Privacy Policy

1. Who we are

Kumo Quest is published by arfy, in Montréal (Québec, Canada).

Person in charge of the protection of personal information: the founder of arfy, reachable at info@arfy.ca.

2. What we collect

• Account: the identifier provided by Apple or Google and your email address (with Apple, you can hide it).
• Profile: nickname, age range, martial art, self-reported belt, and an optional goal.
• Progress: missions, sessions, lanterns, and how you felt. The notes you write stay on your device.
• Watch and Health, only if you allow it: workouts, and watch motion used to count strikes. Your heart rate stays in Health, on your device. On Android, via Health Connect.
• Questions asked to Kumo: the text of your question and the answer.
• Subscription: its status, provided by Apple or Google. We never see your payment card.
• Usage analytics: screens opened and actions taken, with no free text, notes, or messages.
• Technical data: device model, language, app version, crash reports.
• Support messages and deletion requests sent from the website: your name or nickname, your email address, your message and, if you give them, your device, sign-in method, and reason.

3. Why we use it

• To run the app and sync your progress across your devices.
• To answer your questions with the Kumo assistant.
• To manage your subscription and free trial.
• To understand what helps practitioners, fix bugs, and keep the service secure.
• To measure how well our campaigns work, only if you agree on iOS (Apple’s tracking request).

4. Health data

Health and Health Connect data is never sold, never used for advertising, and never shared with advertisers.

Only a summary of each session (duration, estimated strikes, intensity) is saved to your account. You can withdraw permission at any time in your device settings.

5. The Kumo assistant

• Your questions are sent to an artificial intelligence model through our server, without your name or email.
• They are not used to train any model. They are kept for 30 days for security purposes, then deleted.
• Kumo is an AI: it can make mistakes and does not give medical advice.

6. Who we share it with

• We work with service providers that process data on our behalf, under contract: Supabase (hosting and database), RevenueCat (subscriptions), Apple and Google (sign-in, payments, health), PostHog (usage analytics), AppsFlyer (campaign measurement, iOS with your consent), an AI model provider via OpenRouter (Kumo assistant), Vercel (this website), and Resend (sending the emails of the website forms).
• Some are located outside Québec, including in the United States. Before each transfer, we assess the risks to your privacy, as required by Québec law.
• We may disclose data if required by law.

7. Children and teens

• Kumo Quest is for people aged 14 and over. The app asks for your age range when you first open it and cannot be used under 14.
• We ask for an age range, never a date of birth.
• If you believe someone under 14 has given us their data, email us at info@arfy.ca and we will delete it.

8. How long we keep it

For as long as your account exists. When you delete it, your data is erased within 30 days, except for what the law requires us to keep (for example, certain transaction records).

Messages sent from the website forms are kept in our mailbox while we handle your request, then for 12 months at most.

9. Your rights

• Access your data, correct it, delete it, export it (Settings › My account › Export my data), and withdraw your consent.
• Email us at info@arfy.ca; we respond within 30 days.
• In Québec, you can file a complaint with the Commission d’accès à l’information. In the European Union, with the data protection authority in your country. In California, you also have the rights provided under the CCPA.

10. Security

Encrypted connections, per-account access restrictions in the database, access keys never stored in the app, and true deletion when you delete your account.

11. This website

This site uses no advertising cookies. Anonymous, cookie-free analytics tell us which pages are viewed.

12. Changes

If this policy changes in a significant way, we’ll let you know in the app before the change takes effect.