Privacy Policy | Kumustahan

Who We Are

This privacy policy applies to the Kumustahan mobile app and the Kumustahan website or landing pages that link to this policy. In this policy, "Kumustahan," "we," "our," and "us" refer to the developer and operator of the Kumustahan app.

Kumustahan is a bilingual English and Tagalog/Taglish conversation-card app for friends, partners, families, lifegroups, and solo reflection. The app is designed to work without an account and without requiring an internet connection for the core card experience.

This policy is written to explain our current privacy practices. It is not a substitute for legal advice for any store submission, business filing, or jurisdiction-specific compliance review.

Data We Handle

Kumustahan handles a small set of data so the app can remember your preferences, make the card experience work, diagnose crashes, and improve the product. Some of this data stays only on your device, and some may be sent to service providers as described below.

Local app data	Favorites, notes you write, voice notes you record, handmade cards and decks you create in the Card Maker, collections, played-card history, saved sessions, recent player names, optional nickname, language, tutorial status, settings, theme and card-skin choices, widget settings, notification preferences, backup settings, and purchase and subscription status. This data is stored on your device using local app storage.
Analytics data	App events such as onboarding steps viewed and completed, session started, card drawn, card flipped, card favorited, note added, voice note added, session completed, language toggled, notification settings changed, Premium plan selected, purchase initiated, and purchase completed, as well as feature events such as a theme or card skin applied, a card image shared, handmade cards created or deleted, voice dictation used, a voice note transcribed, Cloud backup turned on or off, the creator promo page opened, and widget or Live Activity use. These events may include non-sensitive details such as card and deck IDs, card count, language, product ID, price and currency, player count, share design and format, a voice note's length in seconds, and who you said you'd like to talk with during onboarding, as a broad group (for example partner, barkada, or family). We do not intentionally send your note text, voice recordings or transcripts, handmade card text, player names, nickname, or full card answers in analytics events.
Diagnostics and crash data	Crash reports, error reports, stack traces, device and app metadata, app version, operating system version, and related diagnostic information used to find and fix bugs. We do not intentionally include note text, voice recordings, player names, nickname, or private answers in crash logs.
Notifications	If notifications are enabled or supported on your device, Kumustahan may use notification settings, local reminder times, notification interaction events, and Firebase Cloud Messaging topic subscriptions such as new-packs or announcements. Your device may generate a push messaging token so notifications can be delivered.
Purchases	Kumustahan offers one-time purchases (card packs and Kumustahan Premium Lifetime) and auto-renewing Kumustahan Premium subscriptions (weekly, monthly, or annual). Payments are handled by Apple or Google. Purchases are managed through RevenueCat, which assigns each installation of the app an anonymous app user ID (not linked to your name or email) and processes your purchase and subscription status, purchase history and dates, store receipts or purchase tokens, product and price information, and basic device and app information so the app can unlock, restore, and keep your content and subscription status up to date. If you bought a card pack before Kumustahan 2.0, the app recognizes you as a founding member from the purchase record on your phone or your purchase history in RevenueCat, and adds a "founding member" label to your anonymous RevenueCat record so we can count and thank founders. You manage or cancel subscriptions through your App Store or Google Play account settings. We do not receive or store your payment card number.
Creator promo ("Help us tell the world")	While this campaign runs, the app shows your Kumustahan ID, which is the anonymous RevenueCat app user ID described above. It is not your name or email. If you take part, you post a public video on the platform you choose, then open a Google Form from the app and submit the details it asks for, such as your Kumustahan ID, the link to your post, a screenshot that shows its view count, and your email address. The app adds nothing else to the form; at most it fills in your Kumustahan ID for you. We use your submission to check the post, to grant your Premium reward by hand on that Kumustahan ID in RevenueCat, and to email you when it's on. Taking part is optional.
Voice notes (Premium)	If you record a voice note on a card, Kumustahan asks for microphone permission and records audio only while you are recording, up to five minutes per note. The recording is saved as an audio file in the app's storage on your device, next to your note. It is never sent to us. Transcribing a voice note is optional: if you tap Transcribe, your phone turns the recording into text with its own on-device speech recognition, so the audio is not sent to Apple, Google, or us for this, and you choose whether to keep the words. On Android, this needs an offline speech model; if none is installed, the app can ask your phone to download one from Google, and Kumustahan sends nothing with that request. A recording leaves your device only if you turn on Cloud backup (see below).
