Kuma / Privacy
Kuma Privacy Policy
Effective November 1, 2026
Kuma is provided by Chong Consulting LLC. Contact Christin Chong at hi@christinchong.com about privacy, support, or deletion requests.
Practice without an account
You can use Kuma’s timer, meditation guide, history, aspirations, and widgets without signing in. Session history and preferences are stored on your device. The iPhone app, its widgets, and the paired Apple Watch app share the information needed to display and record your practice. Exporting a CSV creates a file you control; Kuma does not automatically send that file to us.
Optional account and cloud practice
If you choose Sign in with Apple, our authentication provider, Supabase, processes your account identifier and the email address Apple supplies, which may be an Apple private relay address. Kuma stores your chosen display name and account preferences.
Cloud backup is optional. When enabled, it includes earlier meditation sessions: identifiers, dates, start/end times, duration, posture, recorded meditation segments, and time zone. These meditation records are associated with your account. Heart-rate samples, step reports, and Apple Health export status are not included in cloud backup.
Friend sharing is a separate choice. Accepted friends can see your chosen display name, recent practice summaries, and acknowledgments; practice duration is shared only if you enable it. Earlier private backups are excluded from friend sharing. Removing a friend stops shared summaries for that relationship. New friend invitation creation is disabled in the current public-beta candidate.
If you enable bow notifications, Kuma registers a device notification token with its backend and uses Apple Push Notification service to deliver them. Operating-system notification settings also apply.
Apple Health and Watch
Health access is optional and controlled by Apple’s permission screens. Kuma can save completed meditations as Mindful Minutes and read steps and heart rate to show meditation reports. These sensor reports remain on your devices and are not sent to our cloud service or included in CSV exports. Apple manages Health storage and synchronization according to your Apple settings. Disabling Health export or deleting a Kuma account does not erase existing Health records; manage those in Apple Health.
Feedback and support
Sending feedback is optional. When you tap Send, Kuma sends your message, required reply email, app version, the screen from which you opened feedback, a submission identifier, and a random installation identifier to Supabase. The installation identifier helps prevent repeated or abusive submissions; it is not used for advertising. Feedback is copied to a private GitHub archive and emailed to the developer through Resend. Your meditation history and Health reports are not attached automatically. Please avoid including sensitive information in your message that you do not want the developer to receive.
Service providers and external links
We use Supabase for accounts, cloud practice, and feedback; GitHub for the private feedback archive; Resend for feedback email and beta waitlist updates; and Apple for sign-in, Health, notifications, and TestFlight distribution. Service providers may process operational information, such as IP addresses and request logs, to deliver and protect their services. Data may be processed outside your country.
Kuma has no advertising or cross-app tracking SDK. We do not sell your personal information or use Health information for advertising. Opening an external Substack support link takes you to a separate service governed by its own privacy policy. Newsletter subscriptions are separate from Kuma.
During the beta, Apple TestFlight may collect crash reports, usage information, and feedback and share them with us under Apple’s TestFlight terms and privacy disclosures.
Retention and deletion
Local practice stays on your device until you remove it. In-app account deletion removes your active cloud account, cloud practice records, friendships, invitations, and registered notification tokens; it leaves local practice and existing Apple Health records in place. Signing out is not account deletion.
Feedback is stored separately from your optional Kuma account and is not deleted by deleting that account. The current feedback system does not automatically expire submitted feedback. Contact hi@christinchong.com to request deletion of feedback and associated reply information from the active database, private archive, and developer mailbox. Provider backups, security logs, and records required by law may remain under the applicable retention requirements; deletion is not a promise of immediate removal from every backup.
Your choices
You can practice without an account, decline Health permissions, leave cloud backup and sharing off, disable notifications, export your history, delete your account, or contact us about access, correction, and deletion. Privacy rights depend on your location. We will update this policy when Kuma’s data practices change and show the effective date above.
Beta waitlist
If you join the beta waitlist on this website, Chong Consulting LLC collects your email address and your consent to receive Kuma beta availability updates. This signup is separate from the app and does not subscribe you to Christin’s newsletter. Netlify processes the signup request, and Resend stores your email address and subscription status and delivers beta updates. These providers may process request information to operate and protect the service. We use the list to send beta availability and installation updates, not advertising for other products. We retain it while the beta invitation program is active, then delete it when no longer needed for that purpose. You can unsubscribe using the link in any beta update email. To request deletion, email hi@christinchong.com with “Kuma beta list” in the subject. Earlier submissions collected through Netlify Forms may remain there until migrated or deleted. See Resend’s privacy policy and Netlify’s privacy policy for their handling of service data.