Privacy policy

Version: 6 October 2026

This page is a translation provided for information. The German version is legally authoritative.

This privacy policy applies to the kinux website and service. It explains which personal data we process, for what purpose we do so and what rights you have. It is based on the revised Swiss Data Protection Act (FADP).

Controller

kinux GmbH
Mittlere Strasse 93
3600 Thun, Switzerland

For any questions about data protection, you can reach us at kontakt@kinux.ch.

What data we process

We process the following categories of personal data:

• Account data: first name, last name and email address, your password (stored as a hash, never in plain text), your date of birth if you choose to provide it, and the chosen subscription.
• Enquiries via the contact form: name, email address, the chosen topic and the content of your message. We use these details to handle your enquiry.
• Usage data: time and frequency of requests, chosen settings and technical details such as browser type and operating system.
• Content of your requests to kinux: the texts you enter to receive answers. They are forwarded to our system to process your request.

Cookies and local storage

When you sign in, we set a technically necessary cookie so that you stay signed in. Without this cookie, signing in does not work. It is not used for analytics or advertising.

We store your decision in the consent banner in your browser’s local storage (under the key kinux_consent) so that we do not have to ask you again on every visit. This information stays on your device and is not transmitted to us.

Tracking and analytics

For anonymised audience measurement we use Google Analytics 4. This analysis is activated only after your express consent in the consent banner. Without consent, we set no analytics cookies and do not even load the analytics service. Where analytics is active, your device’s IP address is processed in shortened form; advertising and personalisation features are disabled.

The provider of the service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. In this context, data may be processed by Google LLC in the USA. Google is certified under the Swiss-U.S. Data Privacy Framework; in addition, the standard contractual clauses recognised by Switzerland serve as safeguards for transfers to third countries.

You can withdraw or adjust your consent at any time. To do so, use the “Manage cookies” link in the page footer, which reopens the banner.

Payment processing

We process payments via the payment provider Stripe (Stripe Payments Europe, Limited, Dublin, Ireland). Your payment data, such as the full card number, is processed directly by Stripe and is not stored on our systems. From Stripe we only receive the details needed for billing, such as the status of a payment.

Newsletter

If you subscribe to our newsletter, we process your email address, the selected page language and, if you provide it, the fact that you work in insurance advisory. Subscription uses a confirmation procedure (double opt-in): you first receive an email with a confirmation link and are only subscribed after clicking it. We record the time, source and text version of your consent as proof. You can unsubscribe at any time via the unsubscribe link in every newsletter email or in your account settings. For sending we use email service providers as processors (category: email delivery). Unconfirmed subscriptions are deleted after 30 days.

Hosting and data location

The kinux application runs on Microsoft Azure in Switzerland; the application database is also in Switzerland (Zurich region). The public website is delivered worldwide through Azure.

AI processing takes place in Swiss Azure regions and the European Azure data zone (EU and EFTA, such as Norway). Microsoft may add regions within the zone without prior notice.

Your inputs are not used to train AI models. Microsoft may temporarily retain inputs to detect abuse.

Disclosure to third parties and processors

We do not pass your data on to third parties unless it is necessary for providing the service or legal obligations require it. For operation, we use carefully selected processors, in particular:

• Microsoft (Azure) for infrastructure and AI processing in Switzerland and the European Azure data zone (EU and EFTA);
• Supabase Inc. for the application database, with data stored in Switzerland (Zurich region);
• Stripe Payments Europe, Limited (Dublin, Ireland) for billing;
• Hostpoint AG (Rapperswil-Jona, Switzerland) for domain management;
• Google Ireland Limited (Dublin, Ireland) for business and transactional emails and, only with your consent, for audience measurement. Processing in the EU and USA is possible.

Processing by processors is based on data processing agreements with the respective providers.

Purposes and legal bases

We process your personal data for the following purposes:

• Providing and operating the kinux service (performance of the contract).
• Account management, billing and communication with you (performance of the contract).
• Operating the service and assuring its quality using usage data and the separate copy described below.
• Fulfilling legal obligations (legal obligation).

The legal basis for processing is the revised Swiss Data Protection Act (FADP). Where we process data of persons in the EU, we additionally rely on Art. 6 GDPR.

Automated analysis by AI

To answer your questions, kinux analyses your request automatically using artificial intelligence methods. There is no automated decision with legal effect on you; the results are information, not binding statements. In the chat you interact with an AI system; all answers are machine generated.

Chat history

Questions, answers and associated usage data are stored so you can revisit your conversations. We delete inactive conversations after 365 days. Pinned conversations remain until you delete them or your account. Content needed to answer your questions is processed by the processors named in this notice.

Separate copy for quality assurance

For accounts outside an active organisation, a separate copy of questions, answers and the displayed sources is enabled by default to analyse errors and improve kinux. kinux GmbH can review this content in a protected administration interface. For insurance premium questions, the copy contains the question but not the answer text. Document requests are excluded; the copy is also not created for active organisation members in normal operation.

This copy has no automatic deletion deadline. It remains when you delete a chat and is deleted with your account. You can ask to disable further copies for your account at kontakt@kinux.ch. Disabling logging does not delete existing copies.

Voice and text training with kinux call

During voice training, Microsoft Azure processes audio for interaction with the AI counterpart. We store transcripts, conversation metrics, assessments and coaching feedback as training records. This also applies when no audio file is retained.

An audio recording is stored only for assigned mandatory training. The default period is 90 days; the authorised organisation can set it between 30 and 365 days. Once it expires, the recording is deleted; transcripts, assessments and coaching content are not affected.

You can view your own training records. For mandatory training, the responsible team leader with access rights can view results and recordings. A team leader can access optional training only when you share it with them specifically; optional training does not create stored audio recordings.

Uploaded documents

For a temporary document or policy check, we store extracted text for analysis and delete it after 48 hours. We do not retain original files after extracting their text. Answers already included in a chat follow the retention rules for chat history.

The document library is separate: extracted text in Markdown format and metadata, such as file name and page count, remain stored until you delete the document or the relevant account or organisation data are deleted. Original PDF files are not permanently stored there either. Team documents are available to authorised members and recipients designated by the organisation. Our processors process document content for the requested analysis.

Retention

Cancelling your subscription does not delete your account. When you delete your account, we remove the associated personal data, including the separate quality assurance copy, subject to statutory retention requirements. Agreed export and deletion periods also apply to organisation data.

Your rights

Under the revised FADP you have the following rights:

• Access: you can ask at any time what data we have stored about you.
• Rectification: you have the right to have inaccurate data corrected.
• Deletion: you can request the deletion of your data, unless legal retention obligations prevent this.
• Restriction: you can request that we restrict the processing of your data.
• Withdrawal and objection: you can withdraw consent you have given at any time and object to processing based on legitimate interest.

To exercise these rights, contact kontakt@kinux.ch. We handle your request within 30 days.

Changes to this policy

We reserve the right to adapt this privacy policy if the service or legal requirements change. The date at the top of this page shows the version status. We will inform you of material changes by email.

You can find further legal information in our Terms of Service.