هذه الوثيقة القانونية متوفرة باللغة الإنجليزية فقط، وهي النسخة المعتمدة.
Last updated: July 3, 2026
This Privacy Policy explains what personal data Koda collects, why we collect it, and the choices you have. It applies to kodaflo.com and any related Koda apps. We wrote it with GDPR (EU/UK), CCPA (California), and Indonesia's Personal Data Protection Law in mind, since Koda serves readers across all of these regions.
We use a small number of cookies to keep you signed in and remember your language. See our Cookie Policy for the full list.
We do not use your reading history or account data to train third-party AI models, and we do not sell your personal data.
We process account and usage data under contract (to provide the Service you signed up for), consent (for optional cookies), and legitimate interest (for security, fraud prevention, and improving the Service).
We share the minimum data necessary with the following processors, each bound by their own data-protection terms:
We do not sell personal data or share it with data brokers or advertisers. We may disclose data if required by law, to enforce our Terms, or to protect the rights and safety of Koda and our users.
Koda serves readers worldwide, and our infrastructure providers (Cloudflare, Turso, Stripe) operate globally. Where personal data crosses borders — for example from the EU to the US — we rely on our processors' standard contractual clauses or equivalent safeguards.
We keep account data for as long as your account is active. If you delete your account, we remove your personal data within 30 days, except where we're required to keep billing records for tax or accounting purposes (typically up to 7 years) or need to retain limited data to prevent fraud or abuse.
Depending on where you live, you may have the right to access, correct, export, or delete your personal data; to object to or restrict certain processing; and to withdraw consent at any time. California residents have the right to know what data we collect and to request deletion under the CCPA; Indonesian residents have equivalent rights under the PDP Law. Since we don't sell personal data, there's nothing to opt out of on that front.
You can access and update most of your data directly in account settings, or delete your account outright. For anything else, email hello@kodaflo.com and we'll respond within 30 days.
Koda is not directed at children under 13, and we don't knowingly collect personal data from them. If you believe a child has created an account, contact us and we'll remove it.
We use industry-standard safeguards — encrypted connections (HTTPS/TLS), hashed credentials, encrypted TOTP secrets, and access controls limiting who on our team can see user data. No system is perfectly secure, so we can't guarantee absolute protection, but we treat account security as a first-class concern.
We'll post updates here and, for material changes, notify active users by email at least 14 days before they take effect.
Questions or requests about your data? Email hello@kodaflo.com.