Doku Privacy Notice

Effective date: August 28, 2026 · Version: 2026-08-28

Kuma Stories Ltd. (“Doku,” “we,” “us,” or “our”) provides the Doku mobile application for iOS (bundle identifier com.kumadrama.dokuapp), Android (package name com.kumadrama.doku), and the related website and services (collectively, the “Service”). This Notice explains what information we process, how it is collected and used, when it is disclosed, how long it is retained, and the choices available to you. It applies whether you use Doku with an account or as a guest.

This Notice is not a contract requiring consent to every processing activity. Where consent is required, Doku asks separately. Before Doku sends personal information to third-party AI service providers for Idea Creation, optional voice transcription, or AI-based content safety, Doku provides an in-app explanation and asks for your explicit permission.

1. Information We Process

Account and authentication data

If you create or access an account, we process your name, email address, Doku user ID, authentication provider and provider identifier, profile image, handle, tagline, and authentication and security records. If you use Apple, Google, or Facebook sign-in, we receive the information that provider makes available under your settings.

Guest data

If you use Doku without signing in, we assign a guest identifier and associate it with guest sessions, feature use, AI interactions, Idea Creation requests, and related service records.

Idea Creation data

When you use Idea Creation, we process the text prompts you submit, relevant conversation messages and context, idea concepts, titles, selected genres and settings, generated idea text, and feedback or reports you submit.

Voice data

If you choose voice input while creating an idea, Doku records the audio needed to convert your speech into text, uploads it to our service, and sends it through OpenRouter to OpenAI for transcription. The resulting transcript may be used as an Idea Creation prompt. The temporary device copy is removed after a completed or non-retryable request.

Content-safety data

Doku may process Idea Creation prompts, generated idea text, public comments, reports, and relevant safety context to detect prohibited, harmful, abusive, fraudulent, or unsafe content and to enforce our Terms and Community Guidelines.

Profile photos and public content

We process avatars you upload and content you choose to publish, such as ideas, related content details, and comments, together with engagement and safety actions such as likes, votes, follows, blocks, and reports. Published profile and content fields may be visible to other users.

Activity and preferences

We process viewing history and progress, favorites, searches, page and feature interactions, recommendation feedback, notification preferences, and content genre preferences.

Device, network, analytics, and diagnostics

We automatically process information such as IP address, User-Agent, app version, device model, operating system, language or locale, network type, timestamps, Doku-assigned and third-party app, installation or device identifiers, crash logs, diagnostics, and playback performance. We use IP address for service delivery, security, abuse prevention, troubleshooting, and deriving coarse location.

Website storage and security technologies

Doku’s website uses local storage to remember language and similar preferences. Doku and Cloudflare may also use strictly necessary technologies to deliver and protect the website.

Notifications and support

We process push notification tokens, delivery and open records, and information you send to support, privacy, safety, copyright, or account-deletion channels.

2. Why We Process Information

We process information to:

Doku does not currently use an in-app purchase or subscription flow in this release. Doku does not display third-party advertising in this release. Campaign attribution does not mean that ads are displayed inside Doku.

3. Idea Creation, Voice Input, and Content Safety

This section provides Doku’s detailed AI data disclosure. The recipient depends on the feature you choose to use:

Feature Data sent Recipient and purpose
Idea Creation Your prompt, relevant conversation context, and selected idea settings OpenRouter routes the request to an AI model provided by OpenAI, Google, or Anthropic to generate the idea you request
Optional voice input Your voice recording OpenRouter routes the recording to OpenAI to convert it into text
Content safety Submitted text and relevant safety context Amazon Web Services (AWS), including Amazon Comprehend, analyzes the text for safety and rule enforcement

Idea Creation

Doku provides an AI-powered Idea Creation feature. When you choose to use this feature and provide permission in the app, Doku sends the text prompts you submit, relevant conversation context, and selected idea settings to OpenRouter. OpenRouter acts as an AI routing intermediary and routes the request to a model provided by OpenAI, Google, or Anthropic. The selected model provider processes the request to generate the idea content you ask for.

Optional voice input

If you choose voice input while creating an idea, Doku sends the recording through OpenRouter to OpenAI to convert the audio into text. The transcript may then be processed as an Idea Creation prompt. Voice input is optional, and you may type your idea instead.

Content safety

Doku may automatically review Idea Creation prompts, generated idea text, public comments, and reports to detect prohibited, harmful, abusive, fraudulent, or unsafe content. Doku may send submitted text and relevant safety context to Amazon Web Services (AWS), including Amazon Comprehend. Doku uses the returned safety classification or analysis to allow, restrict, flag, investigate, or review content.

