Privacy Policy

This Privacy Policy explains how Kumul ("we," "our," or "us") collects, uses, and protects information about you when you use the Kumul mobile application ("Kumul," "the app"). Kumul is developed and operated by an individual developer based in Türkiye. By using Kumul, you agree to the practices described in this policy.

1. Information We Collect

We collect the following categories of personal information when you use Kumul:

• Account information: your name and email address (from Apple or Google when you sign in), and a unique user ID generated for your account.
• Financial data you enter: income and expense entries, savings entries, and savings goals that you manually add in the app (amount, currency, category, date, and any notes). This data is transmitted securely to and stored on our servers so it can sync across your sessions and power features like analytics — it is not kept only on your device.
• Subscription status: whether you have an active premium subscription, based on your purchase through the App Store or Google Play.
• Notification token: if you allow notifications, a device push token used to deliver them.
• Crash logs: technical diagnostic data collected automatically when the app encounters an error, including device type, operating system version, and stack traces.
• Analytics events: in-app interaction data such as feature usage and navigation patterns, collected to help us understand how the app is used.

We do not collect your bank account credentials or payment card numbers — those are entered directly with Apple or Google when you make a purchase, and we never see them. Kumul does not connect to or read data from any external bank account; every entry is added manually by you. We do not show ads and do not sell or rent your personal information to third parties.

2. How We Use Information

• To create and secure your account and keep you signed in.
• To provide the app's core features (income/expense tracking, savings, goals, analytics) and sync your data across sessions.
• To verify your premium subscription status and unlock premium features.
• To send notifications, if you've allowed them.
• To diagnose and fix technical issues (crash logs) and understand feature usage (analytics), so we can improve the app.

We do not use your information for automated decision-making or profiling that produces legal or similarly significant effects.

3. Sharing & Third Parties

We do not sell, rent, or share your personal information with third parties for their own marketing or commercial purposes. To operate the app, a limited amount of data is processed on our behalf by the following service providers:

• Supabase, Inc.: our database and authentication provider — stores your account and financial data securely, protected by row-level access rules so only you can read your own data.
• Apple Inc. / Google LLC: used to authenticate you when you sign in with Apple or Google, and to process in-app purchases and subscriptions.
• RevenueCat, Inc.: processes purchase and subscription status data to manage in-app transactions — it does not have access to your card details, which are handled directly by Apple/Google. Privacy Policy
• Firebase Analytics (Google LLC): collects and processes anonymous analytics events to help us understand app usage. Privacy Policy
• Firebase Crashlytics (Google LLC): collects and processes crash logs to help us diagnose technical issues. Privacy Policy
• Expo: our push notification infrastructure, used only if you enable notifications.

Each of these providers is contractually obligated to process your data only as instructed by us and in accordance with applicable privacy law.

4. Data Retention

We retain your personal information for as long as your account remains active. If you delete your account, your data (financial records, savings, goals, and profile information) is deleted permanently and immediately, except where retaining certain records is required to comply with legal obligations. Crash logs and aggregated analytics data may be retained in anonymized form for a longer period for quality-improvement purposes.

5. Deleting Your Account

You can permanently delete your account at any time from inside the app: Profile > Delete Account. This action is irreversible and removes all of your data immediately. Note: deleting your account does not automatically cancel an active subscription — see our Terms of Service for how to cancel.

6. Security

We take reasonable and appropriate technical and organizational measures to protect your personal information, including encrypted data transmission (TLS) and row-level access controls that ensure you can only access your own data. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

7. Children's Privacy

Kumul is not directed at children under 13 and we do not knowingly collect data from them.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal information.

If you are located in the European Economic Area or United Kingdom (GDPR): you have the right to access, correct, or erase your personal data; the right to restrict or object to certain processing; the right to data portability; and the right to lodge a complaint with your local supervisory authority. Where processing is based on consent, you may withdraw that consent at any time.

If you are a California resident (CCPA/CPRA): you have the right to know what personal information we collect and how it is used; the right to request deletion; the right to correct inaccurate information; and the right to opt out of the sale or sharing of personal information. We do not sell or share your personal information as defined under California law, so no opt-out mechanism is required.

If you are located in Türkiye: see our KVKK Aydınlatma Metni for your rights under Turkish data protection law (Law No. 6698).

To exercise any of these rights, contact us using the details in Contact Us below. We will respond to verified requests within the timeframe required by applicable law.

9. International Transfers

Kumul is developed and operated by an individual developer based in Türkiye. By using the app, your personal information may be transferred to and processed in countries outside your country of residence, including the United States, where some of our service providers maintain infrastructure. Where required by applicable law, such transfers are subject to appropriate safeguards.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date above and, where appropriate, notify you within the app. Your continued use of Kumul after changes take effect constitutes acceptance of the revised policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, contact us at: kumulapp@gmail.com