Your memory.
Still yours.

This Privacy Policy explains how Jambo.team operates Kumbuka and handles personal information for people who use the app, website, and related support channels.

Kumbuka is designed around personal memory and relationship context. That means the information you save can be sensitive. We treat contact details, card images, notes, meeting context, and relationship data as private user data.

We collect information in a few narrow categories:

• Account information, including sign-in identifiers from Apple, Google, or another provider you choose.
• Card information you scan or enter, such as name, company, role, phone number, email, website, and card image.
• Context you add, such as notes, tags, location, relationship data, mutual connections, and follow-up history.
• Optional calendar information when you connect your calendar for Meeting Briefs.
• Technical logs, device information, IP address, authentication events, and service diagnostics needed for security and reliability.
• Support information you voluntarily send us, such as your email address and the details needed to answer your request.

We use personal information to operate and improve Kumbuka:

• Scan and structure business cards.
• Sync your library across your devices.
• Generate Meeting Briefs when you enable calendar features.
• Help you search, export, update, and delete your contacts.
• Prevent abuse, troubleshoot bugs, and keep the service secure.
• Send service notices, support replies, and important updates.

We do not sell contact data. We do not use your private cards, notes, or relationship data to train models.

We do not provide your personal information to unrelated third parties without your consent, except where required by law or necessary to operate the service.

Kumbuka may rely on infrastructure and service providers such as cloud storage, authentication, analytics, crash reporting, email, and support tooling. These providers process information only for the purposes needed to provide Kumbuka.

If a legal authority requires disclosure, we review the request and disclose only the information we are legally required to provide.

Kumbuka stores local app data on your device and syncs cloud data through private infrastructure. Card images and related files may be stored in cloud object storage. Data is encrypted in transit and protected at rest.

Some information, such as login records, transaction records, support records, or security logs, may be retained where required by law, accounting obligations, fraud prevention, or dispute handling.

We keep personal information only for as long as needed to provide the service, satisfy legal obligations, resolve disputes, prevent abuse, or enforce our agreements.

• Contact cards, notes, and images are kept while they remain in your Kumbuka account.
• Deleted cards and account data are removed or de-identified unless a legal retention obligation applies.
• Certain records may be kept for legally required periods, including consumer complaint, contract, payment, and service access records.

You can request access, correction, export, deletion, or withdrawal of consent for your personal information. Some requests may be limited where we must keep records for legal, security, or dispute-resolution reasons.

To make a request, contact us at support@jambo.team. We may ask for information needed to verify that the request comes from the account owner or an authorized representative.

If Kumbuka collects information from a child where parental or legal representative consent is required, we obtain that consent according to applicable law.

Legal representatives may request access, correction, deletion, or withdrawal of consent for a child's personal information.

Our website and app may use cookies, local storage, device identifiers, and logs for sign-in, security, diagnostics, preference storage, and service reliability.

You can control cookies through your browser settings and advertising identifiers through your mobile operating system settings. Some features may not work correctly if required storage is disabled.

We use technical and organizational safeguards to reduce the risk of loss, misuse, unauthorized access, disclosure, alteration, or destruction.

• Encryption in transit for network communication.
• Access controls for systems that process personal information.
• Monitoring, logging, and review of suspicious activity.
• Operational limits so only authorized personnel can access data.

No online service can guarantee absolute security. You are responsible for keeping your device, account credentials, and sign-in methods secure.

If we materially change this policy, we will provide notice through the app, website, email, or another appropriate channel before the change takes effect where required by law.

This policy is effective from June 16, 2023 and applies until replaced by a newer version.