising in a way that triggers this right), and to non-discrimination for exercising your rights. Contact support@unispark.ai to exercise them. We will verify your identity and respond as the law requires.