Legal

Privacy Policy

Last updated: 27 September 2026

Short version: we keep what we need to run your robot projects — your account, your briefs and chats, the robots you upload, and your training results. Briefs, chats and task code are sent to AI model providers to do the work. We don't sell data, don't use advertising trackers, and host in Germany.

1. Scope

This policy explains how kualia.ai ("we") handles personal data when you visit kualia.ai or use the Studio. It complements our Terms of Service.

2. What we collect

Account. Name, email address, profile picture and linked Google or GitHub identifiers, provided through Clerk. We never see or store your password.

What you create. Skill briefs and the options you pick, messages to alia, uploaded robot models and assets (MJCF, URDF, meshes), generated task code and every task version, world layouts and project names.

Training data. Training runs and their settings, learning curves, evaluation results, recorded videos and MuJoCo trajectories, AI analyses, trained models and exported ONNX policies.

Usage and billing. Credit balance and transactions, actions such as starting a run, and feedback you send us.

Technical. IP address, browser type and request logs kept by our servers and network provider for security and debugging.

3. How we use it

  • to run the Studio: generate and check tasks, train and evaluate policies, render videos, show the 3D simulator and export policies;
  • to sign you in, keep your projects private to your account and account for credits and refunds;
  • to prevent abuse, keep the training sandbox safe and fix problems;
  • to send service emails (for example about your account) — no marketing email without your consent;
  • to meet legal obligations.

We rely on performing our contract with you, our legitimate interest in a secure service, your consent where required, and legal obligations.

4. AI processing

To write, check and change your training task, the Platform sends your skill brief, assistant messages, the current task code, a description of your robot and — for run analysis — training metrics and evaluation results to an AI model provider. Providers process this to return an answer under their API terms. We do not use your projects to train our own AI models, and we do not send your account details to AI providers. Avoid putting personal or confidential information in briefs or chat messages.

5. Service providers

We share data only with providers that help run the Platform, and only what they need:

ProviderPurposeData
ClerkSign-in and user managementName, email, profile image, linked Google/GitHub identifiers
AI model providers (e.g. Anthropic, Moonshot AI, Hetzner Inference)Writing and fixing task code, answering alia, analysing runsSkill briefs, chat messages, task code, robot descriptions, training metrics
Hetzner Online GmbH (Germany)Hosting, storage and training computeAll Platform data
CloudflareNetwork delivery and protectionIP address, request metadata
ResendTransactional emailEmail address, message content
Payment processor (when paid plans are purchased)BillingBilling details; we do not store full card numbers

We do not sell personal data. We may disclose data if required by law or to protect users and the Platform. Some providers may process data outside the EU; where they do, we rely on appropriate safeguards such as standard contractual clauses.

6. Storage and security

Platform data is stored on servers operated by Hetzner Online GmbH in Germany. Connections are encrypted, projects are only accessible to their owner, and task code runs in an isolated sandbox. No system is perfectly secure; if a breach affects your data we will inform you as required by law.

7. Retention

We keep your data while your account is active. If you delete your account or ask us to, we delete your personal data and projects within 30 days, except records we must keep by law (for example billing). Server logs are kept for a limited period for security. Anonymous, aggregated statistics may be kept longer.

8. Your rights

Depending on where you live, you can ask to access, correct, delete or export your data, object to or restrict processing, and withdraw consent. You can also complain to your data protection authority. Write to [email protected]; we answer within 30 days.

9. Cookies and browser storage

We use essential cookies for sign-in and sessions (managed by Clerk). The Studio stores small preferences in your browser — the light/dark theme and an unsent draft of a new trick — using local and session storage. We do not use advertising or cross-site tracking cookies.

To see how the site is used, we count page views ourselves, without cookies: each view records the page, the referring website, your country and device type, and a visitor code made from your IP address and browser that changes every day and cannot be turned back into either. We do not store your IP address for this, and we do not share these counts with anyone. Our network provider, Cloudflare, also reports aggregate traffic to us.

10. Children

The Platform is not intended for children under 16 and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.

11. Changes

We may update this policy as the Platform changes. Material changes will be announced on the Platform or by email before they take effect.

12. Contact

Privacy questions and requests: [email protected].