Privacy Policy
Version: 2026-10-19
Operator: PT Kyaxris Teknologi Nusantara ("Kyaxris", "we")
Service: Kyaxris Academy at academy.kyaxris.com
Draft for counsel review. Not legal advice. This summary is meant to be readable; counsel should align it with UU PDP (Indonesia Personal Data Protection Law) and other applicable rules.
1. What this policy covers
This policy explains what personal data we process when you use the Service, why we process it, and the choices you have.
2. Data we process
Depending on how you use the Service, we may process:
- Account: email address, username, display name, role, legal acceptance timestamps and version strings, age confirmation timestamp
- Learning activity: course progress, beat attempts, scores, and related metadata
- Consent events: cookie and similar preference categories (essential, functional, analytics), action, policy version, optional user agent
- Technical: session cookies required to stay signed in, security logs, approximate device or browser signals needed to run the app
We do not ask for passwords. Sign-in uses a magic link to your email.
3. Purposes
We process data to:
- Authenticate you and keep your session secure
- Deliver courses and save progress
- Record legal and cookie consents
- Operate, debug, and protect the Service
- Measure product usage when you grant analytics consent
4. Legal bases (high level)
Where UU PDP or similar rules apply, we rely on bases such as contract performance (running your account and courses), consent (optional analytics/functional cookies), and legitimate interests that do not override your rights (security, abuse prevention), as counsel confirms for each processing activity.
5. Cookies and similar tech
Essential cookies keep you signed in and enforce security. Functional and analytics cookies or scripts run only after you grant those categories. See the Cookies Policy for details. You can change non-essential choices later in Account settings or the cookie banner.
6. Sharing
We use processors that host or operate infrastructure (for example database, email delivery, and hosting). They process data on our instructions. We do not sell your personal data. We may disclose data if required by law or to protect users and the Service.
7. International transfers
Infrastructure may process data outside Indonesia. Where required, we use appropriate safeguards as counsel advises.
8. Retention
We keep account and learning data while your account is active and for a limited period afterward needed for security, disputes, or legal duties. Consent events are append-only audit records. You may request export or deletion (see Account).
9. Your rights
Subject to applicable law, you may request access, correction, deletion, restriction, or a copy of your data, and you may withdraw optional consents. Use Account export/delete where available, or contact us via kyaxris.com. You may also contact the relevant supervisory authority in your jurisdiction.
10. Children
The Service is not directed at children under 16. We require age confirmation at onboarding.
11. Educational context
Simulations are fictional training scenarios. Progress and answers describe how you interact with those scenarios; they are not assessments of real systems you operate.
12. Changes
We may update this policy. Material changes that require a new acceptance will be versioned and presented in the product when needed.
13. Contact
Privacy questions: channels published on kyaxris.com for PT Kyaxris Teknologi Nusantara.