KIMCURA
ESEN
Open Kimcura

Data Safety Form

Updated October 3, 2026 · Based on a code audit of the app

For full details on uses, providers and your rights, see the Privacy Policy.

Data the app collects

Personal info

  • Email address: Account management: sign-in, ban enforcement, privacy-flow emails, service notices and promotional emails (with an unsubscribe link). If the account is banned, the email is kept to prevent re-registration. Optional. Shared with Google (identity provider), Supabase (auth and database, AWS USA) and Twilio SendGrid (email delivery, USA). You can delete it.
  • Name (Google display name) and Google profile-picture URL: Account management. Stored from your Google account at sign-in. The picture is not shown to other people; on the web version only you see it next to your comments. Optional. Shared with Google (source) and Supabase (database). You can delete it.
  • User ID (UUID, assigned to everyone including guests), random public username and optional bio: App functionality: keys your server-side records. The username and bio are your public identity shown to other players and are editable. Other plaza players’ apps also receive the identifier, although it is not displayed. Required. Shared with Supabase (database) and RevenueCat (account identifier, in the Android app). You can delete it.
  • Birth month and year, age band and consent history (including acceptance of the Terms and the policy): Legal compliance: applying age-based rules and being able to demonstrate each consent decision. The mobile app sends the age band and the history to the server; the web version also stores the birth month and year on the account. Required. Shared with Supabase (database). You can delete it.
  • Responsible adult’s email (only if you declare you are under 14): Intended for requesting the adult’s authorization. Today it is stored but the confirmation email is not yet sent, and it has no defined deletion period. Optional. Shared with Supabase (database). Deletion via email request.

Messages

  • Comments and replies on exercises (500 characters max): Social feed functionality. Screened by an automatic moderation filter (profanity, contact info, links); violating comments are hidden. Copies of the text may be kept in reports and notifications even after you delete the comment. Optional. Not shared with third parties. You can delete it.

App activity

  • Likes and saves on exercises, comment likes: App functionality and a feed-personalization signal. You can remove each reaction at any time. Optional. Not shared with third parties. You can delete it.
  • Behavioral telemetry: impressions, dwell time, solves, wrong attempts, skips, scroll-backs, feed switches, session start and end, app foreground/background, social actions (without comment text), opening hints, solutions, scratchpad and theory, and video playback, with per-session skill-vector snapshots: Improving the exercise sequence and understanding which content works. It is keyed to your user identifier. Only collected if you switch telemetry on; you can switch it off in You ▸ Privacy. Kept for 24 months and erased when you delete your account. Optional. Not shared with third parties. You can delete it.
  • Math skill-mastery vector and target vector, seeded from your grade and ability tier: Personalization: drives which exercises are recommended to you. It is part of the service and does not depend on the personalization consent. Required. Not shared with third parties. You can delete it.
  • Onboarding answers: goal, grade, plans after school and comfort per topic area: Functionality: they seed your feed and are stored on your account so you are not asked again on another device. Required. Not shared with third parties. You can delete it.
  • Practice-test and quiz attempts: the answer to each question, score and time: Functionality: showing you your results and deriving aggregate statistics for each test. Required. Not shared with third parties. You can delete it.
  • XP total and practice-event scores: Leaderboards: the top places are shown to other people with your username and avatar outfit, even if you have social features switched off. Event scores are kept for 60 days. Required. Not shared with third parties. You can delete it.
  • PvP duel win/loss tally: Functionality: the lobby comparison card shows your cumulative wins and losses to other players. Live duels are relayed in memory and never stored. Optional. Not shared with third parties. You can delete it.
  • Owned and equipped avatar cosmetics (item IDs only): Functionality and personalization: your avatar outfit, visible to other players. Optional. Not shared with third parties. You can delete it.
  • User reports (reason code + optional detail up to 500 characters + reported-comment snapshot), exercise reports (reason + detail + problem-statement snapshot), and moderation sanctions (mutes and bans): Safety and moderation: reports go to a human review queue and are kept for 24 months even if the comment or the account is deleted; bans register the banned email. Optional. Not shared with third parties. Deletion via email request.
  • User-to-user blocks: Safety: a block hides both sides. They are erased when you delete your account. Optional. Not shared with third parties. You can delete it.
  • Notification log (replies, comment likes, system announcements) with comment-body snapshots: Functionality: the You-tab notifications list. The log keeps text snapshots even if the original comment is deleted. Optional. Not shared with third parties. You can delete it.
  • Ephemeral multiplayer presence: position, pose, emotes (fixed list, no free text), outfit, username and user ID, plus presence heartbeats with a random per-session ID: Functionality: the real-time 3D plaza and the “people online” counter. NOT persisted: it lives only in memory and vanishes within seconds or on service restart. The presence heartbeat is sent whenever the app is open. Required. Not shared with third parties. You can delete it.
  • In-app searches: Functionality: the text is sent to the server to return results and is not stored. Optional. Not shared with third parties. You can delete it.
  • On-device-only data: streaks, missions, hearts, practice statistics, last-session recap, vocational test result, feed-model state, preloaded exercises, your avatar image, parental controls (PIN, restrictions and minutes used) and preferences: App functionality. Not sent to our servers. In the mobile app the session tokens and the parental PIN go in the system’s secure storage and the rest in unencrypted local storage; cleared by uninstalling the app or clearing its data. Required. Not shared with third parties. You can delete it.

Device or other IDs

  • Device model, OS platform and app version attached to each telemetry session (on the web version, the browser’s identification string); not a unique hardware ID: Analytics: segmenting behavior by platform and device class. Only with telemetry switched on. Optional. Not shared with third parties. You can delete it.
  • Device push-notification token (Android, only if you allow notifications), a random installation identifier and your per-type notification preferences: Functionality: alerting you when someone replies to or likes one of your comments, and sending you team announcements or promotions. All types start switched on and each can be switched off separately in You ▸ Settings. Optional. Shared with Expo, Inc. (USA) and Google LLC — Firebase Cloud Messaging (USA), which receive the token and the content of each notification (it may include the username of the person who replied and an excerpt of their comment). You can delete it.

In-app purchases

  • Kimcura Plus subscription state, store purchase history and an identifier for your account; redeemed promo codes: Knowing whether you have access to paid features. Payment is processed by Google Play: we never receive or store your card details. RevenueCat receives your account identifier when you sign in to the Android app, whether or not you have a subscription. Required. Shared with RevenueCat Inc. (USA) and Google Play. You can delete it.
  • Subscription bought on the web version: payer email, plan, amount, currency, status and identifiers of the subscription and of each charge: Managing the subscription paid through Mercado Pago. Your card details are typed on Mercado Pago’s page and never pass through Kimcura. These records are kept even if you delete your account. Optional. Shared with Mercado Pago (processes the payment) and RevenueCat Inc. (USA, subscription state). Deletion via email request.

What Kimcura does NOT collect

Back to the home page