Privacy Policy

1. Data controller

2. Hosting

Kultivate's services are hosted by the following providers:

• Cloudflare, Inc.

  101 Townsend St, San Francisco, CA 94107, United States

  Hosts the website, the API, media and the main database.

• Railway Technologies, Inc.

  548 Market St PMB 68956, San Francisco, California 94104, United States

  Secondary host used for certain APIs and databases.

3. Other processors

Kultivate also relies on the following providers, which process data only on our behalf:

• PostHog, Inc.

  Product analytics. Receives your internal user identifier and usage events, never your email or name.

  Data stored in the European Union

• Functional Software, Inc. (Sentry)

  Crash and error reports (device, app version, technical context).

  Data stored in the European Union

• Google LLC (Gemini), via Cloudflare AI Gateway

  Generates the explanations shown after you answer a question, from the question and your recent answers. No email or name is sent.

  Data processed in the United States

• Expo (650 Industries, Inc.), Apple and Google

  Deliver push notifications, using a device token stored on our servers.

  Data processed in the United States

Data processed in the United States (Cloudflare, Railway, Google, Expo, Apple) is transferred under the EU-US Data Privacy Framework or, failing that, the European Commission's standard contractual clauses.

4. Data collected

5. Purposes and legal bases

Your data is used only to:

• manage your account, save your progress and statistics, and generate explanations — performance of the contract;
• improve the content and stability of the game through usage analytics and crash reports — legitimate interest (you can object at any time by writing to privacy@kultivate.app);
• send push notifications, if you enable them — consent, which you can withdraw in your device settings;
• comply with our legal obligations (e.g. billing, GDPR) — legal obligation.

6. Data retention and security

Data is kept for as long as your account is active, then deleted within a maximum of 30 days after account deletion. It is hosted and protected in accordance with the security standards of our providers (see the Hosting section).

7. Your rights

In accordance with the General Data Protection Regulation (GDPR), you have at all times the rights of access, rectification, erasure, objection, portability and withdrawal of consent regarding your personal data.

You can delete your account and all of your personal data at any time from the app, under Profile, then Delete account.

You can also exercise any of these rights, including account deletion, by writing to privacy@kultivate.app.

Deleting your account results in the irreversible erasure of your profile, scores, preferences and history. Purely statistical and anonymized data may be retained for analysis purposes. All requests are handled within a maximum of 30 days of receipt.

You can also lodge a complaint with the CNIL (cnil.fr).

8. Analytics and measurement

Kultivate uses PostHog to understand how the app is used. Events are linked to your internal user identifier only, never to your email or name. No cross-app tracking is performed.

9. Image copyright

The images shown in Kultivate come from royalty-free sources or are generated specifically for the app. If you believe an image infringes your rights, you can report it via hello@kultivate.app.

10. Changes

This policy may be updated to reflect changes to Kultivate or legal obligations. The date of the last update appears at the top of the page.