1. Overview

Kumalicious is a mobile monitoring client for self-hosted Uptime Kuma instances. This policy explains what data the app handles, how it is stored, and what is shared with third parties.

2. Data Stored on Your Device

Kumalicious stores the following data exclusively on your device using Android Keystore / iOS Secure Enclave (via encrypted secure storage). This data is never transmitted to the developer or any third party.

What we do NOT collect

• Analytics or usage statistics
• Crash reports
• Advertising identifiers
• Location data
• Contacts, camera, microphone, or file access

3. Network Communication

The app communicates exclusively with:

• Your own Uptime Kuma server — via Socket.IO (WebSocket / HTTP long-polling) to receive real-time monitor status updates. The server address is one you provide and control.
• Google Play Billing / Apple App Store — solely to process the optional one-time Pro purchase. This communication is handled entirely by Google / Apple; we do not receive or store your payment details.

No data is sent to any server operated by the developer.

4. In-App Purchases

Kumalicious offers an optional one-time purchase (Kumalicious Pro) to unlock additional features.

• Payments are processed by Google Play (Android) or Apple App Store (iOS).
• We receive only a confirmation that the purchase was completed — no payment details, card numbers, or billing addresses.
• Purchase status is stored encrypted on your device.

For questions about billing, refunds, or payment data, please contact Google or Apple support directly.
Google Play Privacy Policy: policies.google.com/privacy
Apple Privacy Policy: apple.com/legal/privacy

5. Data Sharing

We do not share any data with third parties. There are no advertising networks, analytics providers, or data brokers involved.

6. Data Retention and Deletion

All data stored by Kumalicious resides on your device.

• To delete all app data: uninstall the app. This permanently removes all stored credentials and settings.
• No data is held on any server operated by the developer, so no additional deletion request is necessary.

7. Children's Privacy

Kumalicious is a technical tool intended for adults who operate self-hosted infrastructure. The app is not directed at children under the age of 13 and does not knowingly collect data from children.

8. Changes to This Policy

If we make material changes to this policy (e.g. if analytics or crash reporting are added in a future version), the updated policy will be published here and the "Last updated" date will be revised. Continued use of the app after changes constitutes acceptance of the updated policy.

9. Contact

For privacy-related questions or requests:
Said El Mallouki
St. Goar, Deutschland
appstores@mallouki.de

10. Impressum (gem. § 5 TMG)