This English version is provided for convenience. In case of discrepancies, the Polish version shall prevail. Read in Polish (PL).
Data Controller.
The controller of personal data and operator of the yukata.ai platform is Social Kiwi sp. z o.o. (a Polish limited liability company), ul. Bukowińska 24A lok. 146, 02-703 Warsaw, Poland, National Court Register (KRS) No. 0000355206, Tax Identification Number (NIP) 5213563801. Contact for data matters: kontakt@yukata.ai.
What data we collect.
- Email address and one-time login codes (passwordless registration and login).
- First name, surname, and profile data that you enter yourself.
- Content you enter into the tools (Idea Validator, Decisions, Priorities) and posts in the community.
- Purchase and payment data (full card details are processed solely by the payment provider).
- Technical data (IP address, time, browser) for account security.
- Identifiers from analytics and marketing cookies, where you consent to them.
Purpose and legal basis.
- Providing the service and managing your account: performance of a contract (Article 6(1)(b) GDPR).
- Purchases, payments, invoices: performance of a contract and tax obligations (points (b) and (c)).
- Newsletter: consent (point (a)), which you can withdraw in a single click.
- Statistics and marketing (Google Analytics 4, Meta Pixel): consent given via the cookie banner (point (a)).
- Security, anti-fraud: the controller's legitimate interest (point (f)).
AI Tools.
The content you enter into the tools is processed by Claude models (Anthropic) within AWS Bedrock, with processing carried out in the European Union. Your content is not used to train the models. The outputs are of an auxiliary nature and do not constitute automated decision-making within the meaning of Article 22 GDPR.
Who we share data with.
- AWS (Frankfurt, EU): login, databases, files, email, AI models.
- Anthropic: Claude models within AWS Bedrock (EU).
- Skool (USA): community platform.
- Tpay (Poland): payment handling.
- Google (Analytics 4) and Meta (Pixel): statistics and advertising, subject to your consent.
- Cloudflare: protection against abuse.
- MailerLite (EEA): newsletter delivery.
- Fakturownia.pl (Poland): invoicing.
We do not sell your data. The use of Skool, Cloudflare and, subject to consent, Google and Meta may involve transfers of data to the USA, based on Standard Contractual Clauses (SCC) and the EU-US Data Privacy Framework.
Joint controllership with Meta.
With respect to the collection and transmission of data by the Meta Pixel (which is activated only after your consent), we and Meta Platforms Ireland Ltd. act as joint controllers within the meaning of Article 26 GDPR. We are responsible for the lawful collection of data and for obtaining consent; Meta is responsible for further processing for its own purposes. You may exercise your rights against either joint controller. Contact on our side: kontakt@yukata.ai.
Payments (Tpay).
Data provided during payment is transmitted to Krajowy Integrator Płatności S.A. (Tpay), which processes it as a separate controller on the basis of the payment services legislation. Its privacy notice is available at tpay.com.
How long we keep your data.
- Account and profile: until the account is deleted (then deleted within 30 days).
- The AI tools do not store your session content on the servers (session state lives in your browser). Idea Validator: only voluntarily submitted feedback, 30 days. Decisions: anonymous technical metadata without content, 90 days.
- Billing data and invoices: in accordance with tax regulations (as a rule, 5 years).
- Newsletter consent: until it is withdrawn.
Your rights.
- Access to your data, rectification, deletion of the account, restriction, and objection.
- Downloading all your data (Settings · Download my GDPR data).
- Withdrawal of consent (newsletter, cookies) at any time.
- Lodging a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO: the Polish Data Protection Authority), ul. Stawki 2, 00-193 Warsaw.
Cookies.
Essential cookies (login session, operation of the tools, storing your consent choices) are always active. Analytics cookies (Google Analytics 4) and marketing cookies (Meta Pixel) are activated only after you consent via the banner. Google Analytics operates in Consent Mode; the Meta Pixel does not load without acceptance. You can change your consent by clearing the site data in your browser.
Version 2.0. Effective from 13 June 2026.