Privacy
Privacy notice
This notice explains what personal data Kainetics Labs Ltd collects through kaineticslabs.com and the Kainetics portal, why we collect it, who processes it for us, how long we keep it, and the choices and rights you have.
Who we are
Kainetics Labs Ltd, a company registered in Rwanda (company code / TIN 155208877), Gasabo, Kigali, Rwanda. We are responsible for the personal data described here. Contact us about your data at kaineticslabs@gmail.com.
What we collect
- Contact form: your name, email address, and anything you choose to tell us (organisation, country, message, timeline, how you heard about us, the product you asked about).
- Email updates: your email address.
- Learning waitlist: your email, optional name, and the topics, formats, level and role you choose.
- Job applications: your name, email, location, links to your work and what you tell us about it.
- Accounts (Kainetics portal): your email address, name, and password (stored only as a secure hash), or the details provided by Google if you sign in with Google (see below), plus the organisation you are linked to.
- Community posts: what you write in the Kainetics portal, your display name, and notes from our editors. When a post is published, its title, text and your display name are public on the Journal.
- Technical data: the page you came from, campaign tags in the link (for example
utm_source), and a one-way hash of your IP address used only to limit spam and abuse. - Usage analytics: pages viewed and buttons clicked, collected without cookies (see "Cookies, storage and analytics").
Signing in with Google
If you choose "Continue with Google", Google shares with us your name, email address and profile
picture, and confirms that your email address is verified. We request only these basic details
(the openid, email and profile scopes). We do not request access to your
Gmail, contacts, files, calendar or any other Google data.
We use this information only to create and secure your account, to show your name in the Kainetics portal and on posts you publish, and to let our team link your account to your organisation. We do not sell it, use it for advertising, or share it with anyone other than the service providers listed below who host our sign-in system. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. You can remove our access at any time from your Google Account (Security → Third-party apps & services) and ask us to delete your account.
Why we use it
| Purpose | Basis |
|---|---|
| Replying to your enquiry and following up on a conversation you started | Your consent, given on the form |
| Sending updates or telling you when learning resources are ready | Your consent; you can unsubscribe at any time |
| Considering you for current and future roles | Your consent, given on the application form |
| Providing and securing your Kainetics portal account | Our agreement with you or your organisation |
| Reviewing and publishing posts you submit to the Journal | Your request when you submit a post |
| Preventing spam and abuse; understanding how the site is used | Our legitimate interest in running a secure, useful website |
Who processes it for us
Only Kainetics Labs staff can see your details. These service providers process data on our behalf:
- Supabase — database, accounts and sign-in.
- Cloudflare — website hosting, security, bot checks (Turnstile) and cookieless web analytics.
- Resend — sending confirmation and notification emails.
- PostHog — cookieless product analytics, hosted in the EU.
- Google — only if you choose to sign in with Google.
These providers may process data outside Rwanda. We use providers that protect data with encryption and contractual safeguards. We do not sell or rent your personal data.
Cookies, storage and analytics
We do not use advertising cookies or trackers. If you sign in, your browser stores a sign-in session so you stay signed in. We use Cloudflare Web Analytics and PostHog to count visits and see which pages and buttons are used; they run without cookies and do not follow you across visits or other websites. Form contents are never sent to analytics.
How long we keep it
- Enquiries: up to 24 months after the conversation ends.
- Messages identified as spam: deleted within 30 days.
- Email updates and learning-waitlist entries: until you unsubscribe.
- Job applications: up to 12 months, unless you ask us to delete them sooner.
- Accounts: while the account is active; deleted within 30 days of a deletion request.
- Community posts: drafts until you delete them; published posts until you ask us to remove them.
Your rights
You can ask to see, correct or delete your personal data, to withdraw consent, to object to how we use it, or to stop receiving emails, by writing to kaineticslabs@gmail.com. We respond within 30 days. If you are not satisfied, you can complain to Rwanda's National Cyber Security Authority (NCSA).
Security
Data is encrypted in transit and at rest by our providers. Access is limited to staff who need it, and administrator accounts use two-factor sign-in.
Children
Our services are not directed at children under 16, and we do not knowingly collect their data.
Changes to this notice
We will post any changes on this page with a new version date. If a change materially affects how we use data you have already given us, we will tell you by email before it takes effect.