Privacy Policy

Who handles your information

Agriculture Connect W.L.L., Kuwait, operates Thaka Ai and determines how its account features handle information. Use the official operator website for privacy requests. This policy describes the current Thaka implementation, not OpenAI’s independent services.

Information we use

Sign-in provides an account identifier, email and display name through the hosting authentication service. Our account database stores your identifier, display name, interface and study preferences, lesson attempts and results, saved recipes, saved questions, creation/update times and the version/time of terms acceptance. We do not ask for payment cards, identity documents or a date of birth. Hosting and security services may process technical request data such as IP address, browser details and error logs.

Purpose and lawful processing

We use account records to provide sign-in, save the items you request, display progress, enforce course prerequisites and record terms acceptance. Security and operational data help maintain the service, prevent abuse and address lawful obligations. Where a legal basis is required, processing must rely on the applicable service contract, legitimate interests assessed under local law, a legal obligation, or specific consent where required. Accepting the Terms is not consent to unrelated marketing or tracking.

Local documents, pictures and voice

PDF text and selected JPG/PNG pictures are processed in the browser and are not sent to Thaka’s account database. Unexported drafts may disappear when you reload or leave the site. A downloaded document remains on your device or wherever you save it. Selecting pictures does not grant access to the rest of your photo library.

Voice input starts only when you activate it and grant any required browser permission. Your browser’s speech service may process audio remotely. Thaka does not store audio recordings. Dictated text is saved to Thaka only when you use a save action. Browser translation may download a model or use provider processing; check your browser’s information.

Sharing and external services

We use hosting, authentication and database providers to operate the service, including Cloudflare-hosted account storage. They process necessary data under their applicable arrangements. When you open ChatGPT, choose what to send and review OpenAI’s privacy policy. We do not automatically import your chats. Account records are not intentionally made public or sold by Thaka. Disclosure may occur where legally required or lawfully necessary to address abuse, protect rights or respond to an authorised request.

Retention, export and deletion

Saved account items remain until you remove them, clear history or delete your Thaka data. My space provides a JSON export of all stored learning records, recipes and questions, not just the recent items displayed. Clear history removes progress, recipes and questions while keeping your profile. Delete Thaka data removes those records and the profile, then signs you out; your ChatGPT account is not deleted. Signing in again can create a new empty Thaka profile.

Deletion controls remove active application records. Provider security logs, backups or records subject to a lawful preservation duty may follow separate retention and deletion schedules. This site does not promise instant erasure from every provider system. Any legally retained information must be limited to the justified purpose and period.

Your rights and children

You can correct your display name and preferences, export records and use deletion controls. Depending on applicable law, you may also request access, correction, restriction, objection, portability, erasure or withdrawal of a specific consent, and complain to the competent authority. Identity checks must be proportionate; do not publish identity documents. Contact the operator for rights the self-service controls cannot resolve.

Do not create an account if you are under 13 or below a higher local minimum age. Under-18 users need parent or guardian permission. We do not knowingly seek children’s sensitive information. A guardian who believes a child used the service without the required permission should contact the operator to request review or deletion.

Security, international processing and updates

Account APIs use authenticated identity, ownership checks, validated inputs and same-origin write checks. These measures reduce risks but cannot guarantee absolute security. Service providers may process data outside your country; applicable transfer safeguards and notices must be assessed for current and future processing. We will update this policy for material changes and handle incidents and required notifications under applicable law.