Privacy Policy
Last updated: July 19, 2026
Kirogami ("we", "us") is operated by Lumoria Pte. Ltd., a company registered in Singapore. This policy explains what personal data we collect, why, and the choices you have.
What we collect
- Account data: your email address, and password (if you sign up with one) or authentication via Google.
- Content you create: tasks, habits, goals, notes, money entries, and anything else you add to your board.
- Usage data: product analytics (pages viewed, features used) via PostHog, collected without cookies or persistent identifiers unless you're signed in, in which case it's tied to your account.
- Payment data: if you subscribe to Kirogami+, payment is processed by Stripe. We never see or store your card details. Stripe handles that directly and shares with us only your subscription status.
- AI assistant data: if you use Kiro, the relevant parts of your board (tasks, habits, goals) are sent to Anthropic (Claude) to generate a response. This is not used to train Anthropic's models.
Why we collect it
To provide the service (sync your board across devices, send reminders), to process payments for Kirogami+, to send transactional emails (sign-in codes, digest emails you opt into) via Resend, to understand how people use Kirogami via PostHog, and to detect and fix errors via Sentry (technical error data only, never your board content).
Who we share it with
Supabase (database and authentication), Stripe (payments), Anthropic (Claude, only when you use Kiro), Resend (transactional email), PostHog (product analytics), Sentry (error monitoring), and Vercel (hosting). We do not sell your personal data.
Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal data. Settings → Export JSON gives you a full copy of your data. Settings → Delete account permanently removes your account, cancels any subscription, and deletes all associated data immediately. This cannot be undone. If you're in the EU/EEA, UK, or another jurisdiction with data protection law, you may have further rights under that law (e.g. GDPR); contact us at contact@lumoria.ai to exercise them.
Data retention
We keep your data for as long as your account is active. If you delete your account, your data is removed immediately, we don't keep backups beyond what's needed for a short operational recovery window.
International transfers
We're based in Singapore and use service providers based in the US and EU. Where required, we rely on standard contractual clauses or equivalent safeguards for international data transfers.
Cookies
Kirogami does not use tracking cookies. Authentication uses secure, essential cookies required to keep you signed in; these aren't optional and don't need consent under ePrivacy, since they're strictly necessary for the service you've requested. Our product analytics (PostHog) runs without cookies or persistent local storage; it only recognizes you once you're signed in, using your account, not a tracking identifier. If this changes in the future, we'll add a consent banner and update this policy first.
Children
Kirogami is not directed at children under 16, and we don't knowingly collect data from them.
Changes
We'll update the date above if this policy changes, and notify you of material changes via email.
Contact
contact@lumoria.ai
Lumoria Pte. Ltd., 68 Circular Road, #02-01, 049422, Singapore
kirogami.com