Last updated: 10 October 2026 · See also the Terms of Service

In short

• We keep what you give us to run Kuukan: your account, what you make, and what you say in it. We don't sell it, and we don't use it for advertising.
• No ads, no tracking cookies, no analytics that follow you around.
• Some of what you make is public on purpose: public spaces, your profile, and your name on the items you add.
• You can download your data and delete your account yourself, in User settings → Account.
• We use other companies to host the service, store files, send email, take payments and run AI features. They are named below.

1. Who is responsible

Kuukan is operated by Moving Points Company Oy (Finnish business ID 3454125-1, Finland), which is the controller of the personal data described here. Contact us at support@kuukan.space. We have not appointed a data protection officer; write to the same address about anything in this policy.

2. What we collect

Your account. Username, email address and password (stored only as a one-way hash). If you sign in with Google, we receive your Google account ID, email address and name. Accounts linked through Discord or Slack keep that service's user ID. We also keep your email verification state, whether your account is part of a team, and, if a moderator has acted, the suspension record.

Your profile, if you fill it in. First and last name, profile picture, bio, links, avatar and its accessories, and your home space. Your level, experience points and achievements come from using Kuukan.

What you make and share. Spaces and everything in them: items, text, files, images, videos and 3D models, plus comments, reactions, votes, messages in space chats, direct messages, saved presets and your 3D model library. Each item records who made it and who last changed it.

How you use Kuukan.

• Your avatar's position and cursor while you are in a space.
• Your online status and which space you are in, shown only to people you are connected with (unless you turn on invisible mode).
• Who you follow and who follows you, your bookmarks and recently visited spaces.
• What you have already seen in each space, your notifications and your notification settings, including your time zone.

Technical data.

• Your IP address, to limit how often sign-in, sign-up, password reset, feedback and report requests can be made from one address. This record expires within an hour.
• The IP address an item was created from, which stays with the item for security and to help us respond to abuse or legal requests. It is never shown to other people.
• Your browser's user agent (browser and device type) when you send feedback, report something or turn on push notifications.
• Our hosting provider's server logs, which record requests and errors.

Payments. If you buy a plan or AI credits, payment is handled by Stripe. Stripe receives your email address, name, and the billing address and card details you enter at checkout. We store only Stripe's customer and subscription IDs, your plan, the amounts and payment status. We never see your card number.

AI usage. When you use AI features, we record which provider was used and what it cost, to charge AI credits. If you add your own API key for an AI provider or for Miro, it is stored encrypted.

Your own AI, if you connect one. You can connect an AI assistant you use yourself (for example Claude or ChatGPT) under Settings → AI. It then reads and changes your spaces as you, with your permissions. For this we keep:

• The connection: its name, what it may do (read only, or read and change), when it was made and last used, and for apps that signed in through Kuukan, the app's name and the address it returns to. Access keys are stored only as one-way hashes.
• A record of each change your AI makes (what it changed, before and after), so you or your AI can take it back.
• Notes your AI chooses to keep between sessions, and your messages with it in Your AI.
• While a Kuukan tab is open: which space you have open, the part of it on your screen and what you have selected, so your AI can work where you are. This is held only in memory, for at most ten minutes after the tab goes quiet, and is never stored.

When your AI asks to see your screen, Kuukan sends it a picture of your own open tab. When your AI uploads a file, it is stored like any file you upload.

Feedback and reports. What you write, the page you were on, your browser's user agent, and your email address if you sent it without signing in.

We don't collect your date of birth, phone number or home address. We don't ask for, and you shouldn't upload, sensitive information about yourself or others.

3. Why we use it, and on what legal basis

• To provide Kuukan — your account, your spaces, syncing what you make in real time, messages, notifications, AI features and integrations you ask for, and the emails the service needs (verification, password reset, invites). Legal basis: performance of our contract with you (Art. 6(1)(b) GDPR).
• To keep Kuukan safe and working — rate limits, the creator IP on items, server logs, error reports, handling reports from users, and keeping the name of a deleted account so no one else can take it over. Legal basis: our legitimate interest in security and in preventing abuse and impersonation (Art. 6(1)(f)).
• Payments and bookkeeping — taking payments, and keeping payment and credit records as accounting law requires. Legal basis: contract (Art. 6(1)(b)) and legal obligation (Art. 6(1)(c)).
• Push notifications — only after you allow them in your browser. Legal basis: your consent (Art. 6(1)(a)), which you can withdraw at any time in your browser or in Kuukan's notification settings.