Permission and provider safeguards

Your choice comes before the transfer.

Doku does not send personal information to these third-party AI service providers until you accept the in-app explanation. If you decline, Doku will not make the transfer, and the affected AI or submission feature may be unavailable.

If Doku materially changes the information shared, the recipients, or the purpose of the processing, Doku will provide an updated explanation and request permission again before making the changed transfer.

We require these providers to process personal information only to provide, secure, troubleshoot, and support Doku’s requested services, under Doku’s instructions and applicable contractual, privacy, and security safeguards. We do not authorize them to use Doku request data for their own independent purposes, including training their general-purpose AI models. Doku does not use private prompts, private voice recordings, or unpublished idea drafts to train Doku’s own general-purpose AI models.

Please do not submit personal, sensitive, confidential, or legally protected information in Idea Creation prompts or AI interactions. AI outputs may be inaccurate, incomplete, offensive, non-unique, or similar to content generated for others. Review outputs before publishing or relying on them.

4. When We Disclose Information

We disclose only the information needed for recipients to perform their roles, including:

We maintain records of active service providers, the data sent, purpose, applicable processing location and retention, and relevant privacy terms. We contractually require service providers that process personal information under our instructions to provide the same or equivalent protection described in this Notice and required by applicable law. If a provider may use information for its own independent purposes, we will disclose that separately and provide any legally required choice.

We may also disclose information when legally required, to protect users and the Service, or in connection with a merger, financing, acquisition, or sale subject to appropriate safeguards. We do not sell personal information for money.

5. Device Permissions and Platform Controls

Device controls may limit an identifier or permission, but they do not necessarily stop data required to operate the Service, prevent fraud, measure reliability, or remember your settings.

6. Public Content

Your profile name, avatar, handle, tagline, published ideas, related content details, comments, and engagement may be visible to other users according to the product design and your settings. Drafts, private AI interactions, and unsubmitted idea materials are not treated as public merely because Doku processes them to provide the feature.

Content and profile information you publish may be available to anyone on the Internet, including people who do not use Doku. It may be indexed, cached, copied, or collected by search engines, social-preview services, and third-party scrapers.

Doku may automatically review public content or send it to AWS, including Amazon Comprehend, to enforce our Terms and Community Guidelines.

If you delete content or your account, Doku will remove or de-identify associated public content unless limited retention is required by law or necessary to protect safety and integrity, as described below.

7. Retention and Deletion

We retain each category only for as long as reasonably necessary for the purposes described in this Notice:

Registered users can initiate deletion in Profile → Settings → Delete Account or use our Account and Data Deletion page. Resetting guest data on a device starts a new local guest session but does not by itself delete prior server-side guest records. The deletion page explains the current external request path.

After a verified deletion request, Doku deletes or irreversibly de-identifies associated account data, public user-generated content, authentication linkage, push tokens, and stored personal media, subject only to disclosed legal, safety, and technical exceptions. Residual backup copies expire under the applicable backup schedule. We target completion within 30 days unless applicable law or a disclosed exception requires longer.

8. Legal Bases and Your Rights

Where applicable, we rely on contract to provide requested features; legitimate interests to secure, improve, and understand the Service; consent for processing that legally requires it; and legal obligations. Depending on your location, you may request access, correction, deletion, portability, restriction or objection, withdraw consent, appeal a decision, or opt out of processing defined as sale, sharing, or targeted advertising.

You can decline optional AI processing in the in-app permission notice. You can withdraw permission for future optional AI processing at any time through Your Privacy Choices or by emailing administrator@kumadrama.com. Withdrawal prevents future Idea Creation and optional voice-transcription transfers but does not automatically delete information already processed. Public content and safety records retained for legitimate safety or legal purposes may be handled separately as described in this Notice.

We will not discriminate against you for exercising applicable rights.

9. International Transfers and Security

Doku and its providers may process information outside your country. Where required, we use appropriate transfer mechanisms and contractual safeguards. We use TLS in transit, access controls, and other administrative and technical safeguards, but no system is completely secure.

10. Children

Doku is not directed to children under 13. If local law requires parental consent at a higher age, users below that age may use Doku only with valid permission. Our age-access rules are intended to align with Doku’s store age rating, target audience, and content catalog.

11. Changes and Contact

We will post the effective date and version and provide appropriate notice of material changes. If a material change affects the personal information sent to third-party AI service providers, the recipients, or the purpose of the processing, Doku will provide an updated in-app explanation and request permission again before making the changed transfer.