This Privacy Policy explains how Ragondin Dev Inc. ("Kovata", "we", "us", "our") collects, uses, shares, and protects personal information when you use the Kovata mobile app and the Kovata website at kovata.com (together, the "Service"). It also describes your privacy rights and how to exercise them.
Ragondin Dev Inc. is the data controller for personal information processed through the Service. Where your employer administers a Kovata workspace, your employer may also act as a controller of your training records; this policy covers our own processing. By using the Service, you agree to this policy.
1. Information we collect
We collect the following categories of information to provide and improve the Service:
- ·Account information — your name and email address, provided when you register or are invited to a team, used to identify you to your organization and to sign you in.
- ·Training content you upload — videos, PDFs, images, documents, SOPs, and quiz content you add to build courses, stored so your team can access it.
- ·Usage & training data — course assignments, completion status, viewing progress, quiz results, ratings, and in-app activity used to power dashboards and reporting.
- ·Purchase records — subscription and marketplace transaction history. Payment card details are collected and processed by our payment providers and are not stored by Kovata.
- ·Device & technical data — a push notification token (if you enable notifications) and basic technical information such as app version and error logs used to keep the Service reliable.
2. On-device camera processing (attention verification)
Kovata's attention verification uses your device's front camera to confirm a learner is watching a video lesson. This is an attention check — not identity verification, biometric login, or facial recognition. Camera frames are processed entirely on-device and are never stored, uploaded, or transmitted to Kovata or any third party. Only the resulting attention state (for example, whether a lesson was actively watched) is saved to track progress. The feature is optional, and camera permission is requested before it is used; you can decline or revoke it in your device settings.
3. How we use information & legal bases
We use personal information to operate and improve the Service. Where the GDPR or similar laws apply, we rely on the legal bases noted below:
- ·Provide accounts, build and deliver trainings, run the marketplace, and show progress and quiz results to team managers — performance of a contract.
- ·Send transactional messages and reminders, secure the Service, prevent fraud, and improve features — our legitimate interests.
- ·Enable optional features such as attention verification and push notifications — your consent, which you may withdraw at any time.
- ·Meet tax, accounting, and other legal obligations — compliance with a legal obligation.
We do not sell your personal information, and we do not use it for third-party advertising or share it for cross-context behavioral advertising.
4. Sharing & service providers
We share personal information only as needed to run the Service: with the members and administrators of your own team workspace; with the service providers below, each acting as our processor and only for the purpose shown; and where required by law or to protect our rights. In the event of a merger or acquisition, information may be transferred as part of that transaction.
5. International data transfers
Some of our service providers are located in, or process data in, the United States and other countries. Where personal information is transferred outside your country, we rely on appropriate safeguards — such as the European Commission's Standard Contractual Clauses or a provider's approved transfer mechanism — to protect it.
6. Data retention
We keep personal information for as long as your account is active and as needed to provide the Service. After account deletion, we remove or anonymize personal data within a reasonable period, except where we must retain certain records (for example, transaction records) to comply with legal, tax, or accounting obligations.
7. Security
We use technical and organizational measures — including encryption in transit, access controls, and reputable infrastructure providers — to protect personal information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information and to address incidents promptly.
8. Your rights
Depending on where you live, you may have the right to access, correct, delete, export (portability), or restrict processing of your personal information, to object to certain processing, and to withdraw consent. California residents have the right to know, delete, and correct personal information and not to be discriminated against for exercising those rights; we do not sell or share personal information as those terms are defined under California law.
To exercise any right, or to request deletion of your account and associated data, email fabien@ragondin.dev. We will respond within the timeframe required by applicable law. You also have the right to lodge a complaint with your local data protection authority.
9. Children's privacy
Kovata is intended for use by businesses and their staff and is not directed to children. The Service is not intended for anyone under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it.
10. Cookies & analytics
The kovata.com marketing website does not set advertising or cross-site tracking cookies. Essential cookies or similar technologies may be used to keep you signed in and to operate the Service. If we introduce analytics in the future, we will update this policy and, where required, request your consent.
11. Changes to this policy
We may update this policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you in the app. Your continued use of the Service after changes take effect means you accept the updated policy.
12. Contact us
Questions or requests about this policy? Email fabien@ragondin.dev. Kovata is operated by Ragondin Dev Inc. See also our Terms of Use.