Last updated: 1 September 2026
This Privacy Policy applies to Gocloud Technologies (M) Sdn. Bhd. and its affiliates and subsidiaries in connection with the KUMO™ ecosystem, including Aoikumo™, kumoDent™, kumoVet™, kumoDoc™, kumoSan, kumoBiz, MeTIME Wellness and related websites, applications, platforms, modules, integrations and services.
This Privacy Policy applies to websites operated by us, including aoikumo.com, kumodent.com, kumovet.com, kumodoc.com and kumoteam.co, and should be read together with the KUMO™ End User Licence Agreement (“EULA”) where the KUMO™ Service is used.
This Privacy Policy explains the types of information we collect or process, how and why such information may be used, how it may be disclosed, stored and protected, and the choices and rights available to users under applicable data protection laws.
Depending on how you interact with KUMO™, our websites and Services, we may collect or process information including:
The categories of information collected will depend on the KUMO™ products, features, websites and integrations used.
Our websites may use cookies and similar technologies to improve the user experience and provide, analyse and enhance website functionality. Where applicable, our websites may use a cookie consent or control system allowing users to manage the use of cookies on their device.
Cookies are small files or similar technologies stored on or accessed through a user's device that may collect or remember information about the user's interactions, preferences and use of our websites. They may be used to provide functionality, remember preferences, analyse usage and improve the user experience.
Users may also manage or block cookies through their browser or device settings, although disabling certain cookies may affect the functionality of our websites or Services.
Where KUMO™ processes patient, clinical or Health Data through the Service on behalf of a subscribing clinic, healthcare provider or other organisation, the subscribing organisation generally acts as the data controller, healthcare data custodian or equivalent under applicable law, while KUMO™ acts as a data processor or service provider processing such information on behalf of the subscribing organisation.
KUMO™ may separately act as a data controller or equivalent in relation to personal data that it collects and processes for its own legitimate business and operational purposes, including account administration, subscriptions, security, communications, website operations, analytics and compliance with applicable legal obligations.
Depending on the nature of your relationship with KUMO™ and the Services used, we may process personal data for purposes including:
a. providing, operating, maintaining and supporting the KUMO™ Service;
b. creating and managing user accounts, subscriptions and access permissions;
c. providing requested functionality, including appointment management, reporting, analytics, communications, integrations and other platform features;
d. processing transactions, subscriptions, billing and payments;
e. providing customer service, technical support, training and responding to enquiries;
f. securing, monitoring and protecting the Service, including detecting unauthorised access, fraud, misuse, security threats and other incidents;
g. troubleshooting errors, improving system performance, user experience, workflows, features and product development;
h. conducting analytics, compiling usage information and understanding how our websites and Services are used;
i. providing and improving artificial intelligence, machine-learning and automated features in accordance with this Privacy Policy and the KUMO™ EULA;
j. sending service-related, administrative, security, product and, where permitted, marketing communications;
k. complying with applicable legal, regulatory, healthcare, audit and security obligations; and
l. establishing, exercising or defending legal rights and protecting the legitimate interests, security and integrity of KUMO™, its Users and the Service.
When the KUMO™ Service is used, we may automatically generate and collect system logs, access logs, audit records, user activity information, pages or modules accessed, timestamps, session information, device, browser and operating-system information, telemetry, diagnostics, feature-usage information and other platform analytics.
We may also use interaction logging, event tracking, session telemetry and, where applicable, session-replay or screen-recording technologies. Where such technologies are used, interactions with the Software and information displayed within the user interface may be recorded or captured.
Such information may be processed for purposes including system security, fraud and unauthorised-access detection, incident investigation, troubleshooting, error detection, service performance, user-experience improvement, product development, analytics and compliance with applicable legal or regulatory obligations.
Access to such information is subject to appropriate confidentiality, security and access controls.
KUMO™ may use artificial intelligence, machine learning and automated analytical technologies to provide, operate, secure, analyse and improve the Service and to provide AI-enabled features to Users.
Where applicable, KUMO™ may use de-identified, pseudonymised, anonymised or aggregated data to train, tune, evaluate and improve KUMO™'s AI models and proprietary technology, subject to applicable data-protection laws and the safeguards described in this Privacy Policy and the KUMO™ EULA.
