In short
- This website has no forms, no visitor analytics and no tracking cookies.
- In the system, patient data belongs to the clinic; Kuma Tech only processes it so Kuma One can work.
- Each clinic has its own database, separate from other clients.
- Clinical notes stay in Kuma One and are not sent to Kommo.
Who we are
Kuma One is appointment scheduling software for clinics developed by Kuma Tech (Emanuel Junior da Silva da Rocha), Brazilian company registration (CNPJ) 59.732.759/0001-01, located at Rua Benjamin Constant, Dom Feliciano/RS, CEP 96190-000. This policy explains how we handle personal data on the kumaone.com.br website, in the Kuma One system and in the Kommo CRM integration, under the Brazilian General Data Protection Law (Law 13,709/2018, LGPD).
Who decides about the data
The data a clinic records in Kuma One (patients, schedule and appointments) belongs to the clinic, which is the controller. Kuma Tech is the processor: it handles that data only to run the system and according to the clinic's instructions.
For the data of this website and of sales contacts, Kuma Tech is the controller.
What data we handle
- On the website: there are no forms and no visitor analytics. If you choose a language, we keep that choice in a preference cookie. The hosting provider logs technical access data, such as the IP address, for security.
- When you contact us: when you reach us on WhatsApp or by email, we use your name, your phone number or email and the conversation to reply.
- In the system: name, email and permissions of Kuma One users; access codes sent by email; the schedule; the patient data the clinic registers, such as name, phone number and appointment history; clinical notes; and the record of who did each action.
- In the Kommo integration: Kuma One reads from the clinic's Kommo account the pipelines, fields and users needed to connect the calendar, and links each lead to a patient. When a card opens, the widget sends Kuma Tech's central service the Kommo account and user numbers, to open the right clinic's calendar; the central service logs those numbers and the date, without names, emails or conversations.
Health data
Appointment information may be sensitive personal data. It stays in the clinic's environment, with access limited by person and location, and clinical notes are never sent to Kommo. As the controller, the clinic defines the legal basis for processing this data, such as health protection.
Why we use it
- To provide the service the clinic hired (performance of a contract).
- To keep the system secure, prevent fraud and provide support (legitimate interest).
- To comply with legal obligations and respond to authorities when the law requires.
- To reply to people who contact us through the website or WhatsApp.
We do not sell personal data and do not use it for advertising.
Where the data is stored
Each clinic has its own database, separate from other clients. Providers may store data outside Brazil; in that case, the transfer follows the safeguards set out in the LGPD.
How we protect it
- always-encrypted connections (HTTPS);
- access limited by person, permission and location;
- a code sent by email, besides the password, to sign in;
- a separate environment for each clinic;
- a record of who did each action in the calendar.
How long we keep it
System data is kept for as long as the contract with the clinic lasts. At the end, it is returned or deleted according to the clinic's instructions, except what the law requires us to keep. Technical logs are kept as long as needed for security and support, and sales conversations as long as they are useful to serve you.
Your rights
Under the LGPD, you may request: confirmation that we process your data, access, correction, anonymization, blocking or deletion, portability, information about who we share it with, and review of consent when consent is the basis for processing.
If you are a patient of a clinic, make the request to the clinic, which decides about your data; Kuma Tech helps the clinic respond. You may also file a complaint with the Brazilian Data Protection Authority (ANPD).
Changes to this policy
We may update this policy. The date at the end of the page shows the version in force, and important changes are communicated to client clinics.
Data protection officer and contact
Kuma Tech itself, responsible for Kuma One, acts as the data protection officer. Requests and questions about personal data: kumatechbr@gmail.com.
Last updated: October 7, 2026