Voice dictation	If you choose to dictate a note or session reflection by tapping the microphone, Kumustahan asks for microphone and speech recognition permission. Your speech is turned into text as you talk by your device's built-in speech recognition service from Apple or Google. Dictation does not require on-device processing, so depending on your phone and language, Apple or Google may process the audio on their servers under their own privacy policies. Dictation does not save a recording: only the resulting text is kept, in your notes on your device. Dictation is optional; you can always type instead.
Home Screen widgets and Live Activity (iPhone)	If you add a Kumustahan widget or allow the session card on your Lock Screen and Dynamic Island, the app writes the card text needed to show it to a shared container on your device, including cards you favorited, your handmade cards, and, if "Show my notes" is on, your newest note on a card. During a session, the Live Activity can show the current card and whose turn it is. This data stays on your device to render widgets and is not sent to us. Voice recordings are never shown on widgets, and the free Salo widgets show only Salo and free question cards. Notes on widgets are hidden while your iPhone is locked, but other widget content may be visible on your Home Screen or Lock Screen.
Theme font downloads	Most typefaces for Kumustahan Themes are not bundled with the app. When you preview a theme or typeface in the Themes screen, or apply one, the app downloads the needed font files from Google Fonts' servers (fonts.gstatic.com) and keeps them on your device. Like any web request, this lets Google see ordinary technical information such as your IP address and the file requested. No notes, cards, or account details are sent.
Backups and shared files	Backups are plain JSON files that may contain favorites, collections, notes (including the file name, length, and size of each voice note, but not the audio), handmade cards and decks, played history, saved sessions, recent player names, optional nickname, settings, language, and related app data. Backups you save inside the app, including optional daily backups (off unless you turn them on) and a safety copy made before a restore, are kept in the app's storage on your device, up to the ten most recent. If you export, import, or share a backup, the file goes only where you choose. Exported backup files are not encrypted, are controlled by you, and may be visible to any app, person, or service you choose to share them with. Purchases and subscriptions are not stored in backups; they are restored through the App Store or Google Play.
Cloud backup (Premium, off by default)	If you turn on Cloud backup in Settings, Kumustahan copies the same backup data, plus your voice-note recordings, to your own cloud storage. On iPhone, the app writes the files into its folder in your iCloud Drive (Files → iCloud Drive → Kumustahan), keeping the ten newest backups, and iOS uploads them to your iCloud account. On Android, the app keeps one up-to-date copy, with as many recent voice notes as fit in about 20 MB, in a folder that your phone's own Google backup includes when it backs up the app to your Google account. Kumustahan makes no network requests for this and runs no servers that receive it; Apple or Google stores the copies under their own terms. Kumustahan does not add its own encryption to these copies.
Your phone's own backup	Separately from Cloud backup, if your phone's own backup is turned on in its settings, it may include Kumustahan's app data the way it does for other apps. On Android, Kumustahan keeps live voice recordings, the backup copies kept inside the app, and downloaded fonts out of that system backup, so your recordings reach your Google account only when Cloud backup is on.
Card images and sharing	Share Studio draws a picture of a card on your phone and hands it to your phone's share sheet, where you choose the app or person; "Copy as text" puts the question on your clipboard. Your nickname appears on the image only if you turn on "Sign it." Kumustahan does not browse or upload your photo library, and on Android it does not ask for permission to read your photos.
Website data	When you visit kumustahan.app, our hosting provider, Netlify, processes ordinary technical information such as IP address, browser type, device type, pages visited, and timestamps to load and secure the site. Every page of the site also loads Google Analytics, which uses cookies to count visits and page views and to record interactions such as which parts of the homepage you scroll to, tapping an App Store or Google Play link, switching the site's language, opening a deck or an FAQ answer, drawing or flipping a sample card, trying a theme or card skin, playing with Salo, and starting or sending the contact form. These events don't include what you type: the Card Maker demo only counts how many cards you made and how long the text was, and contact form messages go to Netlify, not to analytics. Most pages also load their fonts from Google Fonts, which lets Google see your IP address and the font request. The site remembers your English or Tagalog choice in your browser's local storage, on your device only.
Contact form messages	If you use the contact form, we collect the details you submit, such as your name, email address, message type, platform, and message. Contact form submissions are processed and stored through Netlify Forms so we can respond to feature requests, bug reports, and general messages.

