Kumiki and Kigumi are made by minimaple ("we", "us"). This policy covers the website at kumiki.build, the Kigumi app (the standalone app and the VS Code extension), and the optional Kigumi account that the app's built-in agent can use. Questions: minimapletinytools@gmail.com.

The short version

The website uses no cookies, analytics or tracking.
Your projects stay on your computer. The app doesn't send them to us.
Only if you sign in to a Kigumi account do we hold anything about you: your email, name, credit balance and a record of what your requests cost.
When the built-in agent works through your account, what it sends to the AI model passes through our server to the model provider. We don't keep the content of those requests.
We don't sell your data, show ads, or train AI models on it.

The website

kumiki.build sets no cookies and runs no analytics or tracking scripts. It is hosted on GitHub Pages, which may record standard request information, such as IP addresses, as described in GitHub's privacy statement.

The Kigumi app

Kigumi runs on your computer. Your projects, files, designs and agent conversations are kept there and are not sent to us. To set up a project, the app downloads Python packages, including Kumiki, from the Python Package Index (PyPI). It can also check PyPI for newer versions.

If you use the built-in agent with your own API key (Anthropic or OpenRouter), its requests go directly from your computer to that provider, under that provider's terms and privacy policy. We don't see them.

The app's MCP server, if you turn it on, listens only on your own computer, for agents you run there.

The Kigumi account

The account is optional. It lets the built-in agent work without an API key of your own, using credit on the account.

What we receive and store

From signing in with Google or GitHub: your email address, your name and profile picture, and an identifier for your account with that provider. We ask Google only for the basic sign-in permissions (your email address and basic profile).
Your credit: your balance, and any credit we grant you.
Usage records: for each agent request, the model used, what it cost and when. These records don't include the content of the request.

The app keeps your sign-in session on your computer, encrypted with your operating system's keychain.

Agent requests made through your account

When you use the built-in agent through your account, it sends the AI model what it needs to help you. That includes your messages, and the parts of your project it works with: files it reads, descriptions of what you have selected, build logs and screenshots of the view. These requests pass through our server to OpenRouter, which forwards them to the provider running the model you chose (for example a host of a DeepSeek model, Anthropic, or OpenAI). Those providers process the requests under their own policies, and some may keep them for a limited time.

Our server passes requests through and does not store their content. It keeps short-lived operational logs of request details (your account identifier, the model, the size of the request, how long it took and what it cost) to run the service, charge credit and fix problems.

Why we use it

To sign you in, keep your credit balance and charge it for your requests, prevent abuse (such as too many requests too fast), and find and fix problems. We may email you about your account or about important changes to the service. We don't use your information for advertising, and we don't sell it.

Google user data

Kigumi's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use the email address, name and profile picture Google gives us only to create your account, sign you in and contact you about it. We don't transfer them to others except the service providers below that run the account, and we never use them for advertising or to train AI models.

Service providers

These services run parts of the Kigumi account for us, and process data only for that:

Supabase: sign-in, and the database holding accounts, balances and usage records.
Cloudflare: the server that carries agent requests, and its logs.
OpenRouter and the model providers it routes to: running the AI models.
Google and GitHub: signing in, if you choose them.

Keeping your data

We keep your account information and usage records as long as we need them to run the services and account for credit. You can ask us what we hold about you, or to correct it, by emailing minimapletinytools@gmail.com from the address you sign in with. Conversations and projects on your computer are yours to delete.

Children

Kigumi accounts aren't meant for children under 13, and we don't knowingly collect their data.

Changes

If this policy changes, we'll update it here and change the date at the top. For significant changes, we'll tell account holders by email.

Privacy Policy