Privacy Policy for Kymia Mobile App

Effective Date: October 17, 2025

Last Updated: October 17, 2025

Introduction

Kymia ("we", "our", or "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application.

Information We Collect

Personal Information

  • Email address (for account creation and authentication)
  • Name (for personalization)
  • Profile information (education level, chemistry topics of interest)

Usage Data

  • Chemistry problems submitted
  • Chat conversations with AI tutor
  • Session history and frequency
  • Progress and performance data
  • App usage analytics

Device Information

  • Device type and model
  • Operating system version
  • App version
  • Device identifier (for authentication)
  • IP address

Camera and Images

  • Photos captured within the app (for OCR processing)
  • Images selected from photo library
  • OCR-processed text extracted from images

Payment Information

  • Subscription tier and status
  • Payment transaction IDs (processed by Stripe/Apple/Google)
  • We do NOT store credit card information

How We Use Your Information

We use the collected information to:

  • Provide AI-powered chemistry tutoring services
  • Process and solve chemistry problems via OCR
  • Manage your account and subscription
  • Personalize your learning experience
  • Improve app functionality and performance
  • Communicate with you about your account
  • Comply with legal obligations

Data Sharing and Third Parties

We share your information with:

Service Providers

  • Supabase: Database and authentication (encrypted storage)
  • Stripe (Android only) or Apple/Google IAP (iOS): Payment processing
  • OCR Service Provider: Image-to-text conversion
  • AI Tutoring API: Problem-solving and chat functionality
  • Analytics Services: Usage analytics and crash reporting

Legal Requirements

We may disclose your information if required by law or to:

  • Comply with legal processes
  • Protect our rights and property
  • Prevent fraud or security issues
  • Protect user safety

Data Security

We implement industry-standard security measures:

  • End-to-end encryption for data transmission
  • Encrypted storage of personal information
  • Secure authentication with bcrypt password hashing
  • Regular security audits and updates
  • Access controls and monitoring

Data Retention

  • Account data: Retained while account is active
  • Session history: Retained for 1 year
  • Chat conversations: Retained while subscribed
  • Deleted data: Permanently removed within 30 days

Your Rights

You have the right to:

  • Access your personal information
  • Correct inaccurate information
  • Delete your account and data
  • Export your data
  • Opt-out of analytics
  • Withdraw consent

To exercise these rights, contact us at privacy@kymia.app

Children's Privacy (COPPA Compliance)

Our app is intended for users aged 13 and older. We do not knowingly collect information from children under 13. If we discover we have collected data from a child under 13, we will delete it immediately.

International Users (GDPR Compliance)

If you are located in the European Economic Area (EEA):

  • We process data based on consent and contract necessity
  • You have additional rights under GDPR
  • Data may be transferred outside the EEA with appropriate safeguards
  • Contact our Data Protection Officer at support@kymia.app

Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated "Last Updated" date. Continued use of the app after changes constitutes acceptance.

Contact Us

For privacy-related questions or concerns:

© 2024-2025 Kymia. All rights reserved.