KunjaniAI Ltd
Company No. 217829 - Republic of Mauritius
Last Updated: 10 September 2026 · Effective Date: 24 March 2026
KunjaniAI Ltd (Company No. 217829), a private company limited by shares incorporated in the Republic of Mauritius, trading as Kunjani (“Kunjani,” “we,” “us,” or “our”), is committed to protecting your privacy and personal data.
This Privacy Policy explains how we collect, use, process, store, and disclose personal data when you use the Kunjani platform, delivered through WhatsApp, Microsoft Teams, our web applications (including kunjani.co and play.kunjani.co), and related services (collectively, the “Service”).
Kunjani is part of a group of companies with operations in Mauritius, South Africa, and the United Kingdom. This Privacy Policy should be read together with our Terms and Conditions and Acceptable Use Policy.
Kunjani LTD publishes and provides the Kunjani service through Microsoft Teams, supported by other Kunjani group companies where applicable. An existing signed customer agreement identifying another provider continues to govern that relationship unless amended. The customer organisation normally determines the purposes of learner-data processing; the company providing the service processes that data on its instructions. Separate account, billing, support and security processing is described by its applicable purpose and company role.
Kunjani processes personal data in compliance with the Data Protection Act 2017 of Mauritius (“DPA 2017”).
Where we process personal data of individuals in the European Economic Area, we also comply with the General Data Protection Regulation (“GDPR”). Where we process personal information of individuals in South Africa, we also comply with the Protection of Personal Information Act (“POPIA”).
We process personal data only where we have a lawful basis to do so under the DPA 2017, Section 28. Our lawful bases include:
When you create an account, register for a subscription, or use the Service, we may collect: your name, email address, phone number, job title and organisation, username and password, and payment information (for Paid Subscriptions).
When you interact with the Service, we collect: responses to training activities (including text, voice notes, photos, and videos), performance data and assessment results, usage data (such as activity completion, engagement metrics, and timestamps), and messages exchanged through the platform.
We automatically collect: device and browser information, IP addresses, usage analytics and log data, and information collected through cookies and similar technologies.
If you register using a third-party service (such as Google or Microsoft), we may receive basic profile information from that service in accordance with its privacy policy and your authorisation.
We use personal data to: provide and operate the Service, including delivering training activities and generating learner feedback; process payments and manage subscriptions; communicate with you about your account, service updates, and support requests; generate performance analytics and reports for Clients; improve the Service through aggregated usage analysis; comply with legal obligations; and, with your consent, send marketing communications (you may opt out at any time).
The Service uses artificial intelligence to provide automated feedback on learner responses, generate content suggestions, and produce performance analytics. This involves automated processing of User Content, including text, voice, photo, and video submissions.
Important:Kunjani's AI features provide learning feedback and performance information. The Service is not intended to make decisions that produce legal effects or similarly significant effects on individuals without human involvement.
You have the right to request human review of any AI-generated assessment or feedback. To exercise this right, contact us at info@kunjani.co.
We do not sell personal data or use it to train AI models for unrelated purposes. AI processing is limited to providing and improving the Service.
Kunjani offers an optional connector (a Model Context Protocol, or “MCP,” server) that lets you use a third-party AI assistant, such as Claude or ChatGPT, to view and build your Kunjani training content. The connector is off until you explicitly enable it and authorise it.
When you connect an AI assistant, it can, on your instruction and within the permissions you grant: list the decks your account can see; and create or update decks, learning outcomes, and activities in your account. The connector accesses only data your account is already authorised to access; it grants no additional access. Your authentication credential (an OAuth grant or a personal API token) is passed through to the Kunjani service to perform the action you requested and is not used to build any separate profile of you.
Content you send to, or receive from, the third-party AI assistant is also processed by that assistant's provider under that provider's own privacy terms, which are outside Kunjani's control. Review the privacy terms of the assistant you connect.
You can disconnect at any time by revoking the connector's authorisation or deleting the API token in your Kunjani account settings. Revoking access stops all further connector activity immediately.
