Privacy Policy
Kaminu collects what it needs to work — your account, your progress and your notes — and nothing for advertising. We don't sell your data, we don't show ads, and the app has no tracking or analytics SDKs.
Contents
1. Who we are
Kaminu is operated by MPCSJ EMPREENDIMENTOS LTDA - ME (CNPJ 46.542.268/0001-56), a company registered in Brazil ("we", "us"). We are the controller of the personal data described here. This policy covers the Kaminu app for iOS and Android, the servers it talks to, and this website.
For anything about your privacy, write to contact@mpcsj.com.
2. What we collect
- Account details. Your name, email address and password if you sign up with email. The password is stored only as a one-way hash; we can't read it. If you sign in with Google or Apple, we receive an account identifier from them and, if you share them, your name and email. Apple lets you hide your email behind a relay address, and we accept that.
- Guest use. You can start without an account. A guest has no name, email or password — only a random identifier stored on your device. If you later create an account, your guest progress and notes move into it.
- Your study. The lessons you complete, the course you're on, your streak and hearts, the day you were last active, your app language and your time zone (so your streak counts your days, not ours).
- Notes, highlights and questions. The verses you highlight, the notes you write, and the questions you ask the study companion along with its answers. We count your questions each month to apply the free limit.
- Subscription status. If you buy Kaminu Plus: whether it's active, which store sold it, the product, and when it renews or ends. Payment is handled entirely by Apple or Google; we never see your card or billing details.
- Notifications. If you allow notifications, a push token for your device and its platform (iOS or Android), and the notifications we've sent you, which appear in the app's inbox.
- Support messages. What you write to us in a support request, and our replies.
- Technical data. Our servers briefly record requests — IP address, time, the address requested and any error — to keep the service running and secure.
We don't collect your location, contacts, photos or advertising identifiers.
3. How we use it
- to run Kaminu: keep your progress and streak, and sync your notes across your devices;
- to answer the questions you ask the study companion;
- to manage your subscription and apply the Free and Plus limits;
- to send the reminders you've allowed — you can turn them off at any time in your device settings;
- to answer your support requests;
- to keep the service secure and prevent abuse;
- to meet our legal obligations.
We don't sell or rent your personal data, we don't use it for advertising, and we don't use your notes or questions to train AI models.
4. Legal bases
Under Brazil's LGPD and, where it applies, the European GDPR, we process your data:
- to perform our contract with you — your account, progress, notes, questions and subscription;
- on our legitimate interests — security, abuse prevention, technical logs and improving Kaminu, always weighed against your rights;
- with your consent — push notifications, which you can withdraw in your device settings;
- to comply with the law — for example, records we are required to keep.
5. The study companion (AI)
When you ask a question, we send the verse you highlighted, the passage around it, your question and the earlier messages in that conversation to OpenRouter, which passes them to the AI model that writes the answer (for example, Anthropic's Claude). We don't send your name, email or account identifier. The answer is saved in your account as a note so you can come back to it.
Please don't include personal information in a question that you wouldn't want processed this way.
The word explanations in the interlinear are generated once per word, not per person, and involve no personal data.
7. International transfers
Your data is stored in Brazil. Some providers above — including OpenRouter, the AI model providers, RevenueCat, Expo and Cloudflare — process data in the United States or other countries. When that happens, we rely on the safeguards the LGPD and the GDPR allow, such as standard contractual clauses in our providers' data processing terms.
8. How long we keep it
- Account data — profile, progress, notes, questions and support requests — for as long as your account exists.
- Guest data not linked to an account may be deleted after a long period of inactivity.
- Technical logs, for a limited period, and then they are deleted.
- Records we must keep by law, for as long as the law requires.
When you delete your account, we delete its data within 30 days. Copies in backups are removed as those backups expire.
9. Deleting your account
In the app: open Profile → Account details → Delete account. We delete your Kaminu account and the data linked to it — profile, progress, notes, highlights, questions, support requests and push tokens — right away. If you signed in with Apple, we also revoke Kaminu's access to your Apple ID.
If you can't use the app, email contact@mpcsj.com from the address on your account, with the subject "Delete my account". If you signed in with Apple using a hidden email, tell us that relay address. We'll confirm your request and complete the deletion within 30 days.
Deleting your account does not cancel a Plus subscription. Cancel it in the App Store or Google Play first, since only the store can stop billing.
10. Your rights
Depending on where you live, you have the right to:
- confirm that we process your data, and get a copy of it;
- correct data that is incomplete or wrong;
- have your data deleted, anonymized or blocked;
- receive your data in a portable format;
- know who we share it with;
- object to or restrict processing, and withdraw consent;
- complain to a data protection authority — the ANPD in Brazil, or your local supervisory authority in the EU, EEA or UK.
If you live in California, you also have the right to know, delete and correct your personal information, and not to be discriminated against for exercising these rights. We don't sell personal information or share it for cross-context behavioral advertising.
To use any of these rights, write to contact@mpcsj.com. We answer within the time the law gives us, and usually much sooner. You can also change your name and language in the app.
11. Children
Kaminu is not directed at children under 13, and we don't knowingly collect their data. If you believe a child under 13 has given us personal data, write to contact@mpcsj.com and we will delete it. Where local law requires a parent's consent to process a teenager's data, that consent is needed to use Kaminu.
12. Security
Data travels over encrypted connections (HTTPS), passwords are stored only as hashes, your sign-in token is kept in your device's secure storage, and access to our systems is restricted. No system is perfectly secure; if an incident affects your data, we will notify you and the authorities as the law requires.
13. This website
This website has no ads and no analytics. It sets one cookie, kaminu-locale, which remembers the language you picked for a year. Fonts are served from our own domain. Our hosting provider keeps standard request logs.
14. Changes to this policy
When we update this policy, we change the date at the top. When a change is material, we will tell you in the app or by email before it takes effect.
15. Contact
MPCSJ EMPREENDIMENTOS LTDA - ME (CNPJ 46.542.268/0001-56). Our data protection contact (in Brazil, the "encarregado") can be reached at contact@mpcsj.com.