Sensor and haptic interactions

Kumustahan may use device sensors such as the accelerometer for card motion, parallax, and shake-to-reshuffle interactions. These readings are used for the on-device experience. We do not intentionally store or transmit raw motion sensor readings.

Cookies on the website

The kumustahan.app website uses Google Analytics cookies, set by Google's analytics script, to tell visits apart and count them. We use the reports only to understand how the site is used and what to improve. There are no ads on the site. You can block or delete cookies in your browser settings, and the site still works without them.

How We Use Data

We use the data described above for these purposes:

App functionality: to save your notes, favorites, handmade cards, collections, settings, played-card history, sessions, language, backups, and unlocked purchases, and to show cards on widgets you add.
Personalization: to remember your language, nickname if you set one, recent player names, theme and card-skin choices, notification preferences, and app experience settings.
Voice notes: to save your recordings with your notes and, when you ask, transcribe them on your phone.
Voice dictation: to turn your speech into note text when you choose to dictate.
Cloud backup: to copy your backup and voice notes to your own iCloud Drive or Google account when you turn it on, and to bring them back when you restore.
Analytics: to understand which features are used, whether sessions are completed, how the app and the website are performing, and what to improve next.
Diagnostics: to identify crashes, bugs, and stability issues.
Notifications: to schedule local reminders and, if enabled or supported, send product announcements or new-pack updates.
Purchases: to process, restore, and unlock one-time purchases and Premium subscriptions through Apple or Google, with RevenueCat keeping purchase and subscription status up to date, and to recognize founding members.
Creator promo: to check the posts people submit, grant Premium rewards, and email them about their reward.
Support and safety: to respond to messages you send us and to protect the app, users, and our services.

We do not sell your personal information. We do not use your private notes, voice recordings, player names, or conversation answers for advertising.

Third Parties

Kumustahan uses third-party services and platform providers to operate the app. These providers may process data under their own privacy policies and service terms.

Firebase / Google: used for Google Analytics for Firebase, Firebase Crashlytics, and Firebase Cloud Messaging. Firebase may process app-instance identifiers, device information, analytics events, crash reports, notification interaction events, and messaging data to provide these services.
Apple App Store and Google Play: used for app distribution, in-app purchases, subscription billing, renewal and cancellation, purchase restoration, ratings, reviews, and store-level account or payment processing.
RevenueCat: used to manage in-app purchases and subscriptions. RevenueCat may process an anonymous app user ID (shown in the app as your Kumustahan ID), purchase and subscription history, store receipts or purchase tokens, a "founding member" label for people who bought a card pack before Kumustahan 2.0, and device and app information to validate purchases and report their status to the app. We also use RevenueCat to grant creator promo rewards by hand.
Apple and Google speech recognition: used when you dictate a note or transcribe a voice note. Dictation may use Apple's or Google's servers; voice-note transcription runs only on your phone. Both happen under Apple's or Google's own privacy terms. On Android, offline speech models are downloaded by your phone from Google.
Apple iCloud and Google backup: used only if you turn on Cloud backup (and, for your phone's own backup, as set in your phone's settings). The copies are stored in your own iCloud or Google account under Apple's or Google's terms.
Google Fonts: used to download optional theme typefaces when you preview or apply one in the Themes screen, and to load fonts on most pages of the website.
Google Analytics: used on the website to measure visits and interactions, with cookies, as described above.
Google Forms: used to collect creator promo submissions. What you enter is stored in Google Forms under Google's terms.
Expo and app platform services: used for app builds, updates, notifications support, and related platform functionality.
Netlify: used to host the website and collect contact form submissions through Netlify Forms.
System share sheet and apps you choose: used when you share a card image, export a backup, or send content to another app. The destination you choose controls what happens to that shared content after you send it.

