Privacy Policy
KUMIO ("KUMIO", "we", "us", "our") is a personal memory app powered by artificial intelligence (AI). It is operated by Telivia LLC, a Florida limited liability company, which is responsible for your personal information under this policy.
This policy explains what we collect, why we collect it, who we share it with, how long we keep it, and the choices and rights you have. It applies to the KUMIO apps for iPhone and Android, the website kumioapp.com, and our emails.
Contact: support@kumioapp.com · Telivia LLC, Lakewood Ranch, Florida
1. The short version
You save memories (text, voice, photos, emails, imports) so KUMIO can help you remember them later. To answer your questions, KUMIO sends your memory content and questions to AI providers (OpenAI, and Anthropic as a backup for Ask). We only do this after you give clear consent, and you can withdraw that consent in Settings at any time. We do not sell your personal information, we do not share it for targeted advertising, and we do not use your memories for ads. We do not let our AI providers use your data to train their models (see Section 5). You can delete your account and all your data from inside the app. KUMIO is not therapy, not a medical service and not an emergency service (see Section 9).
2. Information we collect
| Category | What it includes | Where it comes from |
|---|---|---|
| Account information | Email address, name (if you or Apple/Google share it), a sign-in identifier from Apple or Google, sign-in codes sent by email. If you use "Hide My Email" with Apple, we receive a relay address. We never see your Apple or Google password. | You, Apple, Google |
| Your memories | Text you type, photos you add, voice notes (the original audio recording and its text transcript), emails you forward to your KUMIO inbox, content you import, and any details you add (dates, tags, places). | You |
| Conversations with KUMIO | Questions you ask (Ask), Chat messages, text transcripts of Talk voice conversations (the Talk audio itself is not stored), and the AI's answers. | You, our AI providers |
| AI-derived data | "Embeddings" (numerical representations of your content used for search), AI-generated answers, summaries and selections for Moments. | Created by us and our AI providers from your content |
| Reminders and birthdays | Reminder text and times; names and birthdays of people you choose to save. | You |
| Trusted contact | The name and contact details of a trusted person you choose for the safety feature (Section 9). | You |
| Purchases and usage limits | Plan, trial status, renewal status, purchase history, Talk-minute balances (plan minutes and purchased packs) and usage, free-memory count, offers shown. We never receive your card or bank details. | Apple, Google, RevenueCat, our servers |
| Device and push data | Push notification token, device type, operating system and app version, language and time zone. | Your device, OneSignal, Customer.io |
| Diagnostics | Crash and error reports (device model, OS, app version, the error and where it happened). We configure these reports to exclude memory content. | Your device, Sentry |
| Usage information | Basic in-app events, such as which onboarding and subscription screens were viewed, used to improve the app and measure subscription offers. These events contain no memory content. | Your device, PostHog, RevenueCat |
| Email information | Whether our emails were delivered, opened or bounced, and your marketing email choice. | Postmark |
| Support messages | What you write to support@kumioapp.com. | You |
| Safety signal | An anonymous count of how often the crisis check is triggered. It is not linked to your account and contains no content. | Our servers |
Sensitive information. Your memories may include sensitive things, such as health, finances, religion, relationships or other people's personal details. We only use this information to provide the service to you, as described here. We do not use it to infer things about you for advertising or profiling.
Information about other people. If you save information about other people (for example, a friend's birthday or a photo of family), please only do so if you have a right to. We use it only to provide KUMIO to you.
What we do not collect. We do not collect your phone number, your contacts list, your precise location in the background, or voiceprints.
Website trial. The public trial on kumioapp.com works without an account. It stores the name, memory and reminder you enter (and a voice recording if you use voice) only so the trial can answer you, and deletes them 24 hours after the trial session. We use Cloudflare Turnstile to check that visitors are human; Cloudflare processes technical data about the visit for that check. If you later create an account and enter the trial's one-time code, the trial memories you choose to bring are transferred to your account.
3. Voice, Talk and microphone
Voice capture is tap-to-talk: the microphone listens only after you tap and stops when you tap again or the recording ends.
Voice-note memories. When you save a voice note, we create a text transcript and we also store the original audio recording in your private storage area, so you can play it back when the memory is recalled. The audio is sent to our servers over an encrypted (HTTPS) connection. It is deleted when you delete that memory or your account.
Where speech is transcribed. On iPhone and newer Android phones, speech is converted to text on your device. On Android phones without on-device speech recognition, a copy of the voice-note audio is sent to OpenAI only to create the transcript; we do not keep that copy after processing (OpenAI's own handling is described in Section 5).
Talk (live voice conversations). Talk audio is not stored. Only the text transcript of each conversation turn is kept, as part of your chat history. Replies are spoken using your phone's built-in system voice.
No voiceprints. We do not create or store voiceprints or any other biometric identifiers, and we do not use your voice to identify you. You can turn off microphone access at any time in your phone's settings.
4. How we use your information, and our legal bases
Some laws (for example in the European Union, the United Kingdom and the Dominican Republic) require us to state a legal basis for each use.
| Purpose | Legal basis (where required) |
|---|---|
| Create and manage your account and sign-in | Performance of our contract with you |
| Store, organize and show your memories, reminders and birthdays | Performance of contract |
| AI features: search, Ask, Chat, Talk, Moments, email inbox processing, imports, voice transcription on Android fallback | Your explicit consent (including for any sensitive information in your content) and performance of contract |
| Safety check for crisis signals and showing help resources | Your consent to AI processing, and protecting your vital interests |
| Subscriptions, free trial, free-memory limit, Talk minutes, offers | Performance of contract |
| Push notifications and reminders | Performance of contract; your device permission |
| Transactional emails (sign-in codes, account and deletion notices) | Performance of contract |
| Marketing emails (only if you opt in; off by default) | Your consent |
| Security, fraud and abuse prevention, crash and error fixing | Our legitimate interest in a safe, working service |
| Measuring and improving onboarding and subscription offers | Our legitimate interest |
| Complying with law, tax and accounting, and responding to lawful requests | Legal obligation |
We do not sell personal information, "share" it for cross-context behavioral advertising, or use it for targeted advertising. We do not make decisions about you that have legal or similarly significant effects based only on automated processing.
5. AI processing and your consent
Before you can use KUMIO, we ask for your explicit consent to send your content to our AI providers. The consent screen names the providers and explains what is sent.
What is sent: the memory content, questions, Chat messages, Talk transcripts and (when needed) photos that are relevant to a request, so the AI can create embeddings and answers. On Android devices without on-device recognition, a copy of voice-note audio is also sent for transcription (Section 3).
Who receives it: OpenAI (main AI provider). Anthropic (Claude) may be used as a backup to answer Ask questions if OpenAI is unavailable. Both act as our service providers (processors).
No training: under the business API terms we use, OpenAI and Anthropic do not use data sent through their APIs to train their models. They may keep data for a limited time (for example, up to 30 days) to detect abuse, unless a shorter period applies.
Withdrawing consent: you can withdraw consent at any time in Settings. After you withdraw, we stop sending your content to AI providers, and AI features (Ask, Chat, Talk, search, Moments and similar) stop working. You can still view and delete your memories. Withdrawing does not affect processing done before you withdrew.
You are talking to an AI. KUMIO's answers, Chat and Talk replies are generated by AI, not by a person. If you ask KUMIO whether it is a person, it will tell you it is an AI.
6. Who we share information with
We share personal information only as described below. Our service providers may use it only to provide their services to us, under contracts that require confidentiality and security.
| Provider | What they do for us | Data involved | Location |
|---|---|---|---|
| Supabase | Database, sign-in, file storage and server functions | All account data, memories, photos, transcripts, embeddings | United States (us-east-1) |
| OpenAI | AI answers, embeddings, Android voice transcription | Content needed for each AI request | United States |
| Anthropic | Backup AI for Ask | Content needed for each Ask request | United States |
| RevenueCat | Subscription and purchase management | App user ID, purchase and subscription status | United States |
| OneSignal | Push notifications | Push token, device data, an internal user ID, notification content | United States |
| Sentry | Crash and error monitoring | Diagnostic data (no memory content) | United States |
| Postmark | Sending our emails from our kumioapp.com domains | Email address, email content, delivery data | United States |
| PostHog | Product analytics | Basic in-app events (no memory content) | United States |
| Customer.io | Messaging and account notifications | App user ID, device and push data, email address | United States |
| Cloudflare | Website security and human verification for the website trial | Technical data about the visit (such as IP address and browser signals) | United States |
Apple and Google are independent companies, not our processors, when they handle sign-in and payments. Their own privacy policies apply to that.
We may also share information:
When you choose to. For example, when you create a share card and send it through your phone's share menu, or contact your trusted person. What you share is then handled by the recipient and the app you used.
For legal reasons. If required by law, a court order or a valid government request, or when needed to protect someone's safety, prevent fraud, or protect our rights. Where allowed, we will tell you first.
In a business transfer. If Telivia LLC is involved in a merger, acquisition or sale of assets, your information may be transferred. We will notify you, and the new owner must respect this policy or give you the choice to delete your data.
7. How long we keep information
| Data | How long |
|---|---|
| Account information | While your account exists |
| Memories, photos, voice-note audio and transcripts, embeddings, reminders, birthdays | Until you delete them or delete your account |
| Chat history and Talk transcripts | Until you delete them or delete your account |
| Talk audio | Not stored |
| Website trial data | Deleted 24 hours after the trial session |
| Copy of voice-note audio sent for Android transcription | Not kept by us after processing |
| Crash and error reports | Up to 90 days |
| Email delivery records | Up to 45 days in Postmark |
| Purchase records | As long as needed for tax, accounting and legal reasons |
| Support emails | Up to 24 months after the conversation ends |
| Anonymous safety counter | Kept in aggregate; not linked to you |
| Backups | Deleted data may remain in backups for up to 30 days before it is overwritten |
Account deletion. You can delete your account inside the app (Settings › Account › Delete account). When you do: (1) Your account is disabled immediately. (2) Your data (database records, stored files such as photos, and sign-in records) is deleted in the background. (3) When deletion is complete, we send a confirmation email, and then we delete the email address we used to send it.
Deleting the app from your phone does not delete your account. Deleting your account does not cancel a subscription bought through Apple or Google; you must cancel it in your Apple or Google account settings (see our Terms of Service). We may keep limited information when the law requires it (for example, tax records), and only for as long as required.
8. Your choices and rights
Everyone can:
- View, edit and delete memories in the app.
- Withdraw AI consent in Settings.
- Turn off push notifications, microphone, camera and photo access in your phone's settings.
- Unsubscribe from marketing emails with the one-click link in every marketing email (marketing is off unless you opt in). We will still send necessary account emails.
- Delete your account in the app.
Depending on where you live, you may also have the right to:
- Know and access the personal information we hold about you, and get a copy in a portable format.
- Correct inaccurate information.
- Delete your information.
- Object to or restrict some processing, and withdraw consent at any time.
- Opt out of sale, sharing for targeted advertising, or profiling (we do none of these).
- Not be discriminated against for using your rights.
- Appeal our decision if we deny your request, by replying to our answer.
- Complain to a data protection authority.
How to make a request. Email support@kumioapp.com from the email address on your account, and say what you want. We may need to verify your identity before acting. You may use an authorized agent where the law allows; we may ask for proof of the agent's authority. We will answer within the time the law requires (generally 30 days, up to 45 days in California, extendable where the law allows). Requests are free unless they are clearly unfounded or excessive.
California residents. In the past 12 months we have collected the categories listed in Section 2: identifiers, customer records, commercial information (purchases), internet or device activity, audio information (voice-note recordings you choose to save; no voiceprints), sensitive personal information you choose to include in your memories, and inferences limited to AI search results used only to serve you. We collect them from the sources in Section 2, for the purposes in Section 4, and disclose them for business purposes only to the providers in Section 6. We do not sell or share personal information, and we use sensitive personal information only for purposes permitted by law, so a "Limit the use of my sensitive personal information" right does not apply. We have no actual knowledge of selling or sharing information of consumers under 16.
Dominican Republic residents. Under Law 172-13 on personal data protection, you have the rights of access, rectification, cancellation (deletion) and opposition, and you may request the information we hold about you free of charge. Your information is stored in the United States; by giving consent, you agree to this transfer (Section 10).
EEA, UK and Switzerland residents. You have the rights listed above under the GDPR / UK GDPR. You can complain to your local data protection authority.
9. Safety, crisis protocol and AI disclosure
KUMIO is not therapy, not a medical or mental-health service, and not an emergency service. It does not diagnose or treat any condition, and it does not replace professional help.
Crisis check. When you use AI features, a check on our servers looks for signs that you might be in crisis or at risk of harm.
What happens. If signs are found, the app shows help resources — such as 988 (Suicide & Crisis Lifeline, US) and 911 (emergencies, US and Dominican Republic) — and offers you a quick way to contact a trusted person you chose. You decide whether to contact them; we do not contact anyone on your behalf.
What we keep. We only keep an anonymous counter of how often the check is triggered (with no content and no link to your account). The content involved is never shown in Moments. We do not report you to the police, your trusted person or anyone else, except where the law requires it.
AI disclosure. KUMIO is an AI. If you ask whether you are talking to a person, KUMIO will say it is an AI.
10. International transfers
We are based in the United States and store your data in the United States (Supabase, us-east-1). Our providers are also mainly in the United States. If you use KUMIO from another country (for example, the Dominican Republic or the EEA/UK), your information will be transferred to and processed in the United States, where data protection laws may differ from yours. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK addendum) in our contracts with providers, or on your consent.
11. Security
All connections between the app and our servers use HTTPS (TLS) encryption. Our hosting provider encrypts stored data at rest. We are adding an extra layer of encryption for memory content. Each account's data is separated by database access rules, and only authorized personnel can access production systems, only when needed. Payment card details are never handled by us.
No system is 100% secure. If a security incident affects your personal information, we will notify you and the authorities as the law requires.
12. Children
KUMIO is not for anyone under 18, anywhere. You must be at least 18 years old to create an account or use KUMIO.
We do not knowingly collect personal information from anyone under 18. If we learn that a user is under 18, we will close the account and delete their information. If you believe someone under 18 is using KUMIO, contact support@kumioapp.com.
13. Third-party links and services
Signing in with Apple or Google, paying through the App Store or Google Play, and sharing through other apps are governed by those companies' own privacy policies. We are not responsible for their practices.
14. Changes to this policy
We may update this policy. We will post the new version with a new "Last updated" date. If a change is material — especially a new use of your memory content or a new AI provider — we will tell you in the app or by email before it takes effect, and ask for your consent again where the law requires.
15. Contact
Telivia LLC
Lakewood Ranch, Florida
Email: support@kumioapp.com
Website: kumioapp.com