Who we are
Kumbaa is run by Arigato Consulting Pty Ltd, Sydney, Australia ("we"). Contact: support@kumbaa.app.
What we keep
- Your account: your email address and sign-in details, and which families you belong to and your role in each.
- Your family's archive: what members add: people and their details, family links, life stories, photographs and their captions, and the faces named in them. Contact details of living people are shown only to members.
- Billing: who pays for which family, and the plan. Card details are held by Stripe, never by us.
- Records of changes and access: who changed what in the tree, invitations, and server logs needed to keep the service secure.
What we never do
- We don't sell or rent your data, or show ads.
- We don't use your family's photographs, stories or details to train AI models, and we don't let anyone else do so.
- We don't make your archive public. It's closed to search engines and crawlers, and only signed-in members can see it.
- We don't share one family's archive with another, except where a member links their two families' trees, and then only with members of both.
Faces
Faces are found in your own browser when photos are added; the photographs aren't sent anywhere for this. What's kept is the position of each face and which person a member named it as, inside your family's archive.
AI features
Ask Kumbaa, photo suggestions and tree import use Anthropic's Claude. When a curator uses them, the question, and the photo or document involved, are sent to Anthropic to produce the answer. Anthropic doesn't train its models on this data. When you connect ChatGPT, Claude or another AI app yourself, that app receives what you ask it to read, under its own terms.
Who processes data for us
- Cloudflare: hosting, storage of the archive and photographs, and email.
- Clerk: accounts and sign-in.
- Stripe: payments.
- Anthropic: the AI features above, only when used.
Data may be stored or processed outside your country, including in Australia and the United States.
Cookies
Kumbaa uses only the cookies needed to keep you signed in. There are no advertising or tracking cookies.
Keeping, exporting and deleting
You can download a backup of the archive, any photo or whole albums at any time. We keep weekly backups for about a year to recover from mistakes. When a family's plan ends, the archive is deleted 30 days later; the owner can delete it sooner. You can ask us to delete your account, or to see or correct what we hold about you, by writing to support@kumbaa.app.
Children
A family archive may include children's names and photographs, added by their family. Accounts are for adults. Parents and guardians decide what about their children is added.
Changes
If this policy changes in a way that matters, we'll email account holders before it takes effect.