Firebase, Google, RevenueCat, Netlify, and other providers may process data in countries other than the country where you live. We rely on these providers' security, privacy, and data-processing commitments when they process data for Kumustahan.

Retention and Security

Local app data, including voice recordings, backups kept inside the app, widget data, and downloaded theme fonts, stays on your device until you delete it, reset app data, remove the app, or overwrite it by restoring a backup. When you delete a voice note or reset the app, the recording is removed from your device at a later app launch; recordings from the last six hours are kept a little longer so Undo still works. Backup files you export remain wherever you save or share them until you delete them from those locations.

Cloud backup copies stay in your own iCloud Drive or Google account. On iPhone, Kumustahan keeps the ten newest backups there and removes recordings that no kept backup needs. Turning Cloud backup off or resetting the app does not delete copies already in iCloud Drive; you can delete them in the Files app (iCloud Drive → Kumustahan). On Android, turning Cloud backup off or resetting the app deletes the copy on your phone, so it is left out of your next Google backup; how long Google keeps earlier backups is up to Google.

Analytics, crash, messaging, purchase, and store-related data may be retained by Firebase, Google, Apple, RevenueCat, Expo, or other platform providers according to their own retention settings, product behavior, and legal obligations. Website analytics data is kept according to the retention settings of our Google Analytics account. Contact form messages and creator promo submissions are kept in Netlify and Google Forms until we delete them.

We use reasonable technical and organizational measures to protect data. Local data is protected by your device and operating system. Firebase services use encrypted transport and other security controls. Backups you export and Cloud backup copies are not encrypted by Kumustahan, so their protection depends on where they are stored. No method of storage or transmission can be guaranteed to be perfectly secure.

Your Choices

Delete local data: use the app's reset or clear-data controls where available, delete individual notes, voice notes, favorites, or handmade cards, delete backup files, or uninstall the app.
Control notifications: change notification settings in the app and in your device settings.
Control voice notes: the app records only while you are recording a voice note. You can delete a voice note at any time, choose "Voice only" to keep a transcript out of your note, or deny microphone access in your device settings.
Control dictation: dictation only runs when you tap the microphone. You can deny or turn off microphone and speech recognition access in your device settings and type instead.
Control Cloud backup: it stays off until you turn it on in Settings, and you can turn it off there at any time. On iPhone, delete old copies in the Files app (iCloud Drive → Kumustahan). Your phone's own backup is controlled in your phone's settings.
Control widgets: remove Kumustahan widgets from your Home Screen or Lock Screen, turn off "Show my notes," or turn off the session card on your Lock Screen in the app's Widgets screen.
Manage subscriptions: view, change, or cancel a Kumustahan Premium subscription in your App Store or Google Play account settings. Deleting the app does not cancel a subscription.
Control backups: choose whether to create, export, import, or share backup files. Be careful where you save exported backups because they may include private notes and player names.
Control sharing: only share card images or backup files with apps, people, or services you trust.
Limit analytics and diagnostics: where your device, operating system, or app settings provide controls, you can use them to limit certain collection.
Website cookies: block or delete cookies in your browser settings to stop Google Analytics from recognizing your visits. The site still works.
Creator promo: taking part is optional. Contact us if you want your form submission deleted.
Request help: contact us if you want to ask about privacy choices, deletion, access, or correction. Because Kumustahan does not require accounts, we may not be able to identify all data connected to a particular person without additional technical information.

Children's Privacy

Kumustahan is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information through Kumustahan, contact us and we will take appropriate steps.

Changes to This Policy

We may update this policy as Kumustahan changes, as we add or remove features, or as legal and platform requirements evolve. If the changes are meaningful, we will update the "Last updated" date above and may provide additional notice in the app or on the website.

Contact

For privacy questions, requests, or concerns, contact us at:

Kumustahan Privacy hello@kumustahan.app