Privacy Policy
Last updated: May 5, 2026
This Privacy Policy explains how Kumaya World LLC ("we," "us," or "our") collects, uses, shares, and protects your information when you use the Kumaya World website, assessments, games, paths, and Kumayan Portal (the "Service").
1. Information We Collect
We collect information in the following ways:
You give it to us directly:
- Email address (when you complete the assessment, create an account, or contact us).
- Name (when you set up your portal account).
- Assessment responses, archetype selections, and the path the assessment routes you to.
- Vision Chamber inputs (the words and intentions you submit to generate enhanced text, images, and audio affirmations).
- Body-map markings, breathing-game results, panic-radar responses, and other in-game activity you choose to save.
- Guidebook-completion proof files (images or PDFs you upload to verify a chapter).
- Reflections, vision text, and any other content you submit through the portal or community area.
- Payment details — handled directly by Stripe; we never see or store your full card number.
We collect automatically:
- Device, browser, IP address, and approximate location.
- Pages you visit, links you click, and timing of those events.
- Cookies and similar technologies used to keep you logged in, remember your preferences, and measure how the Service performs.
2. How We Use Your Information
- To deliver the Service — your assessment results, your personalized path, your portal access, and the in-game experiences you've started.
- To process payments and manage your enrollment.
- To enhance your Vision Chamber inputs into images, text, and audio.
- To send you transactional emails (receipts, account confirmations, path updates) and, with your permission, marketing emails about new content or programs.
- To improve the Service — understand which paths and games help students most, fix bugs, and design new features.
- To keep the Service safe — detect fraud, abuse, or technical attacks.
- To meet our legal obligations.
3. Third-Party Services We Use
To run Kumaya World, we share the minimum necessary information with trusted providers:
| Provider | What it does | What it receives |
|---|---|---|
| Stripe | Processes your payments | Email, billing details, payment method (handled by Stripe directly) |
| OpenAI | Powers the Vision Chamber (text, image, audio generation) | The text prompts you submit to the Vision Chamber |
| Resend | Sends transactional and notification emails | Your email address and the message we're sending you |
| Google Translate | Translates the site into other languages | The page content you choose to translate |
| UserWay | Provides an accessibility widget | Standard browser/device information |
| Replit | Hosts the Service and database | All data stored or processed by the Service |
These providers act on our behalf and are bound by their own privacy and data-processing terms.
4. How Long We Keep Your Information
We keep your account and progress data for as long as your account is active or as needed to provide the Service. Payment records are kept as required by tax and accounting laws (typically 7 years). You can ask us to delete your account at any time (see Section 7).
5. Cookies
We use a small number of cookies and local-storage entries to remember whether you've completed certain games, the path you've enrolled in, your language preference, and your login status. Some third-party providers (such as Google Translate or the accessibility widget) may set their own cookies. You can clear cookies in your browser settings; doing so may sign you out and reset some preferences.
6. Children
Kumaya World is intended for adults (18+). We do not knowingly collect information from children under 13 (or under 16 in some jurisdictions). If you believe we have collected information from a child, please email connect@kumayaworld.com and we will delete it.
7. Your Rights
Depending on where you live, you may have the right to:
- Access the personal data we hold about you.
- Correct data that is inaccurate or incomplete.
- Delete your account and personal data ("right to be forgotten").
- Export your data in a portable format.
- Object to or restrict certain processing.
- Withdraw consent for marketing emails at any time (every email contains an unsubscribe link).
To exercise any of these rights, email connect@kumayaworld.com from the email address tied to your account. We will respond within 30 days.
Residents of California (CCPA): You have the right to know what personal information we collect, to request deletion, and to opt out of the "sale" or "sharing" of personal information. We do not sell your personal information.
Residents of the EU/UK (GDPR): Our legal bases for processing your data are: contract (delivering the Service you signed up for), legitimate interest (improving and securing the Service), consent (marketing emails), and legal obligation (tax/accounting records). You also have the right to lodge a complaint with your local data-protection authority.
8. How We Protect Your Information
We use industry-standard safeguards including HTTPS encryption in transit, encrypted database storage, access controls, and limited employee/contractor access. No system is 100% secure — if we ever experience a data breach affecting your information, we will notify you and the relevant authorities as required by law.
9. International Transfers
Our servers and several of our third-party providers are based in the United States. If you access the Service from outside the U.S., your information will be transferred to and processed in the U.S., which may have different data-protection laws than your country.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we'll update the "Last updated" date at the top and, when appropriate, notify you by email or through the Service.
11. Contact
Questions about this policy or the data we hold? Reach us at:
Kumaya World LLC
Email: connect@kumayaworld.com
Address: 2722 Erie Ave Ste 219, Cincinnati OH 45208