Privacy Policy

Last updated: 27 September 2026. Checkout is not open to the public yet. This page describes the checkout we are preparing.

Who we are

Kitewise is operated by AJ Hunt Ventures Pte Ltd, a company registered in Singapore and a wholly owned subsidiary of AJ Hunt Holdings Pte Ltd. We are the seller for your purchase and the company responsible for the small amount of data we hold about you. When we say "we" or "us," that's who we mean.

• Company: AJ Hunt Ventures Pte Ltd
• Company number: UEN 202637695R, Singapore
• Email: hello@getkitewise.com

What we collect

• Your email address, if you give it to us: to send you your access code, whether you asked for a free kit or bought one, and to send your receipt if you paid. There are no accounts or passwords; you open the kit with the access code we email you.
• What you type when you set up your kit: a first name or a nickname, your age band (bands from 16 to 17 up to 50 or over, or you can choose not to say), where you are right now (for example job hunting, in school, or just started a job), and, if you want to fill it in, the kind of role you are aiming for. As the tools are built today all of that stays in your browser on your own device and never reaches us.
• Your work in the tools: practice answers, scripts you build and checkpoint responses. As the tools are built today we do not collect any of this. It is saved in your own browser on your own device. If we ever change that, we will tell you clearly in advance and will not apply the change to anything already on your device without first getting your explicit opt-in consent.
• Purchase info: the kit is $29 USD, paid once, and while checkout is switched off it is free. If you asked for a free kit we keep the address you asked from and the record of the code we issued, and there is no payment record at all because there was no payment. When checkout opens, PayPal processes the payment and holds the payment details. We never see or store a card number. We keep the PayPal order and capture references, the amount, the currency, the email address PayPal gives us for the payer, and the checkout confirmations: that the buyer said they are 18 or older, whether the kit is a gift, and if so that they said the person who will use it is 16 or older, with the policy version and the time. We do not collect a date of birth, and we do not email the person a gift is for. Those confirmations are not a check that we have verified anyone's age. We also keep the access code for that purchase as a scrambled hash plus its last four characters. Until the email provider accepts the message, we also keep an encrypted copy of the code so a retry sends the same code. After they accept it, we delete that copy. We cannot send the original code again from the hash. If the email is lost after that, we issue a new code. We keep this so we can check a code you type, find your purchase if you write in for help, and switch off the code for that purchase after a completed full refund, refunds that add up to the full amount, or a completed reversal. An open dispute does not switch it off.
• Web server logs, and checking your code: as the site runs today, the server that sends you these pages keeps ordinary request logs: which address was requested, when, the browser you used, and the IP address the request came from. When you enter your access code, the service that checks it also counts recent tries against the IP address they came from, for a short window, so that nobody can sit there guessing codes. We use both to keep the site up and to look into problems. We do not use them to build a picture of you, and we do not combine them with anything else.
• Analytics on the marketing pages: we measure visits to our marketing pages using Plausible, described in full below. We run no analytics at all inside the four tools or on the free quiz, so nothing you do in them is measured.
• An access check when a kit page opens: your browser asks our service whether your code is still active before a protected tool is sent. A signed access token sits in a Secure, HttpOnly cookie, which means the tool's JavaScript cannot read or change it. The check carries that token and ordinary request information, never anything you wrote in a tool. We record the most recent successful check against your code record so we can investigate access problems. We do not use it for anything else.

Analytics, in full

Plausible Analytics is our analytics provider, and it is one of the three outside companies that receive anything at all from your side of Kitewise. The other two are PayPal, which handles the payment when checkout is open, and Resend, which carries our email. It runs on our marketing pages only, never in the four tools and never on the free quiz. It sets no cookies. Plausible states that its service does not track people across other sites and does not store IP addresses, and we do not receive your IP address from it.

When you open a marketing page, Plausible receives:

• The address of the page you are on, and the full address of the page that sent you there, including anything after the question mark in that link.
• Your browser, your operating system and your device type, and an approximate country, worked out from your IP address at the moment of the visit.
• How long the page stayed open, and how far down the page you scrolled.
• A short list of events we ask it to record: clicking a checkout button, clicking a button that asks for a kit, and completing the request form. Each one records which button was pressed, not who pressed it, and never anything you typed.

We use this to see which pages are worth keeping and which ones confuse people. If we ever add analytics anywhere else, including inside the four tools or the quiz, we will say so here in advance and will not switch it on without first getting your explicit opt-in consent.

What we don't do

We don't sell your data and we don't run advertising trackers. As the tools are built today we could not share what you write even if asked, because it never reaches us: it stays in your own browser.

Ally View

Ally View is not built yet. As the tools are built today there is no way to show anyone anything: nothing you write in the tools leaves your device. If we build it, you turn it on, you choose which windows are open, and you switch it off in one tap. Interview practice would show rep counts and how much support the tool is still giving, never your answers or your feedback. What you write in the Disclosure Decider can never be shared through it. Any other window you open, such as goals, strengths or first 90 days check-ins, would show the words you typed in it.

Sensitive topics

Some tools touch personal territory, for example, thinking through what to share with an employer. What you write there is yours. We don't analyze it for any purpose other than making the tool respond to you, and it's never included in Ally View.

If you're 16 or 17

You can use the kit at 16. We collect the same minimal information and treat it the same careful way. Buying is different, because buying is a contract: a parent or guardian buys the kit and agrees to the terms on your behalf. Checkout asks them to confirm they are 18 or older and that you are 16 or older. We do not collect a date of birth. After that the kit is yours. As the tools are built today, what you write is saved on your own device and we never hold it, so there is nothing we could hand to anyone else, including the person who paid, even if we were asked.

If you're under 16

The kit is for people 16 and over, so please don't set one up yet, and please don't have one bought for you. The free disclosure quiz is a different thing: it runs entirely inside the page, it saves nothing on your device, and nothing you answer reaches us. It has no age check, so anyone can read it. The one part of that page we ask you to skip is the email box. If we find we are holding an email address that belongs to someone under 16, we delete it.

Where your data lives

What you write in the tools lives on your own device. As the tools are built today, all of it is saved in your browser's local storage and never reaches us, so there is nothing for us to host and nothing for us to move between countries.

The rest is small and it sits with the companies named above. We run Kitewise from Singapore. PayPal holds the payment details when checkout is open. Resend carries our email. Plausible holds the visit counts. Our web server keeps its request logs. Each of those runs on its own systems in the countries it operates in, which for these providers includes the United States and the European Union. If we change providers in a way that matters, we will update this page.

Your rights

As the tools are built today, we hold very little about you: your email address if you gave us one, the purchase record and access code described above, and ordinary web server logs. PayPal holds its own record of the payment. Email hello@getkitewise.com and we will send you a copy of that or delete it, within 30 days, except purchase records we are legally required to keep. Everything you write inside the tools lives in your own browser, so it is yours to export or delete from the settings screen at any time, and we could not reach it even if you asked us to. Nothing here removes any data protection or consumer right you have under the law where you live.

Email

We use your email address for two things: to send you your access code, and to find your code record again if you write to us about it. If you paid, we also use it to send your receipt and to tell you if something you bought changes.

Your access code is sent to you through Resend, our email provider, and your address is stored next to the record of the code we issued so we can find it again if you write in. There is no separate marketing list behind it. If the request form is not running on the page you are looking at, it gives you a plain email link instead, and that reaches the same inbox. If we ever want to use your address for anything else, including news or product updates, we will tell you clearly in advance and will not do it without first getting your explicit opt-in consent. You can ask us to delete your address at any time.

Changes

If we change this policy in a way that matters, we'll email you before it takes effect.