Privacy Policy

Welcome to Kumi, operated by Kumiai Inc. ("we," "us," or "our"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile application, and services (collectively, the "Service").

By using Kumi, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use the Service.

2.1 Information You Provide

• Account Information: Name, email address, username, password, and profile information
• Learning Data: Your progress, performance, preferences, study goals, and interactions with learning content
• Communication: Information you provide when contacting us for support, feedback, or inquiries
• Payment Information: Billing details and payment method, processed securely by third-party payment processors. We do not store or process full payment card information on our servers.

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, time spent, interaction patterns
• Device Information: Device type, operating system, browser type, IP address, unique device identifiers
• Analytics: We use PostHog and similar analytics tools to understand how users interact with our Service
• Cookies: We use cookies and similar tracking technologies (see Section 8)

We use your information to:

• Provide, maintain, and improve the Service
• Personalize your learning experience using adaptive algorithms and AI-assisted systems based on your interactions and progress
• Track your progress and adapt content to your proficiency level
• Process payments and manage subscriptions
• Send service-related updates, notifications, and educational content
• Respond to comments, questions, and support requests
• Analyze usage patterns to improve our systems and learning models
• Detect, prevent, and address technical issues, abuse, and fraudulent activity
• Comply with legal and regulatory obligations

We do not sell your personal information.

We may share your information only in the following circumstances:

• Service Providers: Third-party vendors who perform services on our behalf (hosting, analytics, payment processing, customer support)
• Legal Requirements: When required by law, subpoena, court order, or legal process
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly authorize us to share information
• Aggregate Data: Anonymized or aggregated data that cannot reasonably identify you

We retain personal information for as long as necessary to provide the Service and fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

When you delete your account, we will delete or anonymize your personal information within a reasonable period, typically within 90 days, except where retention is required for legal, accounting, or security purposes.

Depending on your jurisdiction, you may have the following rights:

• Access: Request access to your personal information
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal information
• Portability: Request a copy of your data in a portable format
• Opt-Out: Opt out of marketing communications
• Objection: Object to certain types of processing

To exercise these rights, contact us at privacy@kumiai.io.

We implement appropriate technical and organizational safeguards to protect personal information, including:

• Encryption of data in transit and at rest
• Access controls and authentication requirements
• Regular security reviews and updates
• Secure cloud infrastructure and hosting providers

However, no method of transmission over the internet or electronic storage is completely secure. While we take reasonable steps to protect your information, we cannot guarantee absolute security.

We use cookies, web beacons, and similar technologies to operate and improve the Service.

Types of cookies we use include:

• Essential Cookies: Required for core functionality
• Analytics Cookies: Help us understand how users interact with the Service
• Preference Cookies: Remember your settings and preferences

You may manage or disable non-essential cookies through your browser settings or, where available, our cookie preference controls. Disabling cookies may limit certain features of the Service.

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

Third-party services we use may include:

• PostHog (analytics)
• Payment processors (subscription and billing management)
• Cloud hosting providers
• Email and notification service providers

We do not use analytics data for advertising purposes or sell analytics data to third parties.

The Service is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13.

If you believe we may have collected personal information from a child under 13, please contact us at privacy@kumiai.io, and we will take appropriate steps to delete the information.

Your information may be transferred to and processed in countries other than your country of residence, including the United States.

Where required by law, we implement appropriate safeguards, such as standard contractual clauses, to protect personal data during international transfers.

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal information we collect and how it is used
• The right to request deletion of personal information
• The right to opt out of the sale of personal information (we do not sell personal information)
• The right to non-discrimination for exercising your privacy rights

If you are located in the European Economic Area (EEA) or the United Kingdom, you have rights under the General Data Protection Regulation (GDPR), including those listed in Section 6.

Our legal bases for processing personal data include:

• Performance of a contract (providing the Service)
• Legitimate interests (improving the Service, security, and fraud prevention)
• Your consent, where required
• Compliance with legal obligations

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page.

Your continued use of the Service after changes become effective constitutes acceptance of the revised Privacy Policy.

If you have questions, concerns, or requests regarding this Privacy Policy, please contact us: