Privacy Policy
Last updated: March 2026
1. Introduction
Kukui ("the Service", "we") operates a WhatsApp bot that helps with home management — shopping lists, reminders, tasks, and weekly schedules. This policy explains what data we collect, how we use it, and how we protect it.
Using the Service constitutes acceptance of this policy.
2. Data We Collect
- Phone number — Required for identity verification and to operate the Service.
- Message content — Messages sent to the bot (shopping items, reminders, tasks) are processed and stored to provide the Service.
- Usage data — Technical logs (request times, errors) for maintenance and improvement. This data is anonymous.
3. How We Use Your Data
- Service delivery — Powering the bot's features: list management, sending reminders, task tracking, and schedules.
- Service improvement — Anonymous usage analysis to improve accuracy and experience.
- Security — Detecting and preventing abuse or unauthorized access.
4. Google Calendar Integration
Kukui offers an optional Google Calendar integration. If you choose to connect your Google account, the following applies:
- Data accessed — We request access to your Google Calendar events (
calendar.eventsscope) and your Google account email address (userinfo.emailscope), solely to display, create, and manage calendar events on your behalf within the Kukui service. - Purpose limitation — Google user data is used only to provide and improve the calendar features you explicitly request. It is never used for advertising, profiling, or any purpose unrelated to the Kukui service.
- No selling or sharing — We do not sell, transfer, or disclose Google user data to third parties, except to the sub-processors listed in Section 5 below and only to the extent necessary to operate the service.
- Limited Use — Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
- Revocation — You can disconnect Google Calendar at any time by revoking access via your Google Account permissions page. After revocation, we will stop accessing your Google data and will delete any cached Google Calendar data associated with your account.
5. Third-Party Sharing
We do not sell or rent personal data to advertisers. Data may pass through these service providers only:
- Meta / WhatsApp — Messaging infrastructure provided via WhatsApp Business API, subject to Meta's policies.
- Anthropic — Text request processing uses Anthropic's AI models.
- Supabase — User data is stored on Supabase infrastructure (EU servers).
- Google — If you connect Google Calendar, your calendar data is accessed via Google's APIs in accordance with Section 4 above.
6. Data Retention
Data is retained for as long as the account is active. You may request deletion of all data associated with your account at any time by contacting us.
7. Data Security
We implement reasonable security measures including encrypted communications (HTTPS/TLS) and access controls to protect your data. However, no method of transmission over the internet is 100% secure.
8. Your Rights
Subject to applicable data protection laws, you have the right to:
- Access the data we hold about you.
- Correct inaccurate data.
- Request deletion of your data ("right to be forgotten").
To exercise these rights, contact us via WhatsApp or email hello@kukui.app.
9. Cookies
The bot itself does not use cookies. This website may store minimal data in localStorage solely for session management.
10. Policy Changes
We may update this policy from time to time. Material changes will be announced in the Service and/or via WhatsApp notification. Continued use of the Service after changes are published constitutes acceptance of the updated policy.
11. Contact
For privacy-related questions, contact us via WhatsApp or email hello@kukui.app.