Privacy Policy

1. Information We Collect

We may collect the following categories of information:

• Contact Information: name, email address, and similar identifiers.
• Account and Profile Data: login credentials, preferences, and onboarding responses.
• Travel Content: itinerary and booking details you provide directly or via connected services (for example, email providers).
• Usage and Device Data: device identifiers, app interactions, browser type, IP address, and diagnostics.
• Communications: support messages, feedback, and responses to surveys or beta programs.

2. How We Collect Information

• Directly from you (for example, waitlist forms, sign-up, and support requests).
• Automatically through service logs and analytics in the app.
• From third-party integrations you choose to connect, such as email services or calendar providers.

3. How We Use Information

• To provide, operate, and improve the Services.
• To personalize travel guidance and itinerary support features.
• To communicate product updates, support responses, and waitlist or beta invites.
• To maintain security, prevent abuse, and enforce our Terms of Use.
• To comply with legal obligations.

4. Legal Bases for Processing (EEA/UK)

Where applicable, we process personal data under one or more of the following legal bases: consent, contract performance, legitimate interests, and legal obligations.

5. Disclosure of Information

We may disclose information to:

• Service providers supporting hosting, analytics, communication, and security.
• Integration partners when you direct us to connect external accounts.
• Authorities or other parties where required by law or to protect rights and safety.
• Successors in connection with a merger, financing, acquisition, or asset sale.

We do not sell personal information, and we do not use personal information for cross-context behavioral advertising.

6. Data Retention

We retain trip and account data while your account is active or until you delete that data from the Services.

If an account is inactive for 18 months, we may send a notice to the account email. If there is no reactivation within 30 days after notice, we may delete or anonymize personal data associated with the inactive account.

We may retain limited records for longer where required by law, needed to address security issues, or necessary to resolve disputes and enforce agreements.

7. Your Privacy Rights

Depending on your location, you may have rights to:

• Access, correct, or delete personal information.
• Obtain a copy of personal information in a portable format.
• Object to or restrict certain processing.
• Withdraw consent where processing is based on consent.
• Appeal certain privacy-right decisions where required by law.

To exercise rights, contact us at legal@kumino.ai.

8. Analytics and Tracking

We use Statsig for in-app analytics and product performance insights. Users can opt out of analytics in the app settings.

9. International Data Transfers

We are not currently targeting international rollouts. If this changes and cross-border transfers become applicable, we will update this Privacy Policy with the relevant safeguards.

10. Children's Privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13 without appropriate authorization.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date and provide notice where required by law.

12. Contact

If you have questions about this Privacy Policy, contact us at legal@kumino.ai.