Privacy Policy
Last updated: October 4, 2026
This Privacy Policy explains how Kumaya World LLC ("we," "us," or "our") collects, uses, shares, and protects your information when you use the Kumaya World website, placement quizzes, games, paths, and Kumayan Portal (the "Service").
1. Information We Collect
We collect information in the following ways:
You give it to us directly:
- Email address (when you complete the placement quiz, create an account, or contact us).
- Name (when you set up your portal account).
- Placement quiz responses, archetype selections, and the path the placement quiz routes you to.
- Vision Chamber inputs (the words and intentions you submit to generate enhanced text, images, and audio affirmations).
- Body-map markings, breathing-game results, panic-radar responses, and other in-game activity you choose to save.
- Guidebook-completion proof files (images or PDFs you upload to verify a chapter).
- Reflections, vision text, and any other content you submit through the portal or community area.
- Payment details, handled directly by Stripe; we never see or store your full card number.
We collect automatically:
- Device, browser, IP address, and approximate location.
- With your analytics consent, visits to public pages and general browser/device information. Page URLs and referrers sent to Google Analytics omit query details.
- Cookies and similar technologies used to keep you logged in, remember your preferences, and measure how the Service performs.
2. How We Use Your Information
- To deliver the Service: your placement quiz results, your personalized path, your portal access, and the in-game experiences you've started.
- To process payments and manage your enrollment.
- To enhance your Vision Chamber inputs into images, text, and audio.
- To send you transactional emails (receipts, account confirmations, path updates) and, with your permission, marketing emails about new content or programs.
- To improve the Service: understand which paths and games help students most, fix bugs, and design new features.
- To keep the Service safe: detect fraud, abuse, or technical attacks.
- To meet our legal obligations.
3. Third-Party Services We Use
To run Kumaya World, we share the minimum necessary information with trusted providers:
| Provider | What it does | What it receives |
|---|---|---|
| Stripe | Processes your payments | Email, billing details, payment method (handled by Stripe directly) |
| OpenAI | Powers the Vision Chamber (text, image, audio generation) | The text prompts you submit to the Vision Chamber |
| Resend | Sends transactional and notification emails | Your email address and the message we're sending you |
| Google Translate | Translates the site into other languages | The page content you choose to translate |
| Google Analytics | Measures visits to public pages only after you accept analytics | Page paths and referrers (without query details), general browser and device information, and approximate location |
| UserWay | Provides an accessibility widget | Standard browser/device information |
| Replit | Hosts the Service and database | All data stored or processed by the Service |
These providers act on our behalf and are bound by their own privacy and data-processing terms.
4. How Long We Keep Your Information
We keep your account and progress data for as long as your account is active or as needed to provide the Service. Payment records are kept as required by tax and accounting laws (typically 7 years). You can ask us to delete your account at any time (see Section 7).
5. Cookies
We use a small number of cookies and local-storage entries to remember whether you've completed certain games, the path you've enrolled in, your language preference, and your login status. These essential features do not depend on accepting Google Analytics.
Optional Google Analytics: We ask for consent from all visitors. Google Analytics is not loaded until you choose Accept analytics, or return with a valid saved acceptance. If you reject or do not choose, it stays off. Advertising storage, advertising user data, and advertising personalization remain denied even when you accept analytics. Google Analytics does not run on sign-in, student portal, investor, or preview pages. We also keep it off when your browser sends Global Privacy Control.
We remember your analytics choice in this browser's local storage for 180 days, unless your browser blocks storage or you clear it. Use Analytics preferences on any public page, or the button below, to change your choice at any time. Rejecting turns measurement off and removes Google Analytics cookies accessible to this site; it does not sign you out or interrupt checkout. If a choice cannot be saved, we tell you and apply it only to the current page.
Other third-party providers (such as Google Translate or the accessibility widget) may set their own cookies. The analytics choice controls Google Analytics, not these other services. You can clear cookies in your browser settings; clearing essential cookies may sign you out and reset some preferences.
6. Children
Kumaya World is intended for adults (18+). We do not knowingly collect information from children under 13 (or under 16 in some jurisdictions). If you believe we have collected information from a child, please email connect@kumayaworld.com and we will delete it.
7. Your Rights
Depending on where you live, you may have the right to:
- Access the personal data we hold about you.
- Correct data that is inaccurate or incomplete.
- Delete your account and personal data ("right to be forgotten").
- Export your data in a portable format.
- Object to or restrict certain processing.
- Withdraw consent for marketing emails at any time (every email contains an unsubscribe link), or for Google Analytics using Analytics preferences.
To exercise any of these rights, email connect@kumayaworld.com from the email address tied to your account. We will respond within 30 days.
Residents of California (CCPA): You have the right to know what personal information we collect, to request deletion, and to opt out of the "sale" or "sharing" of personal information. We do not sell your personal information.
Residents of the EU/UK (GDPR): Our legal bases for processing your data are: contract (delivering the Service you signed up for), legitimate interest (improving and securing the Service), consent (marketing emails and optional Google Analytics), and legal obligation (tax/accounting records). You also have the right to lodge a complaint with your local data-protection authority.
8. How We Protect Your Information
We use industry-standard safeguards including HTTPS encryption in transit, encrypted database storage, access controls, and limited employee/contractor access. No system is 100% secure. If we ever experience a data breach affecting your information, we will notify you and the relevant authorities as required by law.
9. International Transfers
Our servers and several of our third-party providers are based in the United States. If you access the Service from outside the U.S., your information will be transferred to and processed in the U.S., which may have different data-protection laws than your country.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we'll update the "Last updated" date at the top and, when appropriate, notify you by email or through the Service.
11. Contact
Questions about this policy or the data we hold? Reach us at:
Kumaya World LLC
Email: connect@kumayaworld.com
Address: 2722 Erie Ave Ste 219, Cincinnati OH 45208