Your information stays yours.

1. Who we are and what this notice covers

GUIDELENS LTD is the controller of personal information processed through KuKuApply. We are registered in England and Wales under company number 16638731, with a registered office at 128 City Road, London, United Kingdom, EC1V 2NX.

This notice covers the KuKuApply website, browser extension, application assistance service, waitlist and support communications. Official government, university and other application websites have their own privacy notices and remain responsible for their services.

2. Information we process

Depending on the features you choose, we may process:

• Account information, such as your email address, account identifier and authentication information supplied through Google and Supabase;
• Application information, such as names, contact details, travel and education history, identification numbers and other answers you choose to prepare or check;
• Documents and extracted details from a passport, previous application or other file you deliberately upload;
• Form and page context, including relevant field labels, values and surrounding instructions needed to perform an autofill, explanation or page check you request;
• Your questions and drafts, together with the context needed to answer or refine them;
• Service and security information, such as request timing, error status, approximate network information and technical identifiers needed to operate and protect the service; and
• Communications, including a waitlist email or a message you send to support.

Please do not provide information that is not needed for the feature you are using.

3. How the browser extension works

The extension requests access to websites so that it can work beside the official form you choose to complete. This broad site access supports forms hosted across different government, university and application domains.

Simply browsing without starting a KuKuApply application does not send form content to KuKuApply. After you sign in and start an application, KuKuApply may analyse relevant fields on the current page to prepare an autofill or form-tip offer. It also sends the relevant context when you select a field, ask a question or check a page. KuKuApply changes fields only after you confirm and never submits the form. The extension uses browser storage for settings, authentication and application progress, and may use browser speech features when you enable narration.

4. Documents, form content and AI processing

When you upload a document, its contents are securely transmitted to our service and an AI provider so the requested details can be extracted. KuKuApply does not deliberately save the original file in its own database or file storage; the provider processes the request under its applicable service terms and retention settings. Extracted details are shown to you for review before they are used.

When you ask for an explanation, draft, autofill match or page check, we send only the content and context reasonably needed to provide that result to our service and the relevant AI provider. Application-form content is not used to train KuKuApply models.

AI output can be wrong or incomplete. You remain responsible for reviewing every extracted, suggested or filled answer and for submitting the official application yourself.

5. Why we use information

We process information to provide the feature you requested, authenticate your account, keep optional saved progress, answer support requests, prevent misuse, diagnose failures and improve the reliability of KuKuApply.

Our legal bases under UK data protection law depend on the context. They may include performing our agreement with you, our legitimate interests in operating and securing the service, complying with legal obligations, and consent where the law requires it. You may withdraw consent at any time, although this does not affect processing that has already taken place.

6. Service providers and sharing

We use carefully selected providers to run KuKuApply. They process information for us according to their role and contractual terms. These currently include:

• Cloudflare for website delivery, edge functions and security;
• Render for backend hosting;
• Supabase for authentication and encrypted saved-case storage;
• Google, Anthropic and OpenAI for AI-powered extraction, explanations, checking and optional speech features, depending on the feature used;
• Google when you choose Google sign-in; and
• Resend for waitlist and service emails.

We may also disclose information when required by law, to protect users or the service, or as part of a merger, financing or sale of the business subject to appropriate safeguards. We do not sell or rent personal information.

7. How long information is kept

• Original uploaded files: processed for the requested extraction and not deliberately saved in KuKuApply database or file storage. The relevant AI provider may temporarily retain request data under its configured API terms.
• Session-only application details: kept for the active product session and cleared when you start over or clear the session.
• Saved cases: kept in encrypted form until you delete them, or automatically deleted 90 days after the most recent explicit save.
• Account and security records: kept while your account is active and for a reasonable period afterwards where needed for security, disputes or legal obligations.
• Waitlist and support messages: kept while needed to provide the requested communication and maintain an appropriate business record.

We may retain limited information for longer where law requires it, or preserve it temporarily in protected backups until those backups rotate.

8. Security

We use safeguards designed for the sensitivity of application data, including encrypted transport, authenticated API access, rate limits, bounded uploads and encrypted saved-case payloads. Saved-case encryption uses a key controlled by KuKuApply; it is not zero-knowledge encryption, so authorised KuKuApply systems can decrypt saved details to provide the service.

No online service can guarantee absolute security. Keep your device and account secure, review what you upload and contact us promptly if you believe your information has been accessed without permission.

9. International transfers

Our providers may process information in the United Kingdom, European Economic Area, United States and other countries where they operate. Where UK data protection law requires a transfer safeguard, we use an adequacy regulation, approved contractual protections or another lawful mechanism.

10. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, restrict or object to the use of your personal information, receive a portable copy, or withdraw consent. You can delete a saved case inside KuKuApply. For account deletion or another request, email [email protected].

We may need to verify your identity before completing a request. If you are in the UK, you may also complain to the Information Commissioner’s Office, although we would appreciate the opportunity to address your concern first.

11. Children

KuKuApply is not designed for children to use independently. If you are not old enough to agree to our terms or provide valid consent where you live, a parent or legal guardian must act with you.

12. Changes to this notice

We may update this notice when our service, providers or legal obligations change. We will change the effective date above and give additional notice inside the product when a material change requires it.

13. Contact us