Privacy Policy — Kramaya

Effective and last updated: August 25, 2026

Kramaya ("the app", "we", "us") is developed by Asfer. This policy explains what data the app collects, why, and how it's handled. It applies to the Kramaya mobile app and this website.

Information we collect

• Account information. When you create an account, we collect your email address (via Firebase Authentication) to identify your account and let you sign back in — either with a password or a passwordless email sign-in link.
• Content you create. The Templates, Instances, checklist items, and related plan data you create in the app are stored in your account so they sync and persist across sessions. This content is only accessible to your account.
• AI-assisted creation input. If you use the "describe a goal" AI feature, the free-text description and any follow-up answers you provide are sent to our server, which forwards them to a third-party AI provider — Google's Gemini API or Anthropic's Claude API — to generate a proposed plan for your review. Which provider handles a given request depends on our current configuration and on automatic failover if one provider is unavailable, so your input may be processed by either. This text may include whatever details you choose to type — avoid including sensitive personal information you wouldn't want processed by a third-party AI service.
• AI-assisted insights input. If you use the AI observations feature on the Insights screen, a summary of your tracking activity — including your checklist item labels and their completion counts — is sent to our server and forwarded to the same third-party AI provider to generate the observations shown back to you.
• Purchase information. If you subscribe to Kramaya Pro, the purchase is handled by Apple's App Store or Google Play. We (via RevenueCat, our subscription-management provider) receive purchase and subscription-status events tied to your account so we can grant entitlement — we never see or store your payment card details.
• Diagnostic data. Standard Firebase infrastructure logs (e.g. Cloud Functions invocation logs) may briefly retain request metadata for debugging and abuse prevention.

What we don't collect

We don't access your device contacts, photos, location, or other apps. Local notification scheduling for your reminders happens entirely on your device and is never sent to our servers.

How your data is stored and secured

App data is stored in Google Cloud Firestore under your account, and access is restricted by server-side security rules so only your authenticated account can read or write your data. Your subscription entitlement status is written only by our server after verifying a purchase receipt with Apple/Google — it can never be set directly by the app.

Third parties we use

• Google Firebase — authentication, database (Firestore), and serverless functions.
• Google (Gemini API) and Anthropic (Claude API) — either may process the free-text goal descriptions and AI-assisted insight requests you submit, solely to generate the proposed plan or observations shown back to you for review.
• RevenueCat, Apple App Store, and Google Play — process subscription purchases and report subscription status back to us.

We do not sell your data, and we do not use your content or AI-feature input to train models.

Data retention and deletion

We retain your account and content for as long as your account exists. To request deletion of your account and associated data, email us at appsbyasfer@gmail.com — we'll confirm once it's done.

Children's privacy

Kramaya is not directed at children under 13, and we do not knowingly collect data from children under 13.

Changes to this policy

If this policy changes, we'll update the date at the top of this page. Continued use of the app after a change means you accept the updated policy.

Contact

Questions about this policy or your data? Email appsbyasfer@gmail.com.