We may disclose personal data to:
We do not sell personal data to third parties. We do not share identifiable personal data with third parties for their own marketing purposes.
KunjaniAI Ltd is based in Mauritius. Your personal data may be transferred to and processed in countries other than your country of residence, including South Africa, the United Kingdom, and other countries where our hosting providers and service providers operate.
Where personal data is transferred outside Mauritius, we ensure that appropriate safeguards are in place in accordance with the DPA 2017, Part VI. Where personal data of EEA residents is transferred outside the EEA, we ensure compliance with GDPR Chapter V, including the use of standard contractual clauses or other approved transfer mechanisms. Where personal data of South African residents is transferred outside South Africa, we comply with POPIA Section 72.
We retain personal data for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. When personal data is no longer required, we will securely delete or de-identify it in accordance with DPA 2017, Section 27.
Specific retention periods: account data is retained for the duration of your account and for 12 months after termination; training activity data and performance records are retained for the duration of the Client's subscription and for 12 months thereafter, unless a longer period is agreed; and payment records are retained for the period required by applicable tax and financial legislation.
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction, as required by DPA 2017, Section 31. These measures include encryption of data in transit and at rest, access controls, regular security assessments, and incident response procedures.
No method of transmission or storage is completely secure. If you believe your account or data has been compromised, please contact us immediately at info@kunjani.co.
In the event of a personal data breach, we will notify the Data Protection Commissioner of Mauritius as required by DPA 2017, Section 25, without undue delay. Where the breach is likely to result in a high risk to the rights and freedoms of data subjects, we will also notify affected individuals as required by DPA 2017, Section 26.
Where the breach involves personal data of EEA residents, we will also notify the relevant supervisory authority under GDPR Article 33 within 72 hours of becoming aware of the breach. Where the breach involves personal information of South African residents, we will notify the Information Regulator and affected data subjects as required by POPIA Section 22.
Under the DPA 2017 and, where applicable, GDPR and POPIA, you have the following rights regarding your personal data:
To exercise any of these rights, please contact us using the details in Section 15. We will respond to your request within a reasonable period. You also have the right to lodge a complaint with the Data Protection Commissioner of Mauritius.
When you request access to our investment deck, we collect your name, email address, optional investor type, and viewing activity to understand investor interest and inform follow-up. Activity includes slides viewed, approximate visible viewing time, repeat visits, device category, and approximate country. A browser cookie remembers your access for 90 days. Details are stored using Cloudflare and are available only to authorised administrators. Contact info@kunjani.co to request deletion.
Our web applications use cookies and similar technologies to ensure functionality, remember your preferences, and analyse usage. We categorise cookies as: strictly necessary cookies (required for the Service to function); functional cookies (to remember your preferences and settings); and analytics cookies (to understand how the Service is used and to improve it).
We obtain your consent before placing non-essential cookies, in accordance with the DPA 2017. You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Service.
The Service is not directed at individuals under the age of 18. Where a Client uses the Service for training that involves individuals under 18, the Client is responsible for ensuring that appropriate parental or guardian consent is obtained in accordance with the DPA 2017, Section 30, and any other applicable legislation. We do not knowingly market to individuals under 18.
For the Microsoft Teams service: Kunjani LTD. Contact: info@kunjani.co.
Group company: KunjaniAI Ltd
Company No.: 217829
Address: 88 Coastal Rd, Riambel, Savanna, Mauritius
Email: info@kunjani.co
If you are not satisfied with our response to a privacy-related request, you have the right to lodge a complaint with:
For South African residents, you may also lodge a complaint with the Information Regulator (inforegulator.org.za). For EEA residents, you may lodge a complaint with your local supervisory authority.
Please do not submit sensitive personal data (such as national identity numbers, health information, or biometric data) through the Service unless specifically required by a training activity and authorised by your Client organisation. Where sensitive personal data is processed, we apply additional safeguards in accordance with DPA 2017, Section 29.
We may update this Privacy Policy from time to time. Where changes are material, we will notify you at least 30 days before the updated policy takes effect, either through the Service or by email. The “Last Updated” date at the top of this policy indicates the most recent revision.