Privacy Policy

Last updated: November 3, 2026

The short version

• Everything you do in Kamby is stored in our own database. We do not sell your data.
• No ads, no ad identifiers, no third-party analytics or crash-reporting SDKs. The usage data we collect is ours alone and is used to make the course better.
• You can delete your account from inside the app. It takes your progress, your events and your account with it, straight away.
• No cookies on kamby.app. We never see your card details — Apple takes the payment.
• Questions? Requests? Send an e-mail to: support@kamby.app.

1. Who we are

Kamby is a mobile app for learning the Khmer language. It is free to use, with an optional paid subscription. There is no advertising.

The controller of your personal data is:

• Raphael Saing, ‘micro-entreprise’ from France
• 1 rue Marguerin, 75014 Paris
• SIREN 988 355 111
• Email: support@kamby.app

This policy is governed by French law.

2. What we collect, and why

Account

You sign in with Sign in with Apple (iPhone), Sign in with Google (Android), an email magic link / one-time code, or an email & password.

• With Sign in with Apple, we may receive the name you choose to share through Apple on your first sign-in. We keep it as your display name.
• With Sign in with Google, Google shares your email address, the name on your Google account and a link to your profile picture. We store them with your sign-in record; the app does not show the name or the picture.
• With email sign-in, we store your email address. With an email & password account (Android), we also store your password in hashed form.
• Your profile holds your display name (optional), your app language (English or French) and the dates your account was created and updated.

Linking an email address, an Apple ID or a Google account is what lets your progress survive a lost phone or a reinstall.

Guest accounts. When you start using the app without signing in, we create an anonymous account for you automatically — no email, no name, just a random identifier — so your progress is saved before you decide whether to sign up. You can link an email address, an Apple ID or a Google account later and keep everything. A guest account that stays inactive for 90 days is deleted, along with its data.

Learning progress

Your progress with the lesson curriculum, your memory strength for each word, your stats (streaks, activity, timezone).

Usage and diagnostics

We record how you use the app, such as sessions, sign-in steps, lessons and practice, your answers and results, and errors. Each event carries your user ID, a session ID and the app version. We also collect your device model, OS version, app language, time-zone offset and where the app was installed from.

We receive crash and performance diagnostics through Apple’s MetricKit, reduced before they reach us to: the type of crash or hang, a numeric code, and a short technical fingerprint (the app binary name and its hash).

On Android, when an error makes the app crash, the app keeps the technical name of the error and a short technical fingerprint (a code computed from where in the app’s code it happened), and may send them to us the next time you open it. No message text and no screen content.

Some structural facts about this:

• There is no free text in an event. The shape of every event is a fixed list of fields.
• Events contain no IP address and no user agent. Our hosting provider’s technical logs include network details for a short time, for security and operations.
• There are no advertising identifiers and no persistent device identifier.
• Events are deleted with your account.
• Raw events are kept for 12 months, then reduced to anonymous aggregate statistics.

We use all of this to improve the course and the app, to diagnose bugs and to protect the service from abuse.

Feedback reports

When you use “report a problem” in a lesson, you write us a message (required), and we attach a text record of what was on screen: the lesson and step, the exercise content shown, the correct answer, your answer and whether it was right, your device model and OS version, the app version and build, and your app language.

Optional screenshot (iPhone). Kamby takes one only if you tap Add screenshot. Opening the report sheet does not take a screenshot. The image shows the Kamby screen you are reporting, and you can preview or remove it before sending. If you cancel the report or remove the image, it is discarded and never uploaded. If you send it, it is stored with your report so we can investigate the problem. Kamby does not open your photo library and does not ask for Photos or Camera permission.

Dictation and the microphone (iPhone). The report sheet lets you speak instead of typing. The audio is transcribed and then immediately discarded — we never collect it and we never upload it. Recognition runs on your device when your device supports it; otherwise the audio is processed by Apple’s speech-recognition servers, and Apple’s privacy terms apply to that processing. Only the resulting text is saved, as your feedback message. Using the microphone is optional and requires your permission.

On Android, a report is text only: Kamby takes no screenshot and does not use the microphone. If you speak through your keyboard’s voice typing, that is handled by your keyboard, not by Kamby.

Your reports are kept while your account exists unless you retract them. Retraction deletes the report and its optional screenshot. If you delete your account, the report is de-identified: the message and textual screen record stay, with the device model and OS version they carry; the link to your account is removed, and any attached screenshot is deleted. We keep the de-identified text because it documents fixes we made to the course.

Notifications

If you decide to turn notifications on, we store a push token — a random routing identifier issued by Apple or Google — together with your platform and language, so we can send you reminders such as a streak reminder. Delivery goes through Google Firebase Cloud Messaging. The token is deleted with your account, and turning notifications off in your device settings stops delivery.

Emails we send

We send sign-in emails (magic link or one-time code) and essential account emails, through Resend, our email delivery provider, in your app language (EN/FR).

Website (kamby.app)

kamby.app is a presentation site. No cookies, no analytics scripts, no forms. It is hosted on Cloudflare, which keeps standard short-lived server logs to run and protect the service.

Support

If you email support@kamby.app, we receive whatever you put in your message and use it to answer you.

3. What we never do

• We never sell personal data.
• No advertising, no ad SDKs, no advertising identifiers.
• No third-party analytics or crash-reporting SDKs. Our analytics are ours, in our own database.
• No cross-app tracking.
• No profiling for marketing.

4. Where your data lives

Your data is hosted in the United States. Our providers are bound by data-processing agreements that incorporate the EU Standard Contractual Clauses (SCCs), which is the safeguard we rely on for those transfers. You can ask us for a copy of these safeguards at support@kamby.app.

5. Who helps us run Kamby

6. How long we keep things

7. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• rectify data that is inaccurate or incomplete;
• erase your data;
• portability — receive your data in a portable format;
• restrict how we process your data;
• object to processing we base on legitimate interest — including our usage analytics and diagnostics;
• withdraw consent at any time, where we rely on consent (notifications), without affecting what happened before.

Automated decisions. We make no automated decisions about you that produce legal effects or similarly significantly affect you, and we do not profile you for marketing.

Deleting your account. In the app, go to Settings → Account → Delete account. This deletes your account and all data associated with it immediately, with one exception: the message and textual screen record from feedback reports stay in de-identified form. Any attached screenshot is deleted. You can also email support@kamby.app and we will do it for you. It works the same on Android and iPhone. Without the app, see kamby.app/delete-account.

Exercising the other rights. Email support@kamby.app. We answer within one month.

8. Children

Kamby is not directed at children. You must be at least 13 to use it. In France, users under 15 need a parent or guardian’s permission. If we learn that an account belongs to someone under 13, we will delete it.

9. Changes to this policy

When this policy changes, we post the updated version here and change the date at the top. If a change is material, we will flag it in the app.

10. Contact

Write to us at support@kamby.app — for privacy requests or questions about this policy.