Privacy Policy

Last updated: April 2026

This policy describes how Koda (“we”, “us”) handles information when you use our website, web application, and related services. It is provided for transparency and is not legal advice.

Information we collect

Depending on how you use Koda, we may process:

Account and profile data — such as name, email address, and authentication identifiers when you register, sign in with email and password, or use sign-in providers (for example Google OAuth).
Collaboration and session data — content you create or upload in shared sessions (for example files, edits, messages, and metadata needed to operate realtime collaboration), and identifiers that tie that activity to your account or session.
Technical and usage data — such as IP address, device and browser type, general location derived from IP, timestamps, diagnostic logs, and information needed to secure the service and troubleshoot issues.
Billing-related data — if you purchase a paid plan, payment details are handled by our payment processor; we typically receive limited billing metadata (for example subscription status) rather than full card numbers.

How we use information

We use the information above to:

Provide, operate, and improve Koda (including sync, sessions, classroom features where enabled, and customer support).
Authenticate users, prevent fraud and abuse, and enforce our terms.
Analyze reliability and performance in aggregate or de-identified form where possible.
Communicate with you about the service, security, or billing as appropriate.

Cookies and local storage

We use cookies and similar technologies (including browser local storage) as needed for sign-in sessions, preferences (such as theme), security, and basic analytics. You can control cookies through your browser settings; disabling some cookies may limit certain features.

Sharing with third parties

We do not sell your personal information. We may share data with:

Service providers who host infrastructure, databases, email delivery, analytics, error reporting, or payment processing, subject to contractual obligations.
Sign-in providers (for example Google) according to their terms and your account settings when you choose to authenticate that way.
Authorities when required by law or to protect the rights, safety, and security of our users and the service.

Retention

We retain information for as long as your account is active and as needed to provide the service, comply with law, resolve disputes, and enforce our agreements. Some server-side sessions or logs may be removed on a rolling basis. You may be able to delete your account from in-app settings where that feature is available; deletion may take a short time to propagate across systems.

Security

We use reasonable administrative, technical, and organizational measures to protect information. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

Children

Koda is not directed at children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have collected such information, contact us and we will take appropriate steps.

International users

If you access the service from outside the United States, your information may be processed in the United States or other countries where we or our providers operate, which may have different data protection rules than your country.

Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the “Last updated” date. Continued use of the service after changes means you accept the updated policy.

Contact

Questions about this policy or your data: matt@trykoda.dev