Last updated: June 2026
Kuza Collective Ltd — Nairobi, Kenya
Fieldnotes is a knowledge platform operated by Kuza Collective Ltd, a company registered in Kenya. We turn research papers and source material into structured, audio-first knowledge experiences. This Privacy Policy explains how we collect, use, and protect your personal data. For all privacy enquiries, contact us at hello@kuza.io.
We collect the following categories of personal data: (a) Account information — your name, email address, and (if using email/password sign-up) a hashed password. (b) Google account information — if you sign in with Google, we receive your name, email address, and profile picture from Google, as authorised by you during the OAuth consent flow. We do not receive or store your Google password. (c) Usage data — topics you search, Fieldnotes you generate, documents you upload, and features you use. (d) Payment information — billing details processed securely by Stripe. We never store card numbers or CVVs on our servers. (e) Technical data — IP address, browser type, operating system, and device identifiers, collected to maintain service security and performance.
When you choose to sign in with Google, Fieldnotes requests access only to your basic profile information: your name, email address, and profile photo (OAuth scopes: openid, email, profile). We use this data solely to create and identify your Fieldnotes account and to personalise your experience. We do not use Google user data to serve advertising. We do not share Google user data with third parties except as strictly necessary to provide the Fieldnotes service. We do not use Google user data for any purpose beyond the features you explicitly use. Our use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.
We use your personal data to: (a) create and manage your Fieldnotes account; (b) deliver, operate, and improve the Fieldnotes service; (c) send transactional emails — account confirmation, Fieldnote ready notifications, and subscription receipts; (d) manage your subscription and process payments; (e) analyse aggregate usage patterns to improve the product (using anonymised or aggregated data where possible); (f) comply with legal obligations and enforce our Terms of Service. We do not sell your personal data to any third party.
We process your personal data on the following legal bases: (a) Contract — processing necessary to provide the Fieldnotes service you have signed up for. (b) Legitimate interests — improving our product, preventing fraud, and ensuring platform security. (c) Consent — for optional analytics cookies and marketing communications, which you may withdraw at any time. (d) Legal obligation — where we are required to retain or disclose data by applicable law.
We share your data with trusted third-party service providers only to the extent necessary to deliver Fieldnotes. These include: (a) Supabase — secure database and authentication infrastructure. (b) Stripe — payment processing (PCI-DSS compliant). (c) Google — sign-in authentication via Google OAuth. (d) AI providers (e.g., OpenAI) — text synthesis for generating Fieldnote content. Prompts may include your search queries; we do not send your personal profile data. (e) Audio generation providers — for text-to-speech audio production. (f) Email service provider — transactional email delivery. All processors are bound by data processing agreements and are prohibited from using your data for their own purposes.
We use: (a) Essential cookies — required for authentication sessions and core service functionality; these cannot be disabled. (b) Analytics cookies — optional cookies that help us understand how users interact with Fieldnotes. You can accept or decline these via our cookie consent banner. We use no third-party advertising or tracking cookies.
We retain your personal data for as long as your account is active or as needed to provide the service. If you request account deletion, we will delete your personal data within 30 days, except where we are required to retain it for legal, regulatory, or financial compliance purposes (e.g., transaction records). Anonymised or aggregated data may be retained indefinitely.
You have the following rights regarding your personal data: (a) Access — request a copy of the data we hold about you. (b) Correction — request that inaccurate data be corrected. (c) Erasure — request deletion of your personal data. (d) Restriction — request that we limit how we process your data. (e) Portability — receive your data in a structured, machine-readable format. (f) Objection — object to processing based on legitimate interests. (g) Withdraw consent — for any processing based on consent, you may withdraw at any time without affecting prior processing. To exercise any of these rights, email hello@kuza.io. We will respond within 30 days.
We implement industry-standard security measures to protect your data, including: TLS/HTTPS encryption for all data in transit; encrypted storage at rest; Row Level Security (RLS) in our database ensuring users can only access their own data; regular security reviews; and strict internal access controls. In the event of a data breach that poses a risk to your rights, we will notify affected users without undue delay.
Your data may be processed outside of Kenya by our third-party service providers. Where this occurs, we ensure appropriate safeguards are in place, including standard contractual clauses and reliance on providers' compliance frameworks.
Fieldnotes is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If we become aware that we have inadvertently collected such data, we will delete it promptly. If you believe a child has provided us with personal information, please contact us at hello@kuza.io.
Kuza Collective Ltd may update this Privacy Policy from time to time. We will notify you of material changes by email or via an in-app notice at least 14 days before they take effect. Continued use of Fieldnotes after the effective date constitutes your acceptance of the updated policy.
For questions, requests, or complaints about this Privacy Policy or our data practices, contact us at hello@kuza.io. Kuza Collective Ltd is registered in Kenya. If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Data Protection Commissioner of Kenya (odpc.go.ke).
Cookie preferences
We use essential cookies to make Fieldnotes work. We'd also like to use analytics cookies to improve your experience.