Privacy Policy

Kumkum Studio
Last updated: February 2026

Kumkum Studio ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application Kuration ("Kuration" or "Kumkum"), our website kumkumstudio.com ("Website"), and related services (collectively, the "Services"). It is written with regard to applicable data protection law, including the General Data Protection Regulation (GDPR) where it applies.

1. Data controller

The controller of your personal data in connection with the Services is Kumkum Studio.

If you wish to contact us about the processing of your personal data, please email: privacy@kumkumstudio.com or use the contact details on our Website.

2. Your rights

Depending on your location, you may have the right to:

To exercise these rights, contact us at privacy@kumkumstudio.com.

3. What data we collect and why

We collect and use information as follows, depending on how you use the Services.

3.1 Using the Kuration app (free and paid features)

PurposeWhat we processLegal basisRetention
Providing the app (browse art, stories, audio, collections, identification) Account data (e.g. email; profile from Google/Apple if you use sign-in); usage data (views, listens, tier); device type/OS as needed Contract (Art. 6(1)(b) GDPR) or equivalent Duration of use and, where applicable, until the end of the period in which claims can be asserted
Art identification (camera or upload) On-device: image crop for recognition. We do not store your photos. We may process a derived vector (embedding) sent to our servers only to match artwork in our database. Contract / legitimate interest (Art. 6(1)(b)/(f) GDPR) Vectors used only for the search request; not retained as your image
Synced collections and favorites (Premium) Collection names, artwork references, favorites linked to your account Contract (Art. 6(1)(b) GDPR) Until you delete the data or close your account, plus any claim period required by law
In-app purchases and subscriptions Transaction and subscription status (via app store); we do not store full payment card details Contract (Art. 6(1)(b) GDPR) As required for billing, refunds, and legal obligations
Support and communication; legal claims Messages and contact details you provide; data necessary for claims Contract or legitimate interest (Art. 6(1)(b)/(f) GDPR) Until the matter is closed and any claim period; claims until limitation period ends

If you do not provide data necessary for a given feature (e.g. account for synced collections), that feature will not be available.

3.2 Advertising in the app

For users on tiers that see ads (e.g. Guest and Freemium), we or our partners may collect and use data to show non-personalised or contextual ads and to measure ad performance. We do not use the app to build advertising profiles about children. See "Third-party services and recipients" below for more detail.

3.3 Visiting the website (kumkumstudio.com)

PurposeWhat we processLegal basisRetention
Running the website and improving it e.g. IP address, browser type, pages visited, referring URL Legitimate interest (Art. 6(1)(f) GDPR) or consent where required As needed for operation and, if applicable, per cookie/analytics policy
Contact or feedback forms Name, email, message content Contract or legitimate interest (Art. 6(1)(b)/(f) GDPR) Until the request is resolved and any claim period

4. Children's privacy

Our Services are designed to be family-friendly. We do not require children to provide personal information to use the core features of Kuration (e.g. browsing art and stories as a guest). We do not knowingly collect data from children under 13 for targeted advertising. Parents or guardians may contact us at privacy@kumkumstudio.com to request access, correction, or deletion of a child's information.

5. Data security

We implement appropriate technical and organisational measures to protect your personal data. Communication with our servers uses encryption (e.g. TLS). No transmission over the internet is completely secure; we cannot guarantee absolute security.

6. Cookies and similar technologies

Our Website may use cookies and similar technologies to: keep your session and preferences; understand how the site is used (analytics); and comply with consent choices. You can control or delete cookies via your browser settings. Blocking cookies may affect site functionality.

PurposeTypical retentionFunction
Session / essentialSession or shortNecessary for the site to function
AnalyticsAs per tool (e.g. up to 14 months)Understanding usage and improving the site
Consent / preferencesAs set (e.g. 6–12 months)Storing your consent and preferences

7. Third-party services and data recipients

We use external providers who process data on our instructions (processors) or, where relevant, as independent controllers:

ActivityRecipients / servicesTransfer outside EU/EEA
Authentication, database, backendSupabase and FirebaseMay include US; we rely on adequacy or appropriate safeguards
Hosting, storage, CDNe.g. Cloudflare, hosting providerAs per provider; we ensure appropriate safeguards where required
Audio and AI (e.g. narration, translation)e.g. Google (TTS, Gemini)May include US; we rely on adequacy or appropriate safeguards
Advertising in the appAd network(s) used in KurationMay include US; we use partners that comply with applicable rules
Analytics (website); contact / supportAnalytics provider(s); email or support tool providerAs per provider

We do not sell your personal information. We may disclose data where required by law or to protect our rights and safety.

8. International transfers

Where we transfer your personal data to countries outside the European Economic Area (EEA), we ensure an adequate level of protection by relying on an adequacy decision, standard contractual clauses (SCCs), or certification schemes (e.g. Data Privacy Framework for US recipients) where applicable. You may request more detail on the safeguards we use by contacting privacy@kumkumstudio.com.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will post the new version on this page and update the "Last updated" date. For material changes, we may notify you in the app or by email where appropriate. Continued use of the Services after the change constitutes acceptance of the updated policy where permitted by law.

10. Contact

For privacy-related requests, questions, or complaints:

For general or legal inquiries, see our Terms of Service or the contact details provided there.