Hyle

Privacy Policy

Last updated: 31 August 2026

This Policy describes how KumaSaru Studio ("we") processes user information within the Hyle mobile app and the ancillary services available at hyle.kumasaru.com.

1. Local storage

Hyle is designed to respect user privacy to the greatest extent possible. All data generated during ordinary use of the app is saved exclusively on the device's local storage.

No personal or usage data is automatically collected or transmitted to third-party servers during standard use.

2. Public Wishlist

The app includes an optional feature to share a wish list ("Wishlist") via a public link.

• Anonymity: publishing does not require an account or registration.
• Data transmitted: only the list's text data is uploaded to the server. Images are never sent to the server.
• Automatic expiry: the Wishlist and its link are automatically deleted after 60 days.
• Accessibility: anyone with the unique link can view the Wishlist content.

3. Reporting inappropriate content

A direct reporting system (⚑ Report this list) is available on every Wishlist's public page.

Every report is recorded and reviewed. We reserve the right to manually remove any list containing illegal or inappropriate material.

4. Family Sync

The app includes advanced sync functions reserved for authorised devices in your household, accessible only by entering a dedicated passcode.

• Acceptance notifications: when a user shares a collection, other authorised devices receive an in-app notification and can accept or decline access.
• Images: in this mode images are temporarily uploaded to the server so they can be downloaded on the accepting device. Images are removed from the server as soon as the transfer is complete.

5. Tracking, cookies and advertising

• The app does not use profiling systems, tracking cookies, or third-party analytics tools.
• The app does not contain third-party advertising banners or adverts.
• The website may use a technical language cookie (kumasaru-lang) to remember the user's language preference. This cookie contains no personal data.

6. User rights (GDPR)

In accordance with Regulation (EU) 2016/679 (GDPR):

• Local data: resides solely on the user's device and can be deleted at any time by uninstalling the app or clearing app data in the device settings.
• Public Wishlists: expire and are automatically deleted after 60 days. To request early removal, use the report button or write to abuse@kumasaru.com.
• Family Sync images: deleted from the server upon transfer completion. Contact abuse@kumasaru.com to report any issues.

7. Security

Communications between the app and the server are encrypted (HTTPS). Access to Family Sync features is protected by a passcode set by the user and not stored on our servers.

8. Changes to this Policy

We reserve the right to update this Policy at any time. The date of the last update is shown at the top of the page. Continued use of the app after changes are posted constitutes acceptance of the updated version.