Privacy Policy
The short version
Kuma is a personal expense-logging app operated by Andrew Yang, an independent developer. We collect the information needed to record your expenses and show them back to you. We do not sell your data, show ads, or use your data to build an advertising profile.
What we collect
We collect your email address and account identifier to sign you in. If you choose Sign in with Apple or Google, those providers send us the account information they make available for authentication, which may include an Apple private-relay email address. We store the messages you send Kuma, the resulting expense details (amount, merchant, category, and note), your conversation history, corrections, and timestamps. We also process limited technical and diagnostic information, such as app version, device and operating-system details, request metadata, and crash or error reports, to keep the service secure and reliable. We do not request your location, contacts, photos, health data, or advertising identifiers.
How we use your data
We use your information to authenticate you, turn what you type into a structured expense, provide your ledger and summaries, respond to support requests, prevent abuse, and diagnose and fix problems. To parse a message and prepare Kuma’s reply, we send the text of that message to our AI processing provider, DeepSeek. We do not use your information for advertising or sell it to data brokers.
Who we share it with
We share information only with providers that help operate Kuma and only as needed for their work: Supabase for authentication and the database; DeepSeek for AI message processing; Google Cloud for hosting the backend; Sentry for crash and error monitoring; Resend for account emails; and Cloudflare Turnstile to help prevent automated abuse. Apple and Google process sign-in information when you choose their sign-in options. These providers process information under their own terms and privacy policies. We do not sell or rent your data to anyone.
Keeping and deleting your data
We keep your account and expense data while your account is active. You can delete your account at any time from the Account screen, under “Delete account.” We remove your expenses, profile, conversations, corrections, and related active-service data when the deletion is processed, then remove your sign-in identity. A temporary service failure may delay completion while we retry it. Limited security logs and backup copies can remain in our providers’ systems until their normal retention cycles expire; they are not used to restore your account. Account deletion is permanent and cannot be undone.
Your choices
You can correct an expense in the app or delete your account from the Account screen. To ask for access to, correction of, or deletion of your personal information, or to ask a privacy question, email andrewyyang.ai@gmail.com. We may need to verify that a request is associated with your account before acting on it.
Security
We use managed infrastructure, authenticated account access, and access controls designed to keep one user’s ledger separate from another’s. No method of electronic storage or transmission is completely secure, but we work to protect the information we hold.
Children
Kuma is not directed to children under 13 (or the minimum age required where you live), and we do not knowingly collect their data.
Changes to this policy
If we change this policy, we will update the effective date above and, for significant changes, tell you in the app.
Contact
Questions about your privacy? Reach us at andrewyyang.ai@gmail.com.