Privacy Policy

Last updated: 4th July 2026

This Privacy Policy explains how Sunny Javed trading as Software Link ("we", "us", "our"), a sole trader based in the United Kingdom, the operator of Kumo ("Kumo", the "Service"), collects, uses, and protects your personal data. We are the data controller for the personal data described here.

If you have any questions, contact us at sunny@softwarelink.co.uk.

1. Who this applies to

Kumo is an AI accountability companion that you interact with by text message (iMessage). This policy applies to everyone who signs up for or uses Kumo and to visitors of www.softwarelink.co.uk/kumo.

Kumo is intended only for users aged 16 or over. We do not knowingly collect data from anyone under that age (and never from children under 13).

2. The personal data we collect

You give us:

  • Your phone number (this is how we reach you over iMessage and how we identify your account).

  • Your first name (or whatever you tell us to call you) and, if you choose to share it, your age.

  • Your timezone / general location (e.g. "UK"), so we text you at sensible local times.

  • Your goals, obstacles, preferences, and the things you tell Kumo in conversation — including anything you choose to share about your habits, work, fitness, or wellbeing.

  • Photos you send (e.g. "proof" pictures), which are analysed to respond to you.

  • Your check-in schedule and reminder preferences.

Collected automatically or via our providers:

  • Message content and history (both your messages and Kumo's), so the conversation has continuity.

  • Payment and subscription information — handled by Stripe (see below); we receive your subscription status but not your full card details.

  • Usage/analytics events (e.g. that you completed onboarding, started checkout) via Mixpanel.

  • Website data (e.g. cookies/analytics) — see our Cookie Policy.

Sensitive information. Because Kumo is conversational, you may choose to share information that is "special category" data under UK GDPR (for example, references to your health or mental wellbeing). We only process this to provide the Service, and by using Kumo and continuing to share such information you give your explicit consent to us processing it for that purpose. Please only share what you're comfortable with.

3. Why we use your data, and our lawful basis

PurposeLawful basis (UK GDPR)Provide the Service (reply to you, send scheduled check-ins/reminders, keep context)Performance of a contractTake payment and manage your subscriptionPerformance of a contractProcess any sensitive information you share in chatExplicit consentSend you the automated accountability texts you signed up forConsent / performance of a contractImprove and secure the Service, prevent abuseLegitimate interestsProduct analyticsConsent (where required) / legitimate interestsComply with legal obligations (e.g. tax, responding to lawful requests)Legal obligation

You can withdraw consent at any time (see Section 7). Withdrawing consent to receive messages, or to process the information needed to run Kumo, may mean we can no longer provide the Service.

4. Who we share your data with (sub-processors)

We do not sell your personal data. We share it with the service providers we rely on to run Kumo, each acting under a data-processing agreement with us:

  • OpenAI — processes your message text and any photos you send in order to generate Kumo's responses.

  • Supabase — database and hosting; stores your account, messages, and preferences.

  • Stripe — payment processing (cards and subscriptions). Stripe handles your card details directly; we do not store them.

  • Sendblue — delivers and receives your iMessages (including read receipts and typing indicators).

  • Mixpanel — product analytics.

We may also disclose data if required by law, to enforce our Terms, or to protect our rights, users, or the public.

5. International transfers

Some of our providers are based outside the UK (for example, in the United States). Where your data is transferred outside the UK, we rely on appropriate safeguards — such as the UK International Data Transfer Agreement/Addendum or Standard Contractual Clauses, and each provider's own transfer mechanisms — to protect it.

6. How long we keep your data

We keep your account data, message history, goals, check-in preferences, AI memory/logbook entries, and analytics records for as long as your Kumo account is active.

If you cancel or stop using Kumo, we may keep your account and message data for up to 12 months in case you return, unless you ask us to delete it sooner.

If you ask us to delete your data, we will delete or anonymise your personal data within 30 days, except where we need to keep limited records for legal, tax, accounting, fraud-prevention, dispute, or payment reasons.

We may keep payment, invoice, and transaction records for up to 6 years where required for tax/accounting purposes.

7. Your rights

Under UK GDPR you have the right to: access your data; ask us to correct or delete it; restrict or object to processing; withdraw consent; data portability; and to complain. To exercise any of these, email sunny@softwarelink.co.uk.

To stop receiving texts, reply STOP at any time, or ask Kumo to stop.

8. Security

We use reasonable technical and organisational measures to protect your data (for example, access controls and encryption in transit). No system is 100% secure, but we work to protect your information and will notify you and the ICO of a qualifying personal-data breach as required by law.

9. Automated messaging & AI

Kumo is an artificial-intelligence service, not a human. Your messages are processed by AI (see Section 4) to generate replies and to schedule proactive texts. Kumo does not make legally significant automated decisions about you.

10. Children

Kumo is not directed at children. If you believe someone under 16 has provided us data, contact us and we will delete it.

11. Changes to this policy

We may update this policy from time to time. We'll post the updated version here and change the "Last updated" date; significant changes may be notified to you directly.

12. Contact

Sunny Javed trading as Software Link

Email: sunny@softwarelink.co.uk