Legal

Privacy Policy

Last updated: September 6, 2026

This Privacy Policy explains how Kalu Kode ("we," "us," or "our") collects, uses, and shares information when you use Bamba, our research workspace hosted on Cloudflare.

1. Information we collect

Account information

When you sign up or sign in (via Better Auth), we process information such as your email address, name or display name, password hash or auth provider identifiers, and session data needed to keep you signed in.

Research workspace content

You may upload or create project context, topic folders, prompts, reports, syntheses, inference rules, and Encrypted Research Vault artifacts (including .md resources and other project-scoped files). Markdown research records are stored in Cloudflare R2 with relational metadata in Cloudflare D1.

Share-link activity

If you mint a hashed share link for a report, we store a hash of the token (not the raw secret in recoverable form for lookup abuse), expiry/revocation state, and limited access metadata such as access counts and last-accessed timestamps.

Technical and usage data

Like most web apps, Cloudflare and our Workers may process IP address, user agent, request timing, and similar telemetry required to operate, secure, and debug the service. Theme preference may be stored locally in your browser.

2. How we use information

We use information to:

  • provide, maintain, and secure your Bamba workspace;
  • authenticate sessions and send account-related messages (for example password reset email);
  • store and serve your Markdown and vault artifacts as you direct;
  • honor share links you create and revoke;
  • monitor reliability, prevent abuse, and improve the product;
  • comply with legal obligations when required.

We do not sell your personal information. We do not use your research content to train third-party foundation models.

3. Encryption and the Research Vault

Vault packages are encrypted with AES-256-GCM envelopes bound to your account and resource scope before durable storage. Encryption reduces exposure of vault payloads at rest; account access, share links you create, and operational metadata remain part of how the product works. Ordinary Markdown reports you keep in the research library are stored so you can inspect and review them in the product.

4. Sharing and processors

We rely on infrastructure providers to run Bamba—primarily Cloudflare (Workers, R2, D1, and related edge services). They process data on our instructions to host and deliver the service. We may also disclose information if required by law, to protect rights and safety, or in connection with a reorganization of Kalu Kode, with appropriate safeguards.

Public share links expose the specific report you choose to share to anyone who has the link. Revoke links when they are no longer needed.

5. Retention

We keep account and workspace data while your account is active and as needed to operate the service. You can delete projects, reports, vault artifacts, and share links from the product. If you want your account removed, contact us via kalukode.com. Residual backups or logs may persist for a limited period for security and continuity.

6. Your choices

  • Update account profile details in the app.
  • Delete or export content you control in the workspace.
  • Revoke share links at any time.
  • Request account deletion by contacting Kalu Kode through kalukode.com.

7. Children

Bamba is not directed to children under 16, and we do not knowingly collect personal information from them.

8. International processing

Bamba runs on Cloudflare's global network. Your information may be processed in regions where Cloudflare operates. By using the service, you understand that processing may occur outside your home country, subject to applicable law.

9. Changes

We may update this Privacy Policy and will revise the "Last updated" date when we do. Continued use of Bamba after an update means you acknowledge the revised policy.

10. Contact

Privacy questions: kalukode.com.

← HomeTerms of Service