Privacy Policy

1. Who we are

BEUDRYT is operated by Klei Holdings (Nigeria), the data controller for the personal data described in this policy. You can reach us at abdulrahmanshamsudeen146@gmail.com.

BEUDRYT helps first-time founders test whether a business idea is worth pursuing, through five guided stages with AI feedback on their reasoning and written reports.

2. What we collect

• Account data: your email address, your name and your password (stored only as a hash by our authentication provider), plus sign-in timestamps.
• Onboarding answers: what you’re building, the stage you’re at, your idea in one line, who you think your customer is, what you’ve done so far and what you need help with.
• Stage answers: everything you write in the five stages, including follow-up answers, research notes and your Stage 4 real-world task, objective, deadline and outcome.
• AI feedback and reports: the feedback, follow-up questions and reports generated from your answers, and technical logs of each AI request (model, token counts, duration, success) used for cost control and rate limiting.
• Klei AI and Simulator: the questions you ask Klei AI and its answers, your Business Simulator runs (setup, decisions, outcomes and debriefs), and your credit balance and credit history. They are kept until you delete them or your account. Deep research answers send your question to Google Search via the Gemini API.
• Profile and onboarding details: your date of birth (kept private, used only to confirm you are 16 or over; we store an age range for personalisation), country, region, language, profession, experience level, goals, the decision you want help with and the time you can commit.
• Your evidence workspace: assumptions, evidence entries, links, experiments, results and decisions you record, and files you attach. Files are stored privately, malware-scanned (by Cloudmersive, which receives the file only to scan it) and only ever opened through short-lived private links.
• Support requests and notifications: messages you send us, with the account details we attach (plan, journey stage, page, browser), and the in-app notifications and emails we send you.
• Email preferences: whether you opted in to the weekly email or plan tips, and when. Optional emails are only sent with your opt-in and every one has an unsubscribe link.
• Payment records: the plan you bought, amount, currency, status, time and the payment provider’s reference. Card details never reach us — they are entered on and handled by Paystack, and we never see or store them.
• Analytics: product events (for example “signed up”, “stage completed”) and basic device and page information — only if you accept analytics cookies. We never send your answer text to analytics.
• Error logs: technical diagnostics when something breaks (error message, stack trace, page, browser), with personal data scrubbed.

3. Why we use it

• To create and secure your account and sign you in (performance of our contract with you).
• To run the five-stage process, generate AI feedback and produce your reports (contract).
• To take payment and give you access to paid features (contract, and legal obligations for records).
• To send transactional email: verification, password reset and the Stage 4 deadline reminder (contract).
• To keep the service secure, prevent abuse and fix errors (legitimate interests).
• To understand how the product is used, so we can improve it (your consent, via the cookie banner).

We do not sell your data, and we do not use it for advertising.

4. Who processes your data for us

• Supabase — database and authentication. Our project is hosted in the United States.
• Vercel — application hosting and delivery.
• Google (Gemini API) — generates the AI feedback on your answers. Your answers and the surrounding context are sent to Google for this purpose. Important: we currently use the free tier of the Gemini API, and on that tier Google may use the content submitted to improve its products, and that content may be reviewed by humans. Please do not enter confidential information, trade secrets you cannot risk sharing, or personal data about other people (for example the names, contact details or private circumstances of the people you interview). Describe them in general terms instead.
• Paystack — payment processing. You enter card details directly with Paystack; we receive only the outcome and a reference.
• PostHog (EU region) — product analytics, loaded and used only after you accept analytics cookies.
• Sentry — error tracking, with personal data scrubbed.
• Google Gmail (SMTP) — delivery of transactional and opt-in email.
• Cloudmersive — malware scanning of files you attach as evidence (when enabled).

Some of these providers are outside Nigeria and outside the EEA. Where personal data is transferred internationally, we rely on the providers’ standard contractual terms and their own compliance programmes. We may also disclose data where the law requires it.

No human at Klei Holdings reviews your answers as part of the product. All feedback is AI-generated.

5. How long we keep it

We keep your data until you delete it. There is no automatic expiry, because your journey is meant to be picked up again months later.

You can delete your account at any time from Settings. Deleting your account deletes your profile, onboarding answers, stage answers, AI feedback and reports. Payment records may be retained where accounting, tax or other law requires it, and backups and error logs age out on their normal cycle.

6. Your rights

Under the Nigeria Data Protection Act 2023 — and equivalent GDPR-style rights where they apply to you — you can ask us to:

• give you access to the personal data we hold about you, or a portable copy of it;
• correct data that is wrong or incomplete;
• delete your data (you can do this yourself from Settings);
• restrict or object to a particular use, including uses based on our legitimate interests;
• withdraw consent for analytics cookies at any time, without affecting anything done before;
• complain to the Nigeria Data Protection Commission, or your local supervisory authority.

Email abdulrahmanshamsudeen146@gmail.com and we will respond within one month.

7. Cookies

• Essential cookies keep you signed in and protect the forms you submit. They are required for the service to work and are set without consent.
• Analytics cookies (PostHog EU) are set only after you press Accept on the cookie banner. If you decline, or ignore the banner, analytics stays switched off and stores nothing on your device.

You can change your mind at any time with the Cookie settings link in the footer of any public page.

8. Security

Data is encrypted in transit. Every database table uses row-level security, so one account can never read another account’s data. Secrets are held in our hosting and database providers’ settings, never in our code. No system is perfectly secure, but we take this seriously and will tell you without undue delay if a breach affects your data.

9. Children

BEUDRYT is for people aged 16 and over. We check your date of birth at sign-up and do not create accounts for anyone younger; an under-16 date of birth is not stored. If you believe a child under 16 has given us data, email us and we will delete it.

10. Changes to this policy

If we change how we use your data we will update this page and the date above, and for significant changes we will tell you by email or in the app.

11. Contact

Klei Holdings, Nigeria — abdulrahmanshamsudeen146@gmail.com. See also our Terms of Service and the FAQ.