LEGAL REVIEW REQUIRED
Accounts and security
Verify email before booking. Kumir never invents a successful social login.
Keep your password secret. Use Forgot password if you lose it — reset links expire and can be used once. Kumir will never email you asking for your current password. Confirm your email before booking, sending Directs, or buying gift cards. Verification links expire in 48 hours.
You may also sign in with Apple or Google when those providers are configured — Kumir never invents a successful social login without a real identity token. Mobile apps keep you signed in with a short-lived access token and a refresh token; changing your password, resetting it, or closing the account signs other devices out. Kumir support may open a read-only view of your account to help with a ticket; they cannot send messages, pay, or change your password in that view. LEGAL REVIEW REQUIRED.