This privacy notice for Kume ("we," "us," or "our"), describes how and why we might collect, store, use, and/or share ("process") your information when you use our services ("Services"), such as when you:
- Download and use our mobile application (Kume), or any other application of ours that links to this privacy notice
- Engage with us in other related ways, including any sales, marketing, or events
Questions or concerns? Reading this privacy notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at fabio@echoforge.to.
Summary of Key Points
What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us and the Services, the choices you make, and the products and features you use.
Do we process any sensitive personal information? We may process sensitive personal information when necessary with your consent or as otherwise permitted by applicable law (e.g., precise geolocation for trip planning).
Do we collect any information from third parties? We do not collect any information from third parties.
How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.
In what situations and with which parties do we share personal information? We may share information in specific situations and with specific third parties (e.g., OpenAI for itinerary generation, Google Places for location data, PostHog for analytics, and Singular for ad attribution).
How do we keep your information safe? We have organizational and technical processes and procedures in place to protect your personal information.
What are your rights? Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information.
How do you exercise your rights? The easiest way to exercise your rights is by contacting us at fabio@echoforge.to. We will consider and act upon any request in accordance with applicable data protection laws.
1. What Information Do We Collect?
Personal information you disclose to us
In Short: We collect personal information that you provide to us.
We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, or otherwise when you contact us.
Personal Information Provided by You. The personal information we collect may include names, phone numbers, email addresses, usernames, and passwords.
Sensitive Information. When necessary, with your consent, we process the following categories of sensitive information:
- Mobile Device Access: We may request access or permission to certain features from your mobile device, including your mobile device's camera, gallery, and location features.
- Mobile Device Data: We automatically collect device information (such as your mobile device ID, model, and manufacturer), operating system, and system configuration information.
- Push Notifications: We may request to send you push notifications regarding your account or certain features of the application.
Usage Data & Analytics
We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as:
- Events Tracked: app_opened, auth_started, auth_completed (via email, Apple, Google), onboarding transitions (started, completed, personalization_explained_viewed), paywall interactions (viewed, cta_tapped, plan_selected), subscription events (started, purchased), trip generation (started, complete), map interactions (destination_clicked, search_conducted, directions_opened), and engagement (favorite_added/removed/viewed).
- Revenue Events: Currency, amount, subscription tier, and purchase date.
- User Properties: User UUID, authentication method, app version, and device OS details.
2. How Do We Process Your Information?
In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.
- To facilitate account creation and authentication: We may process your information so you can create and log in to your account, as well as keep your account in working order.
- To generate AI itineraries: We process your travel preferences and location data using OpenAI to provide personalized trip plans.
- To provide location services: We process geolocation data using Google Places API to show you relevant attractions, hotels, and restaurants.
- To manage subscriptions: We process payment status and entitlement data via RevenueCat to manage your premium features.
- To protect our Services: We may process your information as part of our efforts to keep our Services safe and secure.
3. What Legal Bases Do We Rely On?
We only process your personal information when we believe it is necessary and we have a valid legal reason to do so under applicable law, such as with your consent, to provide you with Services, or to fulfill our legitimate business interests.
5. Analytics & Ad Attribution
PostHog (Product Analytics)
We use PostHog to understand how users interact with Kume, including app usage patterns, feature engagement, and onboarding flow. PostHog collects event data with properties like app version, device type, and user actions.
PostHog Privacy Policy
Singular (Mobile Measurement Partner)
We use Singular to measure the effectiveness of our advertising campaigns and track user acquisition sources. Singular collects:
- App install attribution (which ads led to installs)
- SKAdNetwork data (Apple's privacy-preserving attribution on iOS)
- Deep linking (campaign tracking)
- Uninstall tracking (measuring app uninstalls)
- Revenue attribution (linking revenue events to ad campaigns)
- Device signals (IP address, IDFA if user granted ATT permission)
Analytics & Account Deletion: When you delete your Kume account, your profile and trip data are permanently removed from our active database. However, event history in PostHog and Singular may be retained according to their data retention policies. You can contact them directly to request full data deletion from their systems.
7. How Long Do We Keep Your Information?
We keep your information for as long as necessary to fulfill the purposes outlined in this privacy notice unless otherwise required by law. No purpose in this notice will require us keeping your personal information for longer than the period of time in which users have an account with us.
8. How Do We Keep Your Information Safe?
We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, no electronic transmission over the internet can be guaranteed to be 100% secure.
9. Children's Privacy
Our service is not directed to children under 13 years of age. We do not knowingly collect any data from children under 13. If you are under 13, please do not use Kume.
10. What Are Your Privacy Rights?
You may review, change, or terminate your account at any time. You can request deletion of your account and all associated data directly within the Kume app settings. Once you delete your account, your personal data will be permanently removed from our active databases.
11. How Can You Contact Us About This Notice?
If you have questions or comments about this notice, you may email us at fabio@echoforge.to or by post to: EchoForge (attn: Fabio), Jakarta, Indonesia.
12. How Can You Review, Update, Or Delete Data?
Based on the applicable laws of your country, you may have the right to request access to the personal information we collect from you, change that information, or delete it. To request to review, update, or delete your personal information, please submit a request to fabio@echoforge.to or use the "Delete Account" feature in the app settings.