v1 draft — 2026
Privacy Policy
What we collect
Your email, name (optional), password (stored hashed with bcrypt), your generated/saved lesson packs, and billing metadata from Stripe (customer id, subscription id — never your card details).
Why we collect it
To provide the Service: authenticate you, deliver lesson packs, process your subscription, and respond to support requests.
Where it's stored
MongoDB in a New Zealand-adjacent region. Payment card data is handled entirely by Stripe and never touches AkoKit servers.
Sharing
We do not sell your data. We share only what's required with our sub-processors: Stripe (payments), Anthropic (Claude — AI text generation), and our infrastructure provider.
Your rights (Privacy Act 2020)
You can request access to, correction of, or deletion of your personal information by emailing kia.ora@akokit.nz. We respond within 20 working days.
Cookies
We use one strictly-necessary session cookie ('akokit_session', httpOnly, SameSite=None, Secure). See our Cookie settings page.
Retention
Account data is kept while your account is active plus 30 days after cancellation, then anonymised.
Contact
Data queries: kia.ora@akokit.nz