Privacy Policy

Last revised on:  FEBRUARY 19, 2025



Kyma, Inc. and its affiliates (collectively, “Kyma,” “we,” “our,” “us”) provides its Service (as defined below) to you through web sites under the control of Kyma and linked to this Privacy Policy (“Privacy Policy”) (collectively, the “Site”). The “Services” includes the Site and our “AI Generated Services,” which provide AI-powered data analysis and letter writing.

This Privacy Policy explains our privacy practices and the types of information that identify, relate to, describe, are reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household, as defined by applicable privacy laws (“Personal Data”), that we may collect or receive from the Services.

By accessing and using the Services or otherwise providing information to Kyma, you have consented to the terms of this Privacy Policy, and consent to our privacy practices described herein including our use and disclosure of your Personal Data. If you do not agree to the terms and conditions of this Privacy Policy, then please do not provide us with your information and please do not access or use the Services. Please note that if you choose to limit the information that you provide to us while using the Services, you may not be able to use or participate in certain features of the Services.


  1. MODIFICATIONS AND REVISIONS

We may update this Privacy Policy from time to time to reflect changes to our privacy practices. We will notify you of any changes to this Privacy Policy by posting the revised or updated Privacy Policy and its “Last Revised” date on the Services. If the revision or modification is material, we will provide you notification via email or via the Site. Your continued use of the Services after the “Last Revised” date constitutes your acceptance of and agreement to the Privacy Policy and its revisions or updates. You should periodically read this Privacy Policy to learn of any revisions or updates. 


  1. COLLECTION OF PERSONAL DATA

During your use of the Services, Kyma collects Personal Data about you in various ways, including:

  • Directly from you when you provide it to us

  • Direct integration with wearables upon your approval


  1. INFORMATION PROVIDED BY YOU

We may collect the following types of Personal Data and other information directly from you.  For example, when you use the Services to upload and analyze data, create an account or profile, or communicate with our team.  We may collect the following types of Personal Data:

  • Registration information, including name, email address, phone number, occupation, age, gender, location, and a password.

  • Information in Customer Records, including name, postal address, phone number, customer code;


  • You may be required to provide financial and bank information prior to purchasing the Services. Please note, we do not store financial and bank information; such information is securely processed and stored by Stripe, our payment processor. For more information on Stripe’s privacy practices, please visit: https://stripe.com/privacy.

  • Dear Future Me Letters, including information you provide as part of a letter to your future self. We do not intend to collect sensitive Personal Data.  Please do not provide sensitive Personal Data via these letters. 


  1. DATA PROVIDED FOR ANALYSIS VIA THE AI GENERATED SERVICES

YOU CONTROL WHAT INFORMATION YOU PROVIDE IN DEAR FUTURE ME LETTERS. WE WILL NOT KNOWINGLY PASS ANY IDENTIFYING INFORMATION TO OUR AI MODELS AND WE WILL USE COMMERCIALLY REASONABLE EFFORTS TO MINIMIZE THE INFORMATION WHICH MAY BE PASSED TO OUR AI MODEL.

YOU ACKNOWLEDGE AND AGREE THAT YOU WILL ONLY UPLOAD OR PROVIDE DATA TO US LAWFULLY, IN ACCORDANCE WITH OUR TERMS AND CONDITIONS AND USE RESTRICTIONS, AND WILL OBTAIN ALL NECESSARY CONSENTS TO ALLOW US TO PROCESS PROVIDED DATA.  WE WILL PROCESS DATA IN ACCORDANCE WITH GENERALLY APPLICABLE LAWS BINDING UPON US, WHICH MAY NOT INCLUDE SPECIFIC REGULATORY AND LEGAL REQUIREMENTS.  


  1. PURPOSE OF COLLECTION

Kyma may process your Personal Data for the following commercial purposes, in accordance with the practices described in this Privacy Policy: 


  • Provide the Services. We may use your Personal Data to provide the Services and any other services you may request from us. 

  • Monitor the Services. We collect your Personal Data for monitoring purposes to help us diagnose problems with our servers, administer and troubleshoot the Services, calculate usage levels, analyze industry standards, and analyze transactions, trends, and statistics regarding the use of the Services. 

