Privacy Policy

This Privacy Policy describes how The KAB Group ("we," "us," "our") collects, uses, and shares information when you use Idea Flow AI ("Service"). By using the Service you consent to the practices described here.

We collect the following categories of information:

Account information: name, email address, password (stored as a salted hash).

Questionnaire data: your answers to the eight onboarding questions, including interests, technical skill level, hours available per week, startup budget, income goal, timeline, and working style.

Payment information: handled directly by Stripe, Inc. We do not store full credit card numbers. We retain the Stripe transaction ID and a record that a successful payment occurred.

Generated reports: the AI-produced business idea reports we generate for you.

Usage data: log information such as IP address, browser type, pages visited, and timestamps. We use this for security, debugging, and analytics.

We use your information to:

• (a) Generate and deliver your personalized report
• (b) Send transactional email (delivery, account, security)
• (c) Authenticate your account and prevent fraud
• (d) Improve the Service through aggregate analytics
• (e) Comply with legal obligations and respond to lawful requests

We do not sell your personal information to third parties for advertising purposes.

We share the minimum information necessary with the following service providers to operate the Service:

We retain your account information and reports for as long as your account is active, plus a reasonable period afterward to comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion at any time via support@ideaflowai.app, subject to records we are legally required to keep (e.g., transaction records under Indiana tax law).

Depending on where you reside, you may have the following rights with respect to your personal information:

• Right to access: request a copy of the personal information we hold about you.
• Right to correction: request that we correct inaccurate information.
• Right to deletion: request that we delete your personal information, subject to legal retention requirements.
• Right to data portability: request your information in a portable format.
• Right to opt out of sale: we do not sell personal information; this right is acknowledged regardless.

Indiana residents: under the Indiana Consumer Data Protection Act, effective January 1, 2026, Indiana residents have rights of access, correction, deletion, portability, and opt-out from targeted advertising and certain profiling. We do not engage in targeted advertising or profiling that produces legal or similarly significant effects.

California residents: under the California Consumer Privacy Act (CCPA) and related laws, you have rights to know, delete, correct, and opt-out of certain processing.

EU/UK residents: under the GDPR and UK GDPR, you have additional rights including the right to lodge a complaint with a supervisory authority.

To exercise any of these rights, contact us at support@ideaflowai.app. We will respond within 45 days as required by Indiana law (or sooner under other applicable laws).

We use functional cookies for authentication and to maintain your session while logged in. We do not use third-party advertising or tracking cookies. You may disable cookies in your browser, but doing so may prevent you from using parts of the Service that require login.

We use industry-standard security measures including encryption in transit (TLS), encryption at rest, salted password hashing, and access controls limiting employee access to your data. No system is perfectly secure, and we cannot guarantee absolute security. In the event of a data breach involving your personal information, we will notify affected users in accordance with applicable Indiana and U.S. federal law.

The Service is not directed to individuals under 18. We do not knowingly collect personal information from children under 18. If you believe we have collected information from a child, contact support@ideaflowai.app and we will delete it.

The Service is operated from the United States. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States, which may have different data protection laws than your country.

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated "Effective Date." Continued use of the Service after changes constitutes acceptance of the revised Policy.

For privacy-related questions, requests, or complaints, contact: