HygieniaPRO privacy policy.
KumaKart Oy respects your privacy. This policy explains what personal data we collect in the HygieniaPRO app, how we use it, and the rights you have. Our website has its own separate privacy policy.
01Data controller
02Data we collect
- → Account. Email address and password (stored encrypted via Supabase) when you voluntarily create an account.
- → Anonymous session. If you don't create an account, we use a random anonymous identifier to save your local progress.
- → Purchase history. Subscription type (7-day / 30-day) and purchase date. Payment details (card numbers etc.) are handled by App Store or Google Play — we never see them.
- → App usage data. Studied content, test results, and progress are stored on your device (localStorage) and optionally in your Supabase account if you are signed in.
- → Ads. If you use ad-supported features, the app shows Google AdMob ads. AdMob may collect data for ad personalisation based on your consent under EEA regulations.
03Purpose of processing
- →Managing your account and authentication.
- →Syncing your progress across devices.
- →Processing premium subscriptions via RevenueCat.
- →Showing ads to free users (with GDPR consent).
- →Improving the service and resolving technical issues.
04Legal basis (GDPR)
- →Contract performance: creating an account and delivering premium features.
- →Legitimate interest: technical operation and security of the app.
- →Consent: ad personalisation (you can withdraw at any time via the app settings).
05Data retention and deletion
Your data is retained as long as your account is active. You can delete your account and all associated data at any time via the Profile screen. Data is deleted within 30 days of the request.
Anonymous sessions are stored on your device only and are not sent to our servers.
06Third-party services
- →Supabase (database and authentication) — EU region, data processing agreement in place.
- →RevenueCat (subscription management) — processes purchase events, not payment card details.
- →Google AdMob (ads) — operates in the EEA under GDPR consent.
- →Apple App Store / Google Play (purchases) — subject to their own privacy policies.
07Your rights
- →Right to access, correct, delete ("right to be forgotten"), and restrict processing of your data.
- →Right to data portability.
- →Right to lodge a complaint with a supervisory authority.
To exercise any right, email info@kumakart.com.
08Children's privacy
The app is not directed at users under 13. We do not knowingly collect data from minors.
09Changes to this policy
We will notify you of significant changes in the app. Continued use constitutes acceptance of the updated policy.
10Contact
Questions about this policy or your data? Email info@kumakart.com.