KAALDI / Privacy Policy
Privacy Policy — Kaaldi Internal App, Kaaldi Beta and Kaaldi DEV
Effective date: 29 October 2026.
PT Karya Digital Abadi operates these applications for authorized Kaaldi support staff. For privacy enquiries and requests, contact admin@kaaldi.com.
Information and purposes
The service processes account email and identifiers, authentication and session information, staff permissions, support-conversation messages and history, customer contact information included in authorized support records, and records of staff actions such as claiming, replying to and closing conversations. This information supports authentication, access control, customer support, operation of the service and security/audit purposes. Staff access remains subject to server-side permissions.
Authentication and the mobile device
Password sign-in uses Google Firebase Authentication. Credentials entered for this sign-in are transmitted to Firebase, and Kaaldi services verify identity and staff authorization before granting inbox access. The current mobile release keeps its active session in memory and does not provide persistent sign-in or push notifications. It does not request access to the device's contacts, camera, microphone or location. Release-app service connections use HTTPS.
Service providers
The service uses Google Firebase for authentication and Amazon Web Services for hosting and backend processing. Automated-assistant features within the support service use Amazon Bedrock and Knowledge Bases to process questions and the context used by those features. The staff mobile app accesses Kaaldi's API rather than connecting directly to the AI model. Provider processing is part of supplying the relevant service; this policy does not promise that all provider processing occurs in a single country or that third-party provider records have the same retention as Kaaldi records.
Retention
Server-side records are kept for as long as needed for support, security and applicable obligations. The service does not promise a fixed automatic deletion schedule. Signing out, closing a support conversation or uninstalling the mobile app does not itself delete server-side records. Requests and any necessary retention exceptions, including records in backups, are reviewed as part of the manual request process.
Access, correction and deletion requests
Email admin@kaaldi.com with the nature of your request. Do not include passwords or session tokens. The responsible team verifies identity and the requester's authority before handling access, correction or deletion. Information concerning other people or records that must be retained for applicable support, security or other obligations may require a limited response or retention exception. Requests are handled manually; no unimplemented automatic-deletion function or fixed response/deletion deadline is promised.
Accounts and advertising
These staff applications use existing accounts and do not offer public self-registration or automatically grant staff access. The current mobile application has no advertising feature or advertising SDK. Absence of advertising does not mean that no account, support or security information is processed.
Updates and contact
Changes to this policy will be published on this page with an updated effective date. Privacy contact: admin@kaaldi.com, PT Karya Digital Abadi.