Privacy Policy

Last updated: February 2, 2026

Kumano is a local-first app. Your project data lives on your device by default. Cloud features are optional and require an account. This policy explains what data we collect and why.

What We Collect

Data stored locally (no account needed)

• Projects, features, tasks, and notes you create
• App preferences and settings

This data stays on your Mac. We never see it unless you enable cloud sync.

Data collected when you create an account

• Email address — for authentication and account recovery
• Display name — optional, shown to collaborators
• Authentication tokens — managed by Firebase Auth

Data synced when you enable cloud features

• Project data — titles, descriptions, statuses, and task content you choose to sync
• Collaboration data — member roles, invitations, shared project metadata

Analytics (opt-in)

If you consent, we collect anonymous usage data via Firebase Analytics:

• Which features you use (e.g. "created a project", "opened kanban board")
• Session duration and app open events
• Crash reports for fixing bugs

Analytics is disabled by default. You can enable or disable it anytime in Settings.

How We Use Your Data

• To provide the app and its features
• To sync your data across devices (if enabled)
• To enable collaboration with others (if enabled)
• To improve the app based on anonymous usage patterns (if you opt in)
• To send important account or security notifications

Third-Party Services

Kumano uses the following services to provide cloud features:

These services are provided by Google and process data in accordance with Firebase's Privacy Policy and Data Processing Terms. Data may be transferred to and processed in the United States under Google's Standard Contractual Clauses.

We do not sell, rent, or share your personal data with advertisers or data brokers.

Data Storage and Security

• Local data is protected by your device's built-in encryption
• Cloud data is encrypted in transit (TLS) and at rest by Firebase
• Passwords are handled by Firebase Auth — we never see or store your password

Data Retention

• Local data — remains until you delete it or uninstall the app
• Account data — retained while your account is active
• Analytics data — retained by Google for up to 14 months, then automatically deleted

Your Rights (GDPR)

As an EU-based service, we comply with the General Data Protection Regulation. You have the right to:

• Access — request a copy of your data
• Correct — update inaccurate information
• Delete — request deletion of your data ("right to be forgotten")
• Export — receive your data in a portable format
• Object — opt out of analytics and non-essential data processing
• Withdraw consent — disable analytics or delete your account at any time

To exercise any of these rights, email privacy@kumano.app. We will respond within 30 days.

Children's Privacy

Kumano is not intended for children under 16. We do not knowingly collect data from children.

Changes to This Policy

We may update this policy as the app evolves. Significant changes will be communicated via in-app notification or email. Continued use of Kumano after changes constitutes acceptance.

Contact