Privacy policy

Privacy, in plain language.

Kumustahan is built as an offline-first conversation-card app. You do not need an account to use it, and your private notes, favorites, player names, saved sessions, and backups are designed to stay on your device unless you choose to export or share them.

Effective: May 5, 2026 Last updated: May 5, 2026

Who We Are

This privacy policy applies to the Kumustahan mobile app and the Kumustahan website or landing pages that link to this policy. In this policy, "Kumustahan," "we," "our," and "us" refer to the developer and operator of the Kumustahan app.

Kumustahan is a bilingual English and Tagalog/Taglish conversation-card app for friends, partners, families, lifegroups, and solo reflection. The app is designed to work without an account and without requiring an internet connection for the core card experience.

This policy is written to explain our current privacy practices. It is not a substitute for legal advice for any store submission, business filing, or jurisdiction-specific compliance review.

Data We Handle

Kumustahan handles a small set of data so the app can remember your preferences, make the card experience work, diagnose crashes, and improve the product. Some of this data stays only on your device, and some may be sent to service providers as described below.

Local app data Favorites, notes you write, played-card history, saved sessions, recent player names, optional nickname, language, tutorial status, settings, notification preferences, backup settings, and purchase-unlock status. This data is stored on your device using local app storage.
Analytics data App events such as session started, card drawn, card flipped, card favorited, note added, session completed, language toggled, notification settings changed, purchase initiated, and purchase completed. These events may include non-sensitive details such as selected deck IDs, card count, language, product ID, and player count. We do not intentionally send your note text, player names, nickname, or full card answers in analytics events.
Diagnostics and crash data Crash reports, error reports, stack traces, device and app metadata, app version, operating system version, and related diagnostic information used to find and fix bugs. We do not intentionally include note text, player names, nickname, or private answers in crash logs.
Notifications If notifications are enabled or supported on your device, Kumustahan may use notification settings, local reminder times, notification interaction events, and Firebase Cloud Messaging topic subscriptions such as new-packs or announcements. Your device may generate a push messaging token so notifications can be delivered.
Purchases If you buy or restore an in-app purchase, the app receives purchase status and product information from Apple or Google so it can unlock the relevant content. We do not receive or store your payment card number.
Backups and shared files If you create, export, import, or share a Kumustahan backup, the backup file may contain favorites, notes, played history, saved sessions, recent player names, optional nickname, settings, language, and related app data. Exported backup files are controlled by you and may be visible to any app, person, or service you choose to share them with.
Website data If you visit the Kumustahan website or hosted privacy page, your browser and hosting provider may process ordinary technical information such as IP address, browser type, device type, pages visited, and timestamps to load and secure the site.
Contact form messages If you use the contact form, we collect the details you submit, such as your name, email address, message type, platform, and message. Contact form submissions are processed and stored through Netlify Forms so we can respond to feature requests, bug reports, and general messages.

Sensor and haptic interactions

Kumustahan may use device sensors such as the accelerometer for card motion, parallax, and shake-to-reshuffle interactions. These readings are used for the on-device experience. We do not intentionally store or transmit raw motion sensor readings.

How We Use Data

We use the data described above for these purposes:

  • App functionality: to save your notes, favorites, settings, played-card history, sessions, language, backups, and unlocked purchases.
  • Personalization: to remember your language, nickname if you set one, recent player names, notification preferences, and app experience settings.
  • Analytics: to understand which features are used, whether sessions are completed, how the app is performing, and what to improve next.
  • Diagnostics: to identify crashes, bugs, and stability issues.
  • Notifications: to schedule local reminders and, if enabled or supported, send product announcements or new-pack updates.
  • Purchases: to process, restore, and unlock in-app purchases through Apple or Google.
  • Support and safety: to respond to messages you send us and to protect the app, users, and our services.

We do not sell your personal information. We do not use your private notes, player names, or conversation answers for advertising.

Third Parties

Kumustahan uses third-party services and platform providers to operate the app. These providers may process data under their own privacy policies and service terms.

  • Firebase / Google: used for Google Analytics for Firebase, Firebase Crashlytics, and Firebase Cloud Messaging. Firebase may process app-instance identifiers, device information, analytics events, crash reports, notification interaction events, and messaging data to provide these services.
  • Apple App Store and Google Play: used for app distribution, in-app purchases, purchase restoration, ratings, reviews, and store-level account or payment processing.
  • Expo and app platform services: used for app builds, updates, notifications support, and related platform functionality.
  • Netlify: used to host the website and collect contact form submissions through Netlify Forms.
  • System share sheet and apps you choose: used when you share a card image, export a backup, or send content to another app. The destination you choose controls what happens to that shared content after you send it.

Firebase and other providers may process data in countries other than the country where you live. We rely on these providers' security, privacy, and data-processing commitments when they process data for Kumustahan.

Retention and Security

Local app data stays on your device until you delete it, reset app data, remove the app, or overwrite it by restoring a backup. Backup files remain wherever you save or share them until you delete them from those locations.

Analytics, crash, messaging, purchase, and store-related data may be retained by Firebase, Google, Apple, Expo, or other platform providers according to their own retention settings, product behavior, and legal obligations.

We use reasonable technical and organizational measures to protect data. Local data is protected by your device and operating system. Firebase services use encrypted transport and other security controls. No method of storage or transmission can be guaranteed to be perfectly secure.

Your Choices

  • Delete local data: use the app's reset or clear-data controls where available, delete individual notes or favorites, delete backup files, or uninstall the app.
  • Control notifications: change notification settings in the app and in your device settings.
  • Control backups: choose whether to create, export, import, or share backup files. Be careful where you save exported backups because they may include private notes and player names.
  • Control sharing: only share card images or backup files with apps, people, or services you trust.
  • Limit analytics and diagnostics: where your device, operating system, or app settings provide controls, you can use them to limit certain collection.
  • Request help: contact us if you want to ask about privacy choices, deletion, access, or correction. Because Kumustahan does not require accounts, we may not be able to identify all data connected to a particular person without additional technical information.

Children's Privacy

Kumustahan is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information through Kumustahan, contact us and we will take appropriate steps.

Changes to This Policy

We may update this policy as Kumustahan changes, as we add or remove features, or as legal and platform requirements evolve. If the changes are meaningful, we will update the "Last updated" date above and may provide additional notice in the app or on the website.

Contact

For privacy questions, requests, or concerns, contact us at:

Kumustahan Privacy hello@kumustahan.app