Privacy policy

1. Data controller

The data controller is STODEO, a simplified joint-stock company whose registered office is at 12 rue Gambetta, 42500 Le Chambon-Feugerolles, France. For any question about your data, write to support@kumaboard.app. The full identity of the publisher is set out in the legal notice.

2. The presentation website and support

This website presents KumaBoard and its features. It has no data-collection forms, audience analytics or tracking cookies. Screenshots show a demo instance and contain no customer data.

The website is hosted by Hetzner Online GmbH (Germany), on a server administered by STODEO. To serve the pages and protect the service, this server records technical information such as the IP address, the date, the page requested and the browser used. This processing is based on STODEO's legitimate interest in ensuring the security and proper operation of the website. These logs are kept for no more than twelve months.

A link to our support address opens your email software; no message is sent automatically. If you write to support, STODEO uses your email address and the content of your message to reply to you. This processing is based on STODEO's legitimate interest in handling the requests received, or on the performance of the purchase contract where the request concerns Premium. These exchanges are accessible only to STODEO and its email service provider, and are kept for three years after the last contact.

3. Your data in the app

KumaBoard stores your server configurations, preferences, monitoring history and incident notes on your device. Credentials and configuration keys use the system's secure storage.

The app connects directly to the Uptime Kuma servers you configure. KumaBoard does not operate a central server that collects your monitoring data. Data processing and logs on your Kuma instances depend on their configuration and hosting.

STODEO receives neither your Kuma credentials, nor your monitoring data, nor your AI provider keys.

4. AI analyses and external services

AI features are optional. If you enable a cloud provider, selected monitoring data is sent to that provider with your consent to produce the requested analysis. Your chosen provider's data processing and retention policies apply.

Ollama lets you use a model accessible on your network. You can also choose external vector storage; enabling it requires separate consent. Choosing a local provider does not make another external service you have configured local.

You can change your configurations and withdraw consent in the AI settings. Withdrawal stops future data transfers from the app; it does not automatically delete data already processed or retained by an external provider.

Some AI providers are established outside the European Union. Review their terms before enabling them: sending data results from your choice and your consent, and STODEO does not receive this data.

5. Notifications

Local notifications require system permission and track uptime transitions while the app is open. No push token or Kuma credentials are sent to a KumaBoard server in this version.

Notifications you configure directly in Uptime Kuma, for example through ntfy or Telegram, are handled by your server and the services you choose.

6. Premium purchases

Purchases are processed and verified by the Apple or Google app store. KumaBoard does not receive your payment card details. The app uses the transaction information needed to verify and restore your Premium access.

Premium is a one-time KumaBoard purchase. External AI providers may apply their own pricing and terms.

Apple and Google process this data as independent data controllers, under their own policies. STODEO receives from the stores sales reports that do not allow you to be identified directly.

7. Retention and deletion

You can remove your servers and their associated data in the settings. Local data is retained for history and viewing features, according to the periods available in the app.

Uninstalling removes the app's local data, but some iOS Keychain items may persist on the device; they are deleted the first time you open the app after reinstalling it. To remove a server or AI configuration, use the app's deletion controls before uninstalling it. For data already sent to an external service, refer to the deletion options provided by that service.

8. Your rights

You have the right of access, rectification, erasure, restriction and objection, as well as the right to data portability where it applies. To exercise them, write to support@kumaboard.app ; we reply within one month.

Data kept only on your device is not accessible to STODEO: you view, edit and delete it from the app.

If you believe your rights are not being respected, you may lodge a complaint with the CNIL or with the data protection authority of your country.

9. Contact and terms of use

For questions about your data or this policy, email support@kumaboard.app. Do not send any passwords, session tokens or API keys.

The terms of use and purchase are set out in the legal notice.