Effective 10 October 2026 · Kuma AI Store
Privacy notice
Effective date and operator
Effective date: 10 October 2026. Kuma is operated by Kuma AI Store, Bengaluru, Karnataka 560035, India. Privacy and grievance contact: hello@getkuma.in. This notice covers the services described below as they become available; not every feature is available at launch.
What Kuma does
Kuma is building a fashion and accessories shopping assistant and waitlist experience, initially focused on India. People in other regions may join. Radar is a shared AI-assisted editorial digest, not an individually personalized recommendation service.
Information we collect
When real account services are enabled, we collect your email, authentication-provider identifier, verification status, waitlist membership, referral attribution, votes, subscription preferences and consent records. Do not submit payment information to the waitlist. Google sign-in should request only the identity information needed to authenticate you, not access to your inbox.
Anonymous usage analytics
By default, we collect anonymous, aggregate usage analytics: page and interaction events, a temporary session identifier (not tied to your account unless you sign up in the same session), campaign/source tags, recognized referring-site categories, referral-link presence, coarse browser/device type and approximate country inferred by hosting infrastructure. We do not collect region or city-level location. We do not store full referring URLs, search terms or referral codes in the analytics event store. Where available, the session may be linked to a signup request to measure verification and task completion. Our analytics event store does not retain raw IP addresses or full user-agent strings. Hosting and security providers may process IP addresses in their infrastructure logs. We do not fingerprint devices or install an external advertising analytics SDK. You can turn this off at any time using the on-page control; turning it off does not affect your waitlist membership.
Why information is used
We use account data to run the waitlist, prevent duplicate rewards, administer referrals and polls, deliver requested services, respond to support requests and protect the service. Anonymous analytics helps us understand discovery and engagement in aggregate; it is not used to profile individuals. We use marketing preferences to send only the communications you choose. We do not sell personal information.
Email choices and measurement
Sign-in messages are necessary when you request email authentication. Weekly Drop announcements and Radar require separate marketing choices. You can unsubscribe without losing your waitlist membership. Email delivery, bounce, complaint and, where enabled and disclosed, open/click events are processed through Resend. Opens and clicks may be affected by privacy proxies and scanners; they are not precise measures of individual behavior.
Referrals and visibility
A referral link contains a random code rather than your email. We record qualifying referral relationships to award queue movement and deter abuse. An inviter should see aggregate progress, not the referred person's full email. Queue actions and fraud corrections may affect other members' positions.
Storage and providers
Our selected service providers are Vercel for hosting, Supabase for database/authentication/storage, and Resend for email delivery. These providers may process information outside India, subject to applicable law and appropriate contractual safeguards. We use AI services to prepare generic editorial content, not to process personal account or contact lists for that purpose. We will update this notice if our practices materially change.
Retention
Our daily cleanup removes anonymous analytics events older than 90 days, email engagement events older than 180 days, and unverified signup requests older than 30 days. Signup-to-session links are removed after 90 days. Active account, consent and reward records are kept as needed to provide the service. After a deletion request, we remove or de-identify records within the applicable operational/legal timeframe, retaining only information required for legal obligations or justified fraud prevention. Backup copies expire according to our provider backup schedules.
Your choices, rights and grievances
You can turn anonymous analytics off using the on-page control and unsubscribe from marketing messages. Contact hello@getkuma.in to request access, correction, erasure, consent withdrawal or grievance review, subject to applicable law and proportionate identity verification. Include the email associated with your account and a description of your request, but never your password or sign-in link. We will acknowledge and address requests within applicable legal time limits. Withdrawal does not invalidate earlier permitted processing. You retain any applicable right to approach a competent authority or use statutory grievance mechanisms.
Age and security
The initial service is for adults aged 18 or older. We do not intentionally collect children's personal information. Contact us if a child has submitted information. We use access controls and appropriate technical safeguards, but no system is completely secure. Do not send passwords or sign-in links to support.
Changes and contact
Material changes will be described in an updated notice and, where appropriate, communicated directly. For privacy, grievances or support, email hello@getkuma.in. Operator: Kuma AI Store, Bengaluru, Karnataka 560035, India.