Privacy Policy

Last updated: July 10, 2026

KumaStories Ltd ("we," "us," or "our") operates the Doku mobile application and related website (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Information We Collect

We collect information to provide and improve our Service to you. The types of information we collect include:

A. Information You Provide to Us

• Account Information: When you register, we collect your name, email address, and profile picture. If you sign in via third-party services (like Apple or Google), we receive basic profile information authorized by those providers.
• User-Generated Content: Comments, Ideas, and other content you post on the Service.
• Communications: Information you provide when you contact customer support.

B. Information Collected Automatically

• Usage Data: We automatically collect data regarding your interaction with the Service, such as viewing history, search queries, episodes watched, and features used.
• Device Information: We collect device-specific information, including device model, operating system version, unique device identifiers (such as IDFA or Android Ad ID), and mobile network information.
• Log Data: IP addresses, browser type, app version, and timestamps of your visits.

2. How We Use Your Information

• To provide, maintain, and personalize the Service.
• To manage your account and subscription status.
• To analyze usage patterns and improve our content and app functionality.
• To deliver targeted content, recommendations, and (where applicable) advertisements.
• To communicate with you regarding updates, security alerts, and support messages.
• To enforce our Terms of Service and prevent fraudulent or illegal activities.

3. How We Share Your Information

We do not sell your personal information to third parties. We may share your information only in the following situations:

• Service Providers: We share data with trusted third-party vendors who assist us in operating our Service (e.g., Firebase for authentication and database hosting, Google Analytics for usage tracking). These providers are bound by strict confidentiality agreements.
• Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).
• Business Transfers: In the event of a merger, acquisition, or asset sale, your personal information may be transferred as a business asset.

4. Data Retention and Deletion

We retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy.

Account Deletion: You can request the deletion of your account and associated data at any time through the settings menu within the Doku app, or by contacting us directly. Upon receiving a deletion request, we will process it within a 30-day period, after which your personal data will be permanently removed from our active systems, except where retention is required by law.

5. Security of Your Data

We use administrative, technical, and physical security measures to help protect your personal information, including encryption in transit (TLS/SSL) and secure authentication via Firebase. However, please be aware that no method of transmission over the internet or method of electronic storage is 100% secure.

6. Children's Privacy

Our Service does not address anyone under the age of 13. We do not knowingly collect personally identifiable information from children under 13. If you are a parent or guardian and you are aware that your child has provided us with personal data, please contact us. If we become aware that we have collected personal data from a child under 13 without verification of parental consent, we take steps to remove that information from our servers.

7. Your Privacy Rights (GDPR & CCPA/CPRA)

Depending on your location, you may have specific rights regarding your personal data:

For Users in the European Economic Area (GDPR)

If you are a resident of the EEA, our legal basis for collecting and using your personal information depends on the context: we need it to perform a contract with you (Terms of Service), you have given us permission to do so, or it is in our legitimate interests. You have the right to:

• Access, update, or delete your personal information.
• Object to or restrict the processing of your data.
• Data portability.
• Withdraw consent at any time.
• Lodge a complaint with a Data Protection Authority.

For California Residents (CCPA/CPRA)

The California Consumer Privacy Act provides California consumers with specific rights:

• Right to Know: You can request details about the categories and specific pieces of personal information we have collected about you over the past 12 months.
• Right to Delete: You can request the deletion of your personal information.
• Right to Correct: You can request correction of inaccurate personal data.
• Right to Opt-Out: We do not "sell" your personal information as defined by the CCPA. However, we may "share" usage data with analytics and advertising partners. You have the right to opt-out of this sharing.
• Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

To exercise any of these rights, please contact us at [email protected]. We will verify your request and respond within the legally required timeframe (usually 45 days).

8. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top. You are advised to review this Privacy Policy periodically for any changes.

9. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

• Email: [email protected]
• Developer: KumaStories Ltd