Privacy policy
This notice explains what personal information Kumbukumbu (kumbukumbu.app and app.kumbukumbu.app) collects, how it is used, who it is shared with, and the choices you have. It covers two kinds of people: the person who buys a recording (usually a son or daughter) and the person whose story is recorded (usually a parent). The fuller QuestionPunk privacy notice, which this one follows, is at questionpunk.com/legal.
What we collect
- From the buyer: your email address (for the receipt and the interview link), the name and language of the person you want recorded, and payment confirmation from Stripe. We never see or store your card details. If you use the contact form we also keep your name, the email address or WhatsApp number you give us for the reply, and your question.
- From the storyteller: the audio of the interview, the transcript made from it, and the language spoken. The interview link is the only thing they need; no account, app or password.
- Automatically: the pages you visit on this site, the buttons you click, your approximate location from your IP address, your browser and device type, and the advert that brought you here (UTM parameters). We use PostHog for this and the Meta pixel for advertising measurement.
How we use it
- To run the interview, make the transcript, and deliver the recording and transcript to the buyer.
- To send the receipt, the setup link, the interview link, and replies to questions you send us.
- To understand which parts of the site and which adverts work, and to show adverts to people who visited the site.
- To keep the service secure and to meet legal obligations.
Recordings and transcripts are for the family that bought them. We do not use them for advertising, we do not sell them, and we do not use them to train AI models.
Who we share it with
We use service providers to run Kumbukumbu, each bound to process data only on our instructions: Stripe (payment), Vercel, Amazon Web Services and Supabase (hosting and database), Trigger.dev (background processing of recordings and transcripts), speech-to-text and AI providers that conduct and transcribe the interview (currently Anthropic, OpenAI, Google, Deepgram and ElevenLabs), LiveKit (voice transport), Postmark (email), Attio (our contact records), Slack (internal notifications), PostHog (analytics) and Meta (advertising measurement). The current list of QuestionPunk sub-processors is kept at questionpunk.com/legal. We may also disclose information when the law requires it or to protect the rights and safety of our users.
How long we keep it
Recordings and transcripts are kept so the family can come back to them, for as long as the buyer wants them. Ask us and we delete them. Buyer contact details are kept while you use the service and for our records afterwards. Analytics data is kept in aggregate.
Your rights
Wherever you live, you can ask us to show you the personal information we hold about you or the person you recorded, correct it, delete it, or send you a copy. The storyteller can ask for this directly, without going through the buyer. Write to privacy@questionpunk.com or hello@kumbukumbu.app.
Data subjects in Kenya
For people in Kenya, BIALEROLOGY LLC is the data controller under the Data Protection Act, 2019. Your data is processed principally in the United States; public authorities there may be able to access it under their own laws. You have the rights of access, correction, deletion, objection and portability. We handle requests within a reasonable period and in compliance with applicable legal requirements. We notify affected people and the relevant authorities of data breaches as required by applicable law. You may also complain to the ODPC at odpc.go.ke.
Residents of the EU, the UK and Switzerland
You may lodge a complaint with your local supervisory authority. Our EU representative is Prighter Group: app.prighter.com/portal/18312215147.
Children
The service is for adults. We do not knowingly collect personal information from children under 13, and a buyer must be 18 or older.
Security
Data is encrypted in transit and at rest with our providers, and access inside the company is limited to the people who deliver the service. No system is completely secure, and we cannot guarantee the security of information you send us.
Changes
We may update this notice. The date at the top tells you when. If a change matters, we email the buyers we have an address for.
Contact
BIALEROLOGY LLC · hello@kumbukumbu.app · privacy requests: privacy@questionpunk.com