Where AI-generated predictions, recommendations, summaries or other outputs are provided, such outputs are generated through automated processes and may contain errors or inaccuracies. Users remain responsible for exercising appropriate professional judgement when relying on such outputs.
For avoidance of doubt, information obtained through third-party APIs or integrations remains subject to the applicable terms, restrictions and policies governing those APIs or integrations. Google Workspace API data will not be used to train, develop or improve KUMO™'s general-purpose AI or machine-learning models except where expressly permitted by Google's applicable policies.
Our websites may use Google Analytics to help us understand how visitors use our websites. Depending on configuration and consent preferences, Google Analytics may collect cookie or similar identifiers, device and browser information, usage and session information and approximate location information. Such information is used for website analytics, performance measurement and improvement of our Services, subject to applicable law and user consent requirements. Google Analytics is also subject to Google's applicable privacy policies and terms.
We may use Google Ads and related advertising technologies to measure advertising performance, manage enquiries and leads, and deliver or measure relevant advertising, subject to applicable consent and cookie requirements.
Where a User elects to connect the KUMO™ Service with Google Calendar, KUMO™ may access and process information made available through the Google Calendar APIs to the extent authorised by the User and reasonably necessary to provide the calendar synchronisation functionality.
This may include calendar and event information required to create, update, synchronise or cancel appointments between the KUMO™ Service and the User's connected Google Calendar. Access to Google Calendar information occurs only after the User authorises the connection through Google's authentication and authorisation process.
The User may revoke KUMO™'s access through the relevant Google Account permissions or by disconnecting the integration within the KUMO™ Service where such functionality is available.
Information obtained through Google Workspace APIs will be used and transferred in accordance with the Google API Services User Data Policy and applicable Limited Use requirements.
Google Workspace API data will not be sold, used for advertising purposes, or used to train, develop or improve KUMO™'s general-purpose artificial intelligence or machine-learning models, except to the extent expressly permitted by Google's applicable policies.
The general AI, analytics and model-training provisions of this Privacy Policy and the KUMO™ EULA shall remain subject to any additional restrictions imposed by applicable third-party API terms and policies, including Google's applicable API policies.
Where necessary to maintain the integration, KUMO™ may securely store authentication tokens and relevant synchronisation information for as long as the integration remains connected or as otherwise required to provide the functionality, subject to applicable security and retention requirements.
Third-party services, referral programs, sponsored links and advertising technologies may place cookies or similar technologies on a user's device. The information collected and the duration of such technologies are subject to the respective third party's privacy practices and applicable user consent requirements.
We do not sell personal data.
We may disclose or make personal data available to third parties where reasonably necessary to provide, operate, secure and support the Service, including cloud infrastructure providers, hosting providers, communications providers, analytics providers, payment providers, technical support providers, authorised integration partners and other service providers or sub-processors acting on our behalf.
We may also disclose information where required by applicable law, regulation, court order or governmental authority; where necessary to protect the security or integrity of the Service; with the User's instruction or consent; or in connection with a legitimate corporate transaction.
Where such third parties process personal data on our behalf, we require appropriate confidentiality, security and data-protection obligations to be implemented in accordance with applicable law.
KUMO™ may operate email newsletter and communications programmes to inform subscribers and Users about KUMO™ products, services, features, updates, events and other relevant information. Where required, users may subscribe to marketing communications through the applicable opt-in process. Some subscriptions may be manually processed through prior written agreement with the user. We may use authorised service providers to operate or deliver our email communications. Where such providers process personal data on our behalf, they are subject to appropriate confidentiality, security and data-protection requirements.
Email communications sent by KUMO™ may contain tracking technologies that allow us to understand engagement with our communications. Such activity may include whether an email was opened, links clicked, and the date, time and frequency of interaction, depending on the technology used and applicable consent requirements.
This information may be used to measure communication effectiveness and provide more relevant content.
Recipients may unsubscribe from marketing communications at any time using the unsubscribe option provided in the relevant communication or by contacting KUMO™. Unsubscribing from marketing communications will not prevent KUMO™ from sending necessary service-related, security, administrative or transactional communications.
Our websites and Services may contain links to third-party websites or services. KUMO™ is not responsible for the privacy, security, content or practices of such third parties. Users are encouraged to review the applicable privacy policies and terms of any third-party websites or services they access.
Our websites and Services may contain advertisements, sponsored content or links provided by KUMO™ or third-party advertising partners.
Such advertisements or sponsored content may use cookies, similar technologies or referral information to measure engagement, advertising performance or referrals, subject to applicable consent and privacy requirements.
Where a User follows a link to a third-party website, product or service, the third party's own terms and privacy practices will apply. KUMO™ is not responsible for the privacy practices, content or services of third-party websites or advertisers.
KUMO™ may maintain accounts or pages on third-party social media platforms. Any interaction with KUMO™ through such platforms is also subject to the applicable platform's terms, privacy policies and data-processing practices.
Our websites may include social-sharing or similar features. Where such features are used, the relevant social media platform may receive information about the User's interaction in accordance with that platform's privacy practices.
KUMO™ implements appropriate technical and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration, loss, misuse or destruction. Such measures may include encryption, access controls, role-based permissions, secure authentication, logging, monitoring and other technical or organisational safeguards appropriate to the nature of the information processed.
While KUMO™ takes reasonable measures to protect information processed through the Service, no electronic transmission, storage system or security measure can guarantee absolute security.
Personal data, including User Data and Health Data where applicable, may be stored, accessed or processed in jurisdictions outside the User's location, including through approved cloud infrastructure providers, service providers and sub-processors.
Where personal data is transferred or processed across borders, KUMO™ will take reasonable steps to comply with applicable data-protection laws and implement appropriate safeguards where required.
Where specific data-residency or localisation requirements are imposed by applicable law, KUMO™ will address such requirements in accordance with applicable legal and regulatory obligations.
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected or processed, to provide the Service, or to comply with applicable legal, regulatory, security, audit or contractual obligations.
User Data and Health Data associated with an inactive, terminated or expired KUMO™ account may be retained for the period specified in the KUMO™ EULA and may thereafter be securely deleted, subject to any applicable legal or regulatory retention requirements.
Certain information, including security logs, audit records, transaction records and information reasonably required for legal, regulatory, fraud-prevention, dispute-resolution or security purposes, may be retained for a longer period where reasonably necessary or required by applicable law.
Users remain responsible for retaining or exporting records that they are independently required to preserve under applicable healthcare, professional or other regulatory requirements.
Subject to applicable data-protection laws, individuals may have rights in relation to their personal data, which may include the right to request access to or correction of personal data, withdraw consent where processing is based on consent, object to or limit certain processing, unsubscribe from marketing communications, or exercise other rights available under applicable law.
Requests relating to personal data or the exercise of applicable privacy rights may be submitted to KUMO™ using the contact details provided in this Privacy Policy.
Certain requests relating to patient or Health Data held within a subscribing organisation's KUMO™ account may need to be directed to the relevant subscribing organisation where that organisation acts as the data controller or healthcare data custodian.
We may update this Privacy Policy from time to time to reflect changes to our Services, technology, legal requirements or data-processing practices. The updated version will be published on our websites together with its effective or last-updated date.
KUMO™ user accounts and administrative access to the Service are not intended for persons under eighteen (18) years of age.
This does not prevent subscribing healthcare providers, clinics or other organisations from lawfully processing information relating to minors, including patient or Health Data, through the Service where such processing is necessary for the provision of their services and is undertaken in accordance with applicable laws, consent requirements and professional obligations.
This Privacy Policy may be made available in more than one language to meet applicable legal or regulatory requirements and for the convenience of Users.
Where required by applicable law, the appropriate language version of this Privacy Policy or privacy notice will be made available to the relevant individuals.
Questions, concerns or requests relating to this Privacy Policy or the processing of personal data may be directed to:
Gocloud Technologies (M) Sdn. Bhd.
Email: [email protected]
Where a request relates to patient or Health Data controlled by a subscribing clinic, healthcare provider or organisation, we may direct the individual to the relevant organisation where appropriate.
B2-11-01 Meritus Towers @ Oasis Corporate Park,
Jalan PJU 1A/2 Ara Damansara,
47301 Petaling Jaya.