We don't sell personal data, show advertising, or train AI models on your content.

4. Who can see what

• Spaces. A public space can be seen by anyone, including people who are not signed in. An unlisted space can be seen by anyone with its link. A private or team space can be seen only by the people let in.
• Your name on your work. People who can see a space can see your username on the items, comments and messages you add there. People who can see a space's history can see earlier versions of its items for 30 days.
• Your profile is public. Anyone can see your username, profile picture, bio, links, level, follower counts and your public spaces, and your first and last name if you have added them. Leave the name fields empty if you don't want your name shown.
• Presence. People in the same space see your avatar and cursor. Your online status is shown only to people you are connected with. Invisible mode hides it.
• Activity. People who follow you can see in their feed when you create or comment in public spaces.
• Your AI at work. People in a space see your AI's figure, with your name on it, where it is working, and what it changes or says there is marked “via AI”. Invisible mode, or a space where visitors are kept apart, shows the figure only to you.
• Files. Files in your own spaces are stored at web addresses that are long and hard to guess, and anyone who has the address can open the file. Files in team spaces are kept in separate private storage.
• Photo metadata. An image may be stored as you uploaded it, including any metadata such as the location where a photo was taken. Remove location data before uploading if you don't want to share it.
• Search engines and link previews. Links to public spaces and profiles show a preview (name, picture, short description) when shared, and public pages can be found by search engines.

5. The companies that help us

These providers process personal data for us, each only for its own part of the service:

• Railway — hosting the application and its server logs.
• MongoDB (Atlas) — the database.
• Cloudflare — storage and delivery of uploaded files (R2), database backups, and the relay that carries voice calls between participants.
• GitHub — runs the nightly database backup job.
• Resend — sending email (verification, password reset, invites).
• Stripe — payments and invoices.
• Sentry — error reports, when error monitoring is on. Reports describe what went wrong; they don't include your name or email address.
• Google — Google sign-in and the Google Drive picker, if you use them. Google's sign-in script is loaded on our pages.
• AI providers, only when you use an AI feature, receiving what that feature sends: Anthropic (the AI assistant and AI items: your prompts, the conversation so far, and any images, PDFs or files you include), OpenRouter (the same, if that route is selected), Replicate (AI image generation: prompts and input images), Meshy (3D generation: a prompt or image), Hugging Face (one 3D option sends your image to a public research model hosted there), and DuckDuckGo (web search queries the assistant makes). If you use your own API key, that provider's terms between you and them apply.
• GIPHY — searches for GIFs and stickers. The images load from GIPHY directly.
• Discord and Slack — only for spaces linked to a Discord channel or a Slack workspace. Messages posted there (the author's display name and ID, the text and attachments) are copied into Kuukan, and messages written in Kuukan (your username and the text) are posted there.
• Miro — only if you import a Miro board with your Miro token.
• Jitsi (meet.ffmuc.net) — video calls in Meet items.
• Your browser's push service (Google, Apple, Mozilla or Microsoft, depending on your browser) — delivers push notifications you have allowed.

Your own AI is not one of our providers. If you connect an AI assistant of your own, what it reads in Kuukan goes to the company that runs it (for example Anthropic or OpenAI), because you asked it to. That is between you and that company, under your agreement with them. We don't choose it or pay it, and we can't control what it keeps. You can end its access at any time in Settings → AI.

When your browser loads Kuukan, it also fetches fonts and code libraries from Google Fonts, jsDelivr, unpkg, cdnjs, SheetJS and Simple Icons, and these services see your IP address when it does. Videos, designs and other embeds you or others add to a space (YouTube, Vimeo, Figma, Spotify and similar) load from those services.

6. Transfers outside the EU

Several of these providers are based in, or process data in, the United States or other countries outside the European Economic Area. Where that happens, the transfer relies on the European Commission's adequacy decision for the EU–US Data Privacy Framework, for providers certified under it, or on the Commission's standard contractual clauses in the provider's data processing terms.

