Privacy Policy

Effective 2026-05-26. kwiKBio Inc. is a subsidiary of HydroJoule LLC. This Service is in beta; provisions may evolve with appropriate notice.

1. Scope and beta status

This Service is beta-stage research tooling. Availability, retention, and feature guarantees described below represent our current intent, not contractual SLAs. Enterprise customers may negotiate a separate Data Processing Agreement (DPA).

2. Data you must NOT submit

You agree not to submit, and we do not knowingly accept:

• Protected Health Information (PHI) as defined under HIPAA. We are not a HIPAA-covered entity and we will not sign a BAA at the freemium, Explorer, Researcher, or Pro tiers.
• Personal data subject to GDPR Article 9 (special categories) unless covered by a separate Enterprise DPA.
• Data covered by FERPA, GLBA, or other sectoral regimes without prior written agreement.
• Classified, export-controlled (ITAR/EAR), or otherwise legally restricted material.

If you submit such data inadvertently, contact privacy@kwikbio.com and we will purge it on a best-effort basis.

3. What we collect

• Account data: email, optional name, optional institutional affiliation.
• Query content: the natural-language research questions you submit and the resulting Studied System Knowledge Model (SSKM) state. Scoped to your tenant by default.
• Usage telemetry: page views, query counts, performance metrics — pseudonymized where reasonable.
• Billing metadata: handled by Stripe; we store only the references Stripe returns (customer ID, last-four digits, invoice IDs).

4. How we use it

• To run your ARS queries and persist your SSKM across sessions.
• To enforce your subscription tier limits.
• To improve product reliability via aggregate, pseudonymized telemetry.
• To contact you about your account, security, or material policy changes.

5. Tenant scoping and exceptions

Your query content and SSKM stay within your tenant boundary except as required to: (a) operate the Service (e.g., persistence, backups, disaster recovery); (b) respond to lawful process; (c) investigate security incidents or abuse; or (d) when you explicitly opt in to a shared model training program. We do not sell user data. We do not train shared models on tenant query content without explicit written consent.

6. Subprocessors

We use the following subprocessors. Material changes will be announced 30 days in advance for paying customers.

• Hostinger — infrastructure hosting (current production region: EU).
• Stripe — payment processing.
• GitHub — source code and engineering audit trail.

7. Your rights

You can export your SSKM to RDF/Turtle at any time, request deletion of your account and associated data, and opt out of non-essential telemetry. Backup rotation means deletion is propagated within approximately 30 days. Emailprivacy@kwikbio.com.

8. Security

Data is encrypted in transit (TLS) and at rest for production databases and backups. We do not represent that any system is invulnerable; we will notify affected users of material confirmed breaches without undue delay.

9. Changes

We notify account holders by email at least 30 days before material changes take effect. Continued use after the effective date constitutes acceptance.

10. Contact

privacy@kwikbio.com — kwiKBio Inc., c/o HydroJoule LLC.