KUMILIKE PRIVACY POLICY Version: 14 October 2026
1. DATA CONTROLLER Controller: PROXEMICS TECHNOLOGIES, S.L. Spanish tax ID (NIF): B05717475 (with ES prefix: ESB05717475) Registered office: Calle Los Segadores, 7, 10650 Ahigal, Cáceres, España Registered at Registro Mercantil de Cáceres, sheet CC-18558, entry 1. Legal contact: legal@kumilike.com Privacy: privacidad@kumilike.com Support: social@kumilike.com Website: https://www.kumilike.com Privacy contact: privacidad@kumilike.com Legal contact: legal@kumilike.com Web: kumilike.com
2. DATA WE PROCESS Depending on how KUMILIKE is used, we may process registration and account data such as display name, username, email, phone number, hashed password, date of birth, country, city and language; profile information such as photo, biography and occupation; posts, comments, reactions, follows, communities and messages; optional interest preferences; technical and security data such as session identifiers, access logs, device information, crash data and anti-fraud signals; and information related to reports, moderation and security actions. A full date of birth, phone number and email address are not automatically made public by registration.
3. PURPOSES AND LEGAL BASES We process data needed to create and manage accounts, authenticate users, provide requested features, maintain preferences, handle posts and interactions and secure the service on the basis of performance of the contract. We process certain data to prevent fraud, abuse and unauthorized access, protect the community, improve safety and defend rights on the basis of legitimate interests balanced against individual rights. We process data where necessary to comply with legal obligations, valid authority requests or claims. Where an optional feature relies on consent, consent will be requested separately and can be withdrawn without affecting prior lawful processing.
4. AGE KUMILIKE sets a minimum age of 18 for personal accounts. Date of birth is used to verify eligibility and apply age protections. We do not intend to provide personal accounts to users below that age.
5. PUBLIC AND PRIVATE DATA Users control, within available settings, what they publish and with whom they share it. Public content may be viewed by others and may in some cases be shared through links or external services. Users should avoid posting unnecessary sensitive information.
6. INTERESTS AND PERSONALISATION During onboarding, users may optionally choose interests to tailor their experience. This step can be skipped. Interests are linked to the specific account with controls designed to prevent cross-account mixing.
7. MODERATION, SAFETY AND AUTOMATED SYSTEMS KUMILIKE may use automated systems, including artificial intelligence, together with human review to detect spam, fraud, abuse, prohibited content, security risks and policy breaches. Activity signals may also be used to rank content and improve the experience. We do not intend to make solely automated decisions producing legal or similarly significant effects without the safeguards required by law.
8. RECIPIENTS AND PROCESSORS Limited access may be given to service providers acting for KUMILIKE for cloud infrastructure, storage, phone authentication, email delivery, security, technical support, strictly necessary analytics and payment processing when paid services are enabled. Such providers must process data under appropriate instructions and safeguards. Data may also be disclosed when legally required or necessary to establish, exercise or defend legal claims.
9. INTERNATIONAL TRANSFERS Where a provider processes data outside the European Economic Area, legally required transfer mechanisms such as adequacy decisions, Standard Contractual Clauses or other valid safeguards will be used.
10. RETENTION Account data is retained while the account is active and afterwards for periods needed to meet legal obligations, resolve disputes, prevent fraud and defend rights. Email verification codes have limited validity and are not retained as reusable passwords. The app may securely retain information needed to resume an interrupted phone registration for up to 7 days, without storing the SMS code. A pending profile image may remain locally for up to 24 hours to complete upload. Shorter technical or security retention periods may apply where data is no longer needed.
11. SECURITY We use technical and organisational measures designed to protect data against unauthorized access, loss, alteration or disclosure. Authentication credentials and tokens are stored using platform-appropriate security mechanisms where applicable.
12. RIGHTS Individuals may request access, rectification, erasure, restriction, objection and portability where applicable, and may withdraw consent for optional processing. Requests may be sent to privacidad@kumilike.com. Reasonable information may be requested to verify identity. A complaint may also be lodged with the Spanish Data Protection Agency or another competent supervisory authority.
13. ACCOUNT DELETION Account deletion affects associated personal data in accordance with applicable law and legitimate retention periods. Some information may be retained where legally required or necessary for security or legal claims.
14. CHANGES This Policy may be updated to reflect legal, technical or functional changes. Material changes will be communicated appropriately. The version date and revision are shown in the document.
15. CONTACT Privacy: privacidad@kumilike.com Legal: legal@kumilike.com Web: kumilike.com
ADDITIONAL INFORMATION FOR THE WEBSITE AND APP 31 October 2026
Camera, microphone, photos and videos are used for the capture, broadcasting, selection and publication features you request. Selected files are uploaded when you complete an upload, publication or sending action. Precise or approximate device location, when requested by a feature, is distinct from the country and city you enter at registration. You can manage these permissions in device or browser settings.
Messages and recordings: messages are addressed to their participants and are not offered as end-to-end encrypted. Recordings you save in the browser may remain on that device until you remove them; recipients may keep copies of content they have received.
Providers and purchases: available features may use Google Cloud for infrastructure, storage and content safety analysis; Firebase for phone verification and notifications; email and live broadcasting providers; and Google Play or Stripe for purchases and subscriptions according to the channel. We process transaction identifiers, products, amounts and statuses needed to verify purchases, manage entitlements and handle refunds or legal duties. The safeguards and rights in the preceding sections also apply to these activities.
Deletion: request it in account settings or through https://www.kumilike.com/account-deletion without signing in, by emailing social@kumilike.com. We verify ownership proportionately; we do not ask for passwords or OTPs by email. The request deactivates the account and schedules deletion after a 30-day grace period. Purging removes or dissociates associated data and files; minimum transaction evidence and data needed for legal duties, security or claims may be retained for the period applicable to that purpose. Technical backups follow their retention cycle and are not used to reactivate the account.