Privacy Policy

Kumo is designed to be private by default. We do not create accounts, we do not collect personal information, and we do not track you. Most of what the App does runs locally on your device and never reaches our servers.

We do not collect or store: your name, email, phone number, IP address for analytics, device identifiers, location, contacts, photos, or biometric data. There are no accounts to create and no sign-ups.

The App stores the following on your device only:

• Your chosen alias and connected wallet’s public key.
• Your local payment history (signatures, amounts, recipients).
• Your local contacts list.
• Queued offline payment intents (until broadcast).
• Optional on-device AI and voice models you choose to download.
• App preferences (airplane mode, privacy default, biometric prompt).

This data never leaves your device unless you explicitly broadcast a transaction or use a feature that requires the network.

When you broadcast a payment, the following information is sent to public infrastructure:

• Solana RPC providers receive signed transactions for inclusion on-chain. Public payments are visible on Solana Explorer; private payments are processed via MagicBlock’s private payments API.
• Mobile Wallet Adapter connects to the wallet you choose (Phantom, Solflare, Backpack, Glow, etc.). Your wallet receives signing requests and returns signatures. Your private keys never leave your wallet.
• Optional cloud intent parsing: if on-device AI is not enabled, the text you type may be sent to a stateless server that returns a parsed intent. The server does not log requests.

Solana is a public blockchain. Any payment you broadcast becomes permanently visible to anyone, including amounts, addresses, and timestamps for public SPL transfers. Private transfers via MagicBlock conceal amounts and counterparties from third parties but the transaction itself is still recorded on-chain. We cannot delete or modify on-chain data.

The App may request the following Android permissions:

• Internet: to broadcast transactions and query balances.
• Microphone: only if you enable voice input.
• Biometric: only if you enable biometric prompts before signing.
• Notifications: only to confirm completed payments.

All permissions are optional and you can revoke them in your device settings.

The App does not use cookies. The App does not include analytics, telemetry, ad networks, or third-party trackers.

Kumo is not directed at children under 13 and we do not knowingly collect any information from children.

To delete all local data, use Settings → Delete local data, or uninstall the App. There is no server-side data to request deletion of.

We may update this Privacy Policy. The “Last updated” date at the top reflects the latest revision. Material changes will be announced in-app where practical.

Questions? Open an issue at github.com/KumoPay.