Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how Canarie ("we", "our", or "us") collects, uses, retains, and protects personal data of users ("you" or "your") in accordance with the Personal Data Protection Act B.E. 2562 (PDPA) of Thailand.

By accessing or using our website or application, you acknowledge and agree to the terms of this Policy and consent to the processing of your personal data as outlined herein.

2. Categories of Personal Data Collected

We may collect the following categories of personal data from you, either directly through account registration or indirectly through your use of the platform:

2.1 Account and Identity Data

• Email address (if linked for registration or communication)
• Age
• Gender

2.2 Usage and Behavioral Data

• Information about how you use the platform, such as time spent, interaction logs, pages visited, and features accessed

2.3 Survey Data

• Responses and feedback provided via user surveys

2.4 AI Interaction Data

• Textual input and interaction logs from conversations or engagement with AI systems within the platform

2.5 Exercise and Activity Data

• Data regarding any fitness-related activities recorded through platform features

We do not collect sensitive personal data (e.g., religious beliefs, health conditions, biometric data) unless explicitly required and with your prior consent.

3. Purpose of Collection and Use of Personal Data

We collect and process your personal data for the following specific and lawful purposes:

1. To operate and maintain the Canarie platform
2. To improve the platform based on user feedback, behavioral analytics, and feature usage
3. To customize your experience and personalize content
4. To analyze trends and develop new platform features through user surveys
5. To evaluate engagement with fitness and AI components
6. To ensure security, integrity, and technical efficiency of the platform

Your personal data will be used only to the extent necessary to fulfill these purposes and in accordance with applicable law.

4. Legal Basis for Processing

We rely on your consent as the primary legal basis for collecting and processing your personal data. In some cases, processing may also be based on:

• Our legitimate interests in operating, maintaining, and improving the platform
• The performance of a contract or provision of a requested service
• Compliance with applicable legal obligations

You have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

5. Data Retention Period

We retain personal data only for as long as is necessary to fulfill the purposes for which it was collected. Specifically:

• Personal data will be retained until a major version upgrade of the platform (e.g., from version 1.0 to 2.0), at which time such data will be deleted or anonymized.
• Minor version updates (e.g., version 1.0 to 1.1) will not trigger data deletion.
• During the retention period, data may be used for aggregated or pseudonymized analytics to support platform development.

6. Data Security and Storage

All collected personal data is stored securely and is accessible only by authorized members of the Canarie team (“Team Canarie”). We implement appropriate technical and organizational measures to:

• Prevent unauthorized access, use, or disclosure
• Ensure the integrity and confidentiality of personal data
• Maintain system availability and reliability

We conduct internal reviews and security audits periodically to ensure data protection standards are upheld.

7. Disclosure of Personal Data

We do not disclose your personal data to any third party, except in the following limited circumstances:

• With your explicit and informed consent
• When required by applicable laws, regulations, or legal process
• In connection with internal development activities by Team Canarie only

No personal data will be shared with third parties for marketing, advertising, or profiling purposes.

8. International Data Transfers

At present, all personal data is stored and processed within the Kingdom of Thailand. If data needs to be transferred outside of Thailand in the future, such transfer will be conducted in full compliance with the PDPA, including the implementation of appropriate safeguards.

9. Your Rights under the PDPA

You have the following rights under the Personal Data Protection Act:

We will respond to all legitimate requests within a reasonable time frame and in accordance with applicable legal requirements.

10. Contact Information

If you have any questions regarding this Policy or wish to exercise your rights, please contact:

Team Canarie (Canarie Platform)

Email: canarie-support@cmkl.ac.th

11. Consent

By registering for and using the Canarie platform, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy and expressly consent to the collection, use, and processing of your personal data as described above.

You may withdraw your consent at any time by contacting us through the details provided.