Privacy policy

Version: August 2026

This page is a translation provided for information. The German version is legally authoritative.

This privacy policy applies to the kinux website and service. It explains which personal data we process, for what purpose we do so and what rights you have. It is based on the revised Swiss Data Protection Act (FADP).

Controller

Ugur Kinik
Mittlere Strasse 93
3600 Thun, Switzerland

For any questions about data protection, you can reach us at kontakt@kinux.ch.

What data we process

We process the following categories of personal data:

Account data: first name, last name and email address, your password (stored as a hash, never in plain text), your date of birth if you choose to provide it, and the chosen subscription.
Enquiries via the contact form: name, email address, the chosen topic and the content of your message. We use these details to handle your enquiry.
Usage data: time and frequency of requests, chosen settings and technical details such as browser type and operating system.
Content of your requests to kinux: the texts you enter to receive answers. They are forwarded to our system to process your request.

Cookies and local storage

When you sign in, we set a technically necessary cookie so that you stay signed in. Without this cookie, signing in does not work. It is not used for analytics or advertising.

We store your decision in the consent banner in your browser’s local storage (under the key kinux_consent) so that we do not have to ask you again on every visit. This information stays on your device and is not transmitted to us.

Tracking and analytics

For anonymised audience measurement we use Google Analytics 4. This analysis is activated only after your express consent in the consent banner. Without consent, we set no analytics cookies and do not even load the analytics service. Where analytics is active, your device’s IP address is processed in shortened form; advertising and personalisation features are disabled.

The provider of the service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. In this context, data may be processed by Google LLC in the USA. Google is certified under the Swiss-U.S. Data Privacy Framework; in addition, the standard contractual clauses recognised by Switzerland serve as safeguards for transfers to third countries.

The analytics identifier is only set when the service launches. As long as kinux is not publicly available, no analysis takes place.

You can withdraw or adjust your consent at any time. To do so, use the “Manage cookies” link in the page footer, which reopens the banner.

Payment processing

We process payments via the payment provider Stripe (Stripe Payments Europe, Limited, Dublin, Ireland). Your payment data, such as the full card number, is processed directly by Stripe and is not stored on our systems. From Stripe we only receive the details needed for billing, such as the status of a payment.

If you subscribe to our newsletter, we process your email address, the selected page language and, if you provide it, the fact that you work in insurance advisory. Subscription uses a confirmation procedure (double opt-in): you first receive an email with a confirmation link and are only subscribed after clicking it. We record the time, source and text version of your consent as proof. You can unsubscribe at any time via the unsubscribe link in every newsletter email or in your account settings. For sending we use email service providers as processors (category: email delivery). Unconfirmed subscriptions are deleted after 30 days.

Hosting and data location

The kinux service runs on Microsoft Azure in the Switzerland region; the website is also delivered via Microsoft Azure. The database is located in a Swiss data centre (Zurich cloud region). Individual processing steps, in particular the AI-assisted answering of questions, take place in data centres in Switzerland and the EU. Your inputs are never used to train AI models.

Disclosure to third parties and processors

We do not pass your data on to third parties unless it is necessary for providing the service or legal obligations require it. For operation, we use carefully selected processors, in particular:

Microsoft (Azure) for operating the infrastructure, with data centres in Switzerland and the EU;
Supabase Inc. for the application database, with data stored in Switzerland (Zurich region);
Stripe Payments Europe, Limited (Dublin, Ireland) for billing;
Hostpoint AG (Rapperswil-Jona, Switzerland) for domain management;
Google Ireland Limited (Dublin, Ireland) for audience measurement, only after your consent.

Processing by processors is based on data processing agreements with the respective providers.

Purposes and legal bases

We process your personal data for the following purposes:

Providing and operating the kinux service (performance of the contract).
Account management, billing and communication with you (performance of the contract).
Improving the service through anonymised usage analysis (legitimate interest).
Fulfilling legal obligations (legal obligation).

The legal basis for processing is the revised Swiss Data Protection Act (FADP). Where we process data of persons in the EU, we additionally rely on Art. 6 GDPR.

Automated analysis by AI

To answer your questions, kinux analyses your request automatically using artificial intelligence methods. There is no automated decision with legal effect on you; the results are information, not binding statements. In the chat you interact with an AI system; all answers are machine generated. kinux thereby meets the transparency requirements of the EU AI Act (Art. 50) for AI interactions.

Chat history

Your chat history (questions, answers and related usage data) is stored so you can revisit it, and analysed internally to operate and improve kinux. It is not shared with third parties. Deleting your account also deletes your chat history.

Uploaded documents

If you upload documents (for example a policy), only their text content is stored for the analysis and deleted automatically after 48 hours; the file itself is not kept. Uploaded documents are not shared with third parties and not used for AI training.

Retention

We store your personal data for as long as necessary for the purposes described in this policy or as long as legal retention obligations exist. After you cancel your account, your account data and request content are usually deleted within 30 days, unless a legal retention obligation prevents this.

Your rights

Under the revised FADP you have the following rights:

Access: you can ask at any time what data we have stored about you.
Rectification: you have the right to have inaccurate data corrected.
Deletion: you can request the deletion of your data, unless legal retention obligations prevent this.
Restriction: you can request that we restrict the processing of your data.
Withdrawal and objection: you can withdraw consent you have given at any time and object to processing based on legitimate interest.

To exercise these rights, contact kontakt@kinux.ch. We handle your request within 30 days.

Changes to this policy

We reserve the right to adapt this privacy policy if the service or legal requirements change. The date at the top of this page shows the version status. We will inform you of material changes by email.

You can find further legal information in our Terms of Service.