7. How long we keep it

• Your account and profile — until you delete your account.
• Deleted items — 30 days in the Trash, then permanently deleted with their files. A deleted space is deleted at once, with everything in it.
• Messages — until they are deleted, or until your account is deleted. A deleted message's words and attachments are erased at once; the conversation keeps a “Message deleted” line in its place, showing who and when.
• Earlier versions of items (edit history) — 30 days.
• Notifications — the 50 most recent.
• IP addresses for rate limits — up to one hour. Creator IP on an item — as long as the item exists, and removed when you delete your account.
• Your own AI — a connection lasts until you end it (a key made by hand expires after a year; an app that signed in renews its access hourly and loses it after 90 days unused). The record of changes it made — 30 days. Its notes — until you delete them in Settings → AI, or delete your account. Your messages with it are kept like other messages.
• Records of AI tasks — 30 days. AI usage, credit and payment records — as long as Finnish accounting law requires (up to 10 years for some records).
• Feedback and reports — as long as we need them to handle the matter; your email address is removed from feedback if you delete your account.
• Database backups — 30 days, then deleted. Data you delete leaves our backups within that time.
• Server logs — a limited time set by our hosting provider.
• Sign-in — a login stays valid for up to 7 days. Verification codes expire after 7 days and password reset links after 30 minutes.
• Accounts whose verification email bounced — removed after an hour.

When you delete your account, we delete your spaces and everything in them, the items you made in other people's spaces, your files, your messages (sent and received), your 3D library and presets, your comments, reactions and votes, your follows and notifications, and your AI connections with their notes and records of changes. The edit history and reports that mention you are anonymised. Three things remain: items you made in a team's spaces stay with that team, without your IP address; payment, credit and AI usage records stay for bookkeeping; and your username is kept, so no one else can register it and inherit what was addressed to it. Your customer record at Stripe stays with Stripe, which keeps payment records under its own legal obligations; ask us if you want it removed where the law allows. You can't delete your account while you own a team with other members or have an active subscription; you'll be told what to do first.

8. Cookies and local storage

We set one cookie, kuukan_media. It lasts one hour and lets your browser load the files you have access to. It is strictly necessary for the service, so it needs no consent. We don't use advertising or tracking cookies.

Kuukan also keeps some things in your browser's local and session storage: your sign-in (in local storage if you choose to stay signed in, otherwise only for the session), your settings, passwords you've entered for password-protected spaces, and the state of the interface. A service worker caches the offline page and files shared to Kuukan from other apps, and shows push notifications. Signing out or clearing your browser data removes these.

9. Your rights

Under the GDPR you have the right to:

• access your data and get a copy. User settings → Account → Download my data gives you your profile, spaces, items, messages, 3D library, presets and the notes your AI keeps as a file. Ask us for anything else we hold about you.
• correct it. Most of it you can change yourself in your settings.
• delete it. Use User settings → Account → Delete Account, or ask us.
• restrict or object to processing based on our legitimate interests.
• data portability. The download is a machine-readable JSON file.
• withdraw consent at any time, for example by turning push notifications off.

Write to support@kuukan.space and we will answer within one month. You also have the right to lodge a complaint with a supervisory authority. In Finland that is the Office of the Data Protection Ombudsman (tietosuoja.fi).

10. Security

Connections to Kuukan are encrypted (HTTPS). Passwords are stored only as salted hashes, and API keys you add are encrypted. Access to every space is checked on the server, and team files are kept in separate private storage. No system is perfectly secure; if a breach puts your data at risk, we will tell you and the supervisory authority as the law requires.

11. Children

Kuukan is not meant for children under 16, and you must be at least 16 to create an account. If you believe a child under 16 has given us personal data, contact us and we will delete it.

12. Automated decisions

We don't make decisions about you by automated means that have legal or similarly significant effects. A few things happen automatically to keep the service working: rate limits, removing accounts whose verification email bounced, and blocking usernames that are reserved or taken. Suspensions are decided by people.

13. Changes to this policy

When we change this policy, we update the date at the top. If a change affects how we use your data in a significant way, we will tell you in Kuukan or by email before it takes effect.

14. Contact

Moving Points Company Oy · support@kuukan.space