Koru Privacy Policy · 개인정보 처리방침

Koru collects only the minimum data required to provide its household-asset-tracking service. Specifically, we collect the following Google user data through Google OAuth sign-in:

• Google account identifier (sub), email address, and full name from your Google profile
• Profile picture URL (if provided by Google)

Koru does not request or access any other Google data such as Drive files, Gmail content, contacts, or calendar.

We additionally collect data that you enter directly into Koru:

• Asset entries (stocks, savings, real estate, crypto, other)
• Household name and member display names
• Authentication session tokens stored in your browser

The Google user data and asset data are used solely to:

• Authenticate you and identify your account within the app
• Display your name and avatar inside the household interface
• Track and aggregate the household's assets across members
• Send invitation links you generate so other family members can join the same household

We do not use Google user data for advertising, profiling, or analytics about you as an individual.

Koru does not sell, rent, or transfer any Google user data or asset data to third parties for advertising or any other commercial purpose. Specifically, Koru does not:

• Sell Google user data to data brokers or any third party
• Use Google user data for targeted advertising
• Transfer Google user data to anyone outside your household members

The only external services Koru communicates with are:

• Google — for OAuth sign-in (we receive your email/name only)
• Supabase (database & auth provider) — stores your data on our behalf
• Yahoo Finance / CoinGecko — for stock and crypto market prices. No user-identifying information is sent.

All data within a household is shared only among the members who have explicitly joined that household via your invite.

All connections to Koru use HTTPS/TLS. Asset data is stored in PostgreSQL (managed by Supabase) with Row Level Security (RLS) policies that prevent any household from reading another household's data at the database level. Koru never stores your password — Google OAuth issues short-lived tokens that we keep only in your browser session.

모든 통신은 HTTPS/TLS로 암호화되며, 데이터는 PostgreSQL의 Row Level Security로 가구 단위로 격리되어 데이터베이스 차원에서 다른 가구가 접근할 수 없습니다. 비밀번호는 저장되지 않습니다.

Koru retains your data only while your account is active. You have full control to delete your data at any time:

• Leave household (Settings → 가구 나가기): removes your membership while preserving your account
• Evict member (manager-only, Settings): the household manager can remove a member, which immediately and permanently deletes that member's asset data within the household
• Delete account (Settings → 계정 