Legal
Privacy policy
How INNOVANDIA, SLU handles your data when you use Duokim and this website.
Draft pending validation. Text written by induSmart.digital; it must be reviewed by a lawyer and by INNOVANDIA, SLU, which will validate it in writing before launch. The Companies Register entry number is still missing.
Last updated: 12 November 2026
Who processes your data
INNOVANDIA, SLU (NRT L-721968-W), registered at Carrer Prat de la Creu, 77, AD500 Andorra la Vella (Principality of Andorra). For any privacy question, write to us at jepi@innovandia.com or from the contact page, choosing «Privacy and data».
What data we process
- Account: name, email address, language and preferences.
- Content from the tools you connect: emails, events, tasks, notes and contacts, only from the accounts you connect and only what you can already see.
- AI usage: the text Kim sends to the AI provider to prepare a suggestion, if you've given your consent, and the usage meter.
- Website forms: the data you enter in them (beta invite, contact).
- Technical data: IP address, browser and security logs.
What for and on what basis
| Purpose | Legal basis |
|---|---|
| Providing you with the Duokim service and the integrations you choose | The contract (the terms of use) |
| Using AI to prepare Kim's suggestions | Your consent, which you can withdraw whenever you want |
| Managing your beta invite and answering enquiries | Your consent, when you submit the form |
| Sending you Duokim news | Your consent, separate and optional |
| Protecting the service and the website | Legitimate interest in security |
| Complying with legal obligations | Legal obligation |
AI and your data
Kim only uses AI if you've given your consent. On the Free plan, Kim doesn't use AI. The AI models are from Anthropic; if you connect your own key, the provider is the one you choose.
We don't use your data to train general-purpose models. Kim can improve with anonymous, aggregated signals, never with your content. AI use policy.
Google data
Duokim's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google data is only used to provide the features you ask Duokim for; it is not sold, not used for advertising and not used to train general-purpose AI models.
Who we share it with
We don't sell your data or pass it on to third parties, except where required by law. It is processed on our behalf, under contract, by the providers on the list of sub-processors.
The main service runs in the European Union. If a provider is outside the European Economic Area or Andorra, the transfer is made with the safeguards required by law.
How long we keep it
For as long as you have an account. If you delete it, you have a 7-day grace period to undo it; after that it's erased, except for what the law requires us to keep. Delete your account.
Data from website forms, for as long as needed to handle them.
Your rights
You can request access, rectification, erasure, restriction and portability, object to processing, and withdraw your consent at any time. You can also export your data from the app.
We apply the European Union's General Data Protection Regulation (GDPR) and Andorra's Qualified Law 29/2021 on the protection of personal data. If you believe we haven't handled your request properly, you can complain to the Andorran Data Protection Agency (Agència Andorrana de Protecció de Dades) or to the data protection authority in your country.
Security
Encryption in transit, tool keys encrypted on the server, role-based access and activity logging. Security and privacy.
Changes
If we change this policy, we'll say so on this page with the version date, and we'll let you know if the change is significant.