Privacy policy

At Kai TasteMap your data is yours. This policy explains what data we process, why, and how to exercise your rights.

Data controller

Mauricio Zúñiga Cuéllar, a natural person, Colombian tax ID (NIT) 94.060.281-1, domiciled at Calle 3D # 66 - 47, Cali, Colombia. Contact: tastemap@kaistrategylab.com.

Your Cuenta Kai (family identity)

Sign-up and sign-in for Kai TasteMap are operated by Cuenta Kai (id.kaistrategylab.com), the identity service of the Kai family, under the same ownership — not an unrelated third party. When you sign in, Cuenta Kai confirms to us your identifier, email, name, language and whether your email is verified; none of your TasteMap content travels to Cuenta Kai. Your password lives there (as an irreversible hash), and it is changed and recovered there. Its terms: id.kaistrategylab.com/legal/privacidad.

Data we process

Account data: name and email (your password lives in your Cuenta Kai, not here). Profile data, if you provide it: gender, birth year, country, time zone and language.

Content you create: your product cards, impressions, notes, brews and palate profiles.

Usage data: activity in the service, KaiCoin consumption and technical metrics of AI calls (tokens, duration). We do not store the content of your AI interactions in those technical records.

The most important thing about your photos: the photos you scan (bags, labels, menus or shelves) are processed in memory solely to extract their data and are not stored on our servers.

What we use it for

To provide the service, operate your account, measure usage and improve the product with aggregate statistics. We do not sell your personal data.

Artificial intelligence

AI features send to a model provider (OpenAI) the content needed to generate the result: the photo you scan (ephemerally), the text of your impressions, and summaries of your history to build your profile and recommendations. Only what is essential is sent, and we do not use your content to train our own models.

Processors and international transfers

These providers process data on our behalf, and may be located outside Colombia:

OpenAI (United States): processes the photos you scan (ephemerally, without us storing them) and the text of your impressions and records when you use AI features.

Resend (United States): receives your name and email to send the service's transactional emails (receipts and notices). Verification and password-reset emails are sent by Cuenta Kai.

dLocal Go, a product of the company dLocal: processes payments; receives your email and the amount. Your card details are handled by the payment gateway and never reach our servers.

Kai News: the Kai family's own email system (same ownership, not an unrelated third party). Only if you tick the news checkbox, it receives your email, name and language when you verify your account, and you can unsubscribe from the link in every email.

Hostinger (European Union/various): infrastructure hosting the service's server and database.

Cookies

We use only our own strictly necessary cookies: your session cookie and your language cookie. No advertising or third-party tracking cookies.

Retention and security

We keep your data while your account is active and as required by law. We apply reasonable measures: encryption in transit (TLS), resistant password hashing, per-account isolation, backups and access control.

Your rights (Habeas Data)

Article 8 of Colombia's Ley 1581 of 2012 grants you six rights over your data. We list them all because that same law requires us to inform you of them, and because we do not grant them: you have them by law, whether we write them here or not.

(a) To know, update and rectify your data. (b) To request proof of the authorization you gave us to process it. (c) To ask us to inform you of the use we have given it. (d) To file complaints before the Superintendencia de Industria y Comercio (SIC), Colombia's data protection authority, if you believe we have breached that law. Write to us first: almost everything gets resolved there, and the law also asks you to exhaust that step with us before going to the SIC (article 16). (e) To revoke the authorization and request deletion of your data. (f) To access your data free of charge.

Beyond those six statutory rights, we also give you these: you can request an export of your records and object to specific uses by writing to us.

This policy is governed by Ley 1581 of 2012 and other Colombian data protection rules. Write to tastemap@kaistrategylab.com from your account email.