KIAM Institute is the professional growth platform for engineers. This notice explains what personal data we hold about you, why, who helps us process it and what you can do about it.
Who we are
KIAM Institute is run by [to be confirmed], [to be confirmed], Ireland. We are the controller of your personal data.
For anything about your data, email [to be confirmed]. We're a small business without a Data Protection Officer, so the founder handles privacy requests directly.
What we collect and why
We collect only what you give us, plus the minimum our systems need to keep the site running and secure.
| What | Why | Lawful basis |
|---|---|---|
| Waitlist: your email address, the role you pick (for example “Engineer” or “Recruiter”), the date you joined, when you agreed to emails and when you confirmed your address (we keep only a one-way hash of the confirmation link, for 48 hours) | To email you about the closed beta and launch | Your consent. You can withdraw it at any time with the unsubscribe link or by emailing us. |
| Account: your email address, when you signed up and when you last signed in | To create your account and sign you in with a one-time link or code, and to send account emails such as sign-in links | Contract: we need it to give you the service you asked for |
| Profile: your name, engineering discipline, years of experience and target role (all optional) | To tailor your FutureReady score, roadmap and course suggestions | Contract |
| FutureReady check before you sign in: the role you pick and your answers | Kept only in this browser tab (session storage) so you can see your result. Your answers stay in this tab and aren't sent to us until you choose to save them by signing in. They're deleted when you close the tab, leave the check or save them. | None needed, because they aren't sent to us. Once you save them, as for “FutureReady score” (Contract). |
| FutureReady score: your skill self-ratings (0 to 5 for each skill), the role you measure against, and a copy of each score you get | To calculate your score and show how it changes over time | Contract |
| Roadmap: your route (employed, going solo or both), time horizon, life goals you tick, the sector you'd like to build in, and the steps you add | To build and track your career roadmap | Contract |
| Course progress: which lessons you've completed and when | To save your place and show your progress | Contract |
| Score sharing setting: whether you've opted in to sharing your score with employers and recruiters (off by default) | To respect your choice when that feature opens | Your consent |
| Technical data: IP address, browser type, pages requested and error logs, held by our hosting providers, and, when you ask for a sign-in email, sign-in attempt fingerprints (keyed one-way hashes of your email address and IP address), kept for 24 hours to stop abuse | To run the site, keep it secure and fix faults | Our legitimate interest in a secure, working service |
We don't use analytics, advertising or tracking tools. We don't sell your data, and we never will.
Your FutureReady score
Your FutureReady score is self-assessed. It's calculated automatically from the ratings you give yourself against the skills a role expects. It's a guide for your own planning. We don't use it to make any decision about you, and nobody else uses it to make one.
Your score, skill ratings and roadmap are private by default. Only you can see them.
Later, we plan to let employers and recruiters see the scores of engineers who choose to share. That feature isn't live yet. When it is:
- Sharing stays off unless you turn it on.
- Before you opt in, we'll show you exactly what an employer would see.
- You can turn it off at any time, and they stop seeing your score.
Who processes your data for us
We use a small number of providers. Each acts only on our instructions under a data processing agreement.
| Provider | What they do |
|---|---|
| Supabase | Database and sign-in. Stores your account, profile, score, roadmap, progress and the waitlist. Sends sign-in emails today. |
| Vercel | Hosts the website and runs the code that handles your requests. Keeps short-lived request logs. |
| Cloudflare (Turnstile) | Checks that sign-in and waitlist requests come from a person, not a bot. Sees your IP address and browser details. |
| Resend (planned) | Will send our emails once we switch to it. We'll update this notice before that happens. |
We only share your data with anyone else if the law requires us to.
Where your data is stored
Our database is hosted by Supabase and the code that handles your data runs on Vercel. Where they run: [to be confirmed].
Supabase and Vercel (and Cloudflare, for the sign-in and waitlist check) are US companies, and their support or security teams may access data from outside the EU and UK. Where that happens, the transfer is protected by the European Commission's Standard Contractual Clauses in their data processing agreements, or by the EU-US Data Privacy Framework where the provider is certified. Email us for a copy of the relevant safeguards.
How long we keep it
These periods are our current proposal and may change before launch. We'll update this notice if they do.
| Data | How long |
|---|---|
| Waitlist | Until 12 months after launch, unless you create an account. Sooner if you unsubscribe. |
| Unconfirmed waitlist sign-ups | Deleted 7 days after the confirmation link expires |
| Your account and everything in it | While your account is active. If you don't sign in for 24 months, we'll email you, then delete the account if you don't respond. |
| Score history | As long as your account, so you can see your progress. Deleting your account deletes it. |
| Sign-in attempt records | 24 hours |
| Technical logs | [to be confirmed], the default on our providers' plans. |
When you delete your account, your profile, score, ratings, roadmap and progress are deleted with it.
Your rights
Under the GDPR (and the UK GDPR if you're in the UK), you can:
- Access your data and get a copy of it.
- Export it in a machine-readable format (portability).
- Correct it. You can edit your profile yourself at any time.
- Delete it, including your whole account.
- Restrict or object to how we use it, including our use based on legitimate interests.
- Withdraw consent at any time, for the waitlist or for score sharing. This doesn't affect anything we did before you withdrew.
There's no self-service export or delete button yet. Until there is, email [to be confirmed] from the address on your account and say what you'd like. We may ask you to confirm the request from that address so we know it's you. We'll respond within one month. If a request is complex, we may need up to two more months. If so, we'll tell you why within the first month. It's free.
Complaints
If you're unhappy with how we handle your data, please tell us first so we can put it right.
You can also complain to a regulator:
- Ireland and the EU: the Data Protection Commission, dataprotection.ie
- UK: the Information Commissioner's Office (ICO), ico.org.uk
Cookies
We only use cookies that are strictly necessary for the site to work, so we don't ask for cookie consent.
| Cookie | What it does | How long |
|---|---|---|
sb-…-auth-token | Keeps you signed in (Supabase) | Until you sign out, or up to 400 days |
site_access | Remembers that you entered the preview password while the site is private | 30 days |
Children
KIAM Institute is for working engineers and isn't meant for anyone under 16. We don't knowingly collect data from children. If you think a child has given us their data, email us and we'll delete it.
Changes to this notice
If we change how we use your data, we'll update this page and the date at the top. If the change matters to you, such as a new provider or a new use, we'll email you before it takes effect.