Privacy Policy

Your privacy matters to us. Learn how we protect and use your information.

Last updated: August 18, 2025

Privacy at a Glance

Secure by Design

Industry-standard encryption and security measures protect your data.

Transparent Usage

We clearly explain what data we collect and how we use it.

Your Control

Access, update, or delete your data at any time through your account.

1. Introduction

Khlovia ("we," "us," or "our") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-guided learning platform.

By using Khlovia, you consent to the data practices described in this policy. If you do not agree with the practices described in this policy, please do not access or use our services.

2. Information We Collect

Personal Information: Name, email address, phone number, billing information, and account credentials.

Educational Data: Course progress, quiz results, learning preferences, interaction with AI tutor Zolina, and forum posts.

Technical Information: IP address, browser type, device information, operating system, and usage analytics.

Communication Data: Messages sent through our platform, support requests, and feedback submissions.

3. How We Collect Information

Directly from you: When you create an account, make purchases, complete courses, or contact our support team.

Automatically: Through cookies, analytics tools, and tracking technologies as you navigate our platform.

From third parties: Payment processors, social media platforms (if you choose to connect them), and educational partners.

AI Interactions: When you use Zolina, the text you submit is sent to our AI provider (Google Gemini) to generate a response. We record usage counts (for example, number of requests) to enforce limits and operate the service; we do not store the content of your chat messages as a conversation log.

4. How We Use Your Information

Provide and improve our educational services, including AI-powered tutoring and course recommendations.

Process payments, manage subscriptions, and provide customer support.

Personalize your learning experience and track your progress through courses.

Send important notifications about your account, courses, and platform updates.

Conduct research and analytics to enhance our educational offerings.

Comply with legal obligations and protect against fraudulent or illegal activities.

5. AI and Machine Learning Data Usage

Messages and inputs you send to Zolina are processed by a third-party AI provider (Google Gemini) solely to produce a response to your request. Do not enter sensitive personal information into AI features.

We analyze learning patterns to provide personalized recommendations and adaptive learning paths.

We do not currently use your Zolina interactions to train our own AI models. If this changes, we will update this policy and, where required, ask for your consent first.

AI responses can be inaccurate or incomplete and are not professional, legal, or safety advice. Contact us to ask questions or request deletion of data associated with your account.

6. Information Sharing and Disclosure

Service Providers: We share data with trusted third-party providers who assist in operating our platform (payment processors, cloud hosting, analytics).

Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

Legal Requirements: We may disclose your information if required by law, court order, or to protect our rights and safety.

Educational Partners: With your consent, we may share progress data with educational institutions or employers for certification purposes.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

7. Data Security

We implement industry-standard security measures including encryption, secure servers, and regular security audits.

All payment information is processed through PCI-compliant payment processors and is not stored on our servers.

Access to personal information is restricted to authorized personnel who need it to perform their job functions.

We regularly update our security practices and conduct vulnerability assessments to protect against data breaches.

Despite our security measures, no system is completely secure, and we cannot guarantee absolute security of your data.

8. Data Retention

Account Information: We retain your account data for as long as your account is active or as needed to provide services.

Educational Records: Course progress and certification data may be retained for up to 7 years for verification purposes.

Communication Data: Support tickets and communications are retained for 3 years for quality assurance.

Analytics Data: Aggregated and anonymized usage data may be retained indefinitely for service improvement.

Upon account deletion, we will delete or anonymize your personal information within 30 days, except where retention is required by law.

9. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance user experience, remember preferences, and analyze platform usage.

Essential cookies are necessary for platform functionality and cannot be disabled.

Analytics cookies help us understand how users interact with our platform to improve services.

Marketing cookies may be used to provide relevant advertisements and track campaign effectiveness.

You can control cookie preferences through your browser settings, but disabling cookies may affect platform functionality.

10. Your Privacy Rights

Access: You can request a copy of the personal information we hold about you.

Correction: You can update or correct inaccurate personal information through your account settings.

Deletion: You can request deletion of your personal information, subject to legal and contractual obligations.

Portability: You can request a copy of your data in a machine-readable format.

Opt-out: You can unsubscribe from marketing communications and opt-out of certain data processing activities.

To exercise these rights, contact us at privacy@khlovia.com with your request and identity verification.

11. Children's Privacy

Our services are intended for users 16 years of age and older. We do not knowingly collect personal information from children under 16.

If you are a parent or guardian and believe your child has provided personal information to us, please contact us immediately.

Users between 16-18 years old may use our services with parental consent and supervision.

We recommend that parents and guardians monitor their children's online activities and help them understand privacy implications.

12. International Data Transfers

Your information may be transferred to and processed in countries outside your country of residence, including the United States.

We ensure that international transfers comply with applicable data protection laws through appropriate safeguards.

By using our services, you consent to the transfer of your information to countries that may have different privacy laws than your country.

We work with service providers who maintain adequate data protection standards regardless of their location.

13. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements.

We will notify you of material changes via email or through a notice on our platform before they become effective.

Your continued use of our services after policy updates constitutes acceptance of the revised policy.

We encourage you to review this policy periodically to stay informed about how we protect your information.

14. Contact Information

If you have questions about this Privacy Policy or our data practices, please contact us:

Email: privacy@khlovia.com

Address: Khlovia Privacy Team, Austin, Texas

Phone: 1-800-KHLOVIA

We will respond to privacy inquiries within 30 days of receipt.

International Privacy Rights

EU Users (GDPR): You have additional rights including data portability, the right to be forgotten, and the right to object to processing. Contact our Data Protection Officer at dpo@khlovia.com.

California Users (CCPA): You have the right to know what personal information we collect, delete your information, and opt-out of the sale of personal information (which we do not engage in).

Other Jurisdictions: We comply with applicable data protection laws in all jurisdictions where we operate.

Privacy Questions?

Our privacy team is here to help you understand how we protect your information and exercise your privacy rights.

1