  • Respond to Inquiries and Fulfill Requests.  We may use your Personal Data to respond to your inquiries and to fulfill your requests for information.

  • Communicate with You.  We may use your Personal Data to send you marketing information about the Services, special promotions, and other items that may be of interest to you.  

  • Improve the Services.  We may use your Personal Data to make the Services more stable and user-friendly, to analyze service issues, improve the design and content of the Services, personalize your experience, analyze how the Services is used, offer new services, and to develop new marketing programs relating to the Services. 

  • Customer Service. We may use your Personal Data when contacting you regarding customer service, the Services, or in response when you provide feedback. We may also use your information to send administrative emails regarding the Services or to inform you of any changes to this Policy, our Terms and Conditions, or our third-party partner’s Terms.

  • Support Business Operations. We may use your Personal Data to support our internal and business operations, including marketing, security, and advertising. 

  • Enforce Agreements. We may use your Personal Data to enforce separate agreements between you and us, enforce this Privacy Policy, our Terms and Conditions, or our third-party partner’s terms, or in connection with a transaction with a similar effect. 

  • Fulfill Other Purposes. We may use your Personal Data to fulfill: (a) any other purpose for which you provide it; (b) any legal or regulatory requirements and any of our internal policies; (c) other purposes disclosed at the time of collection; (d) any other purpose with your consent; and (e) any other purposes set forth in this Privacy Policy. 

 

  1. DISCLOSURE OF PERSONAL DATA

We may disclose and share your Personal Data with other parties as described below.  


  • Subsidiaries and Affiliates. We may disclose Personal Data about you to our subsidiaries and affiliates. for business purposes to help us provide the Services, underlying services, and to support our internal and business operations, including marketing, analytics, security, and advertising.

  • Service Providers & Contractors. To help us provide superior service, your Personal Data may be shared with our service providers, contractors, and other third parties we use to support our business and who will safeguard it in accordance with this Privacy Policy. Such third parties may help us with security, providing customer service, maintaining and analyzing data, and sending customer communications on our behalf.

  • Financial institutions and payment processors. We may disclose certain Personal Data to financial partners as necessary to fulfill your order.

Additionally, we share and disclose Personal Data under the following circumstances:

  • With your Authorized Representatives. If another individual is managing your account with us or your email account which the Services connect to on your behalf (for example, a manager managing the account of an employee), as authorized by you or as a personal representative under applicable law, that person can view all Personal Data about you on the Services.

  • In the Event of Merger, Sale, Divestitures, or Change of Control. Kyma reserves the right to transfer Personal Data to a buyer or other successor in interest that acquires rights to that information as a result of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of Kyma or substantially all of its assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which Personal Data held by us about you is among the assets transferred. 

  • With our Professional Advisors. We may share your Personal Data with our lawyers, auditors, and other professional advisors to comply with applicable legal and regulatory requirements, and to support us with the purposes described in this Policy.

  • With Your Consent. We may share your information for other purposes pursuant to your consent or at your direction. 

  • Other Disclosures. We may disclose your Personal Data if we have a good faith belief that disclosure of such information is helpful or reasonably necessary to: (i) conform to legal requirements and comply with any court order, law, or legal process, including responding to any government, law enforcement, or regulatory request; (ii) enforce the End User License Terms, other agreements, including between you and us, and any other documents included or referenced therein (all of which are incorporated into and made a part of this Privacy Policy by reference); (iii) fulfill the purpose for which you provide it; (iv) detect, prevent, or otherwise address fraud or security issues; or (v) protect against harm to our, your, or third parties’ rights, property, or safety. 


We may share and disclose de-identified and/or aggregate analytics with third-party partners for the purposes described in this Privacy Policy or where it is collected, or any other legal purpose, including, when and where applicable, sharing and disclosing non-personally identifiable information combined with Personal Data.


  1. MARKETING

From time to time if you have supplied your email address, we may send you marketing or informational emails. If you prefer not to receive any or all of our marketing and promotional communications, you may opt-out of these communications by following the opt-out prompts on these communications. You also may ask us not to send you other marketing or informational communications by contacting us as specified in the Contact Information section below, and we will honor your request. Please note that even after you are removed from our marketing lists, we may still send you non-promotional communications, such as responding to your support requests.

  1. DO NOT TRACK

Some browsers have a “Do Not Track” (“DNT”) feature that lets you tell websites and online services that you do not want to have your online activities tracked. Such browser features and industry standards are not uniform. As such, Kyma does not monitor or respond to DNT browser requests.  If a standard is adopted that we must follow in the future, then we will inform you about that practice in a revised version of this Privacy Policy.

  1. CONSUMER RIGHTS

If you are a resident of a state with consumer privacy rights, you may have specific rights regarding your Personal Data.  

Texas & Nebraska Residents

Texas and Nebraska consumers have the following rights:

  • Right to Access – You may request confirmation of whether we process your Personal Data and access the data we have collected about you.

  • Right to Correct – You have the right to request corrections to any inaccurate Personal Data we maintain about you.

  • Right to Delete – You may request the deletion of your Personal Data, subject to certain exceptions.

  • Right to Data Portability – You have the right to obtain a copy of your Personal Data in a portable and readily usable format.

  • Right to Opt-Out – You may opt out of the processing of your Personal Data for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects. We do not process Personal Data for any of these reasons.

  • Right to Appeal – If we deny your request to exercise any of these rights, you have the right to appeal our decision.

Exercising Your Rights

To exercise your rights under Texas or Nebraska law, please contact us as directed in the Contact Information section below.  We will respond to your request within the timeframes required by law. 

  1. THIRD-PARTY LINKS AND WEBSITES

The Services may contain links to third-party services, websites, mobile applications, and/or contain advertisements from third parties that are not affiliates with us and which may link to other websites, services, or applications. While we endeavor to work with third parties that share our respect for user privacy, we are not responsible for the privacy policies or privacy practices of such third parties. Any information collected by third parties are not covered by this Privacy Policy. You are responsible for knowing when you are leaving the Services to visit a third-party website, service, or application and for reading and understanding the terms of use and privacy policy statements for each such third party. This Privacy Policy only governs information collected through the Services. 

  1. CHILDREN

The Services are not intended for children, and we encourage parents and guardians to be aware of and monitor the websites visited by their children. Kyma does not knowingly collect any Personal Data from children under 16 years of age. If you believe a child under age 16 has directly provided us with Personal Data, please contact us as specified in the Contact Information section below. 

  1. RETENTION PERIOD 

Kyma may retain your Personal Data for the period necessary to fulfill the purposes outlined in this Privacy Policy, including for as long as you have unless a longer retention period is required or permitted by applicable law. We are under no obligation to store such Personal Data indefinitely and, to the extent permitted by law, disclaim any liability arising out of, or related to, the destruction of such Personal Data.  Upon cancellation and deletion of your account with us, we will proceed with complete deletion of your data.  If you maintain an active account with us, unless requested to be deleted earlier, we will retain all data in perpetuity. 

  1. CONFIDENTIALITY AND SECURITY

We take the security of your Personal Data seriously and have implemented appropriate technical and organizational measures to protect it from unauthorized access, disclosure, or destruction. While we implement these measures, please note that 100% security is not possible, and we cannot guarantee that the security measures we have in place to safeguard Personal Data will never be defeated or fail, or that those measures will always be sufficient or effective.


  1. TRANSFERS TO THE UNITED STATES

The Services are hosted in the United States. If you are visiting the Services from outside the United States, your Personal Data may be transferred to, stored, and processed in the United States based on your consent or in accordance with this Privacy Policy and applicable U.S. laws. By using the Services, you consent to the transfer of your information to our facilities and the practices described in this Privacy Policy.


  1. CONTACT INFORMATION

If you have any questions or concerns about this Privacy Policy or our privacy practices, you can contact us via: 


Email: support@kyma.app


Mail: 269 Vassar Street Unit 712 Cambridge MA 02139


Phone: 916-580-9167