Kora Memory Privacy Policy

Who we are

Kora Memory (“Kora”) is a personal memory assistant available at koramemory.com and as an Android application (package com.koramemory.app). The data controller is the owner of the application, reachable at help@koramemory.com.

Account information

You need an account to use Kora. We store the email address associated with your account and, if you sign in with Google, the name and profile picture that Google returns to us. Passwords are handled by our authentication provider (Supabase Auth) and are never visible to us.

Optionally you may add a display name and a profile photo, which are stored in your account settings and in a private storage bucket.

Content you create

Kora stores the content you choose to save: memories, notes, calendar events, reminders, lists and list items, routines and routine logs, item placements (“where is…”), documents you upload, links between items, conversation-derived facts, and your application settings (language, region, voice, appearance, notification preferences).

Each record is stored with its creation date, and time-based records also store the date, time and time zone you provided, so that Kora can answer questions about when something happened.

Voice

The microphone is only activated when you start a conversation. The recorded audio is sent to our AI provider for transcription and is not stored by Kora. The resulting text is processed like any other message and only saved if it produces a memory or another record you asked for.

Kora also sends its replies as text to a text-to-speech service to generate the spoken answer. Generated audio is streamed to your device and not stored on our servers.

Camera, photos and files

You can attach photos or documents. Images and files you upload are processed by our AI provider to extract their content, and documents are stored in a private storage bucket linked to your account. Kora does not access your camera roll or files without your explicit action.

Location

If you grant location permission, your approximate or precise coordinates are used at that moment to give location-aware answers (for example, nearby context). Kora does not run background location tracking and does not keep a location history unless you explicitly save a memory or a placement containing that information.

Notifications

If you enable notifications, we store your push subscription (the endpoint and keys issued by your browser or device) so that reminders can be delivered. You can disable notifications at any time from your device or browser settings; the subscription is then no longer usable.

AI processing

Kora uses the Lovable AI Gateway and its underlying model providers to transcribe your voice, generate replies, extract structured memories, classify lists, summarise documents and produce suggestions. To do this, the relevant part of your content (your message and the memories or records needed to answer it) is transmitted to that service.

If a question requires public information from the internet, the query text may also be sent to a web search provider (Tavily, Brave, Exa, Serper, DuckDuckGo or a self-hosted SearXNG, depending on availability).

Third-party services

Supabase — authentication, database and file storage.

Lovable AI Gateway and its model providers — transcription, text generation and speech synthesis.

Google — only if you choose to sign in with Google, and Google Play Billing plus the Google Play Developer API if you purchase a subscription from the Android app.

Apple — only if you purchase a subscription through the Apple App Store.

Web search providers listed above — only for questions that require public information.

Web push delivery services operated by your browser or device vendor (for example Google FCM endpoints) — only to deliver notifications you enabled.

Google Fonts — the website loads fonts from Google's font CDN, which receives your IP address as part of that request.

We do not sell your data and we do not share it with advertising networks.

Payments

Kora Premium subscriptions are purchased and processed by Google Play or the Apple App Store. Kora never receives or stores your card or bank details. We store the purchase identifier and token, the platform, the product, the status and the renewal dates required to keep your subscription active, plus the subscription events sent by those stores.

Usage limits and technical data

To enforce the daily AI usage limit of the free plan, we store a per-day counter of AI requests linked to your account. Error logs may be recorded to keep the service working; we do not run advertising, analytics or user-profiling SDKs.

Like any internet service, our hosting and providers process your IP address as part of delivering requests.

Data storage and security

Your data is stored in a managed Supabase project. Every table is protected by row-level security policies so that a record can only be read or modified by the account that owns it. Uploaded documents and profile photos live in private buckets and are served through short-lived signed URLs. All traffic uses HTTPS.

No system is perfectly secure, and we make no guarantee beyond the measures described here.

Retention and deletion

Your content is kept until you delete it or delete your account. You can delete individual memories, notes, events, reminders, lists and documents from inside the app.

You can delete your entire account from Settings. This removes your account data and your records; deletion is immediate and cannot be undone. If the deletion cannot be completed automatically, write to help@koramemory.com and we will complete it.

Deleting your account does not cancel a store subscription: cancel it in Google Play or the App Store.

Children

Kora is not directed to children under 13 and we do not knowingly collect their data.

Your choices

You can review, edit and delete your content at any time inside the app, revoke microphone, camera, location and notification permissions from your device settings, and delete your account. For any request about your data, contact help@koramemory.com.

Changes

If this policy changes, we will update the effective date at the top of this page.

Contact

help@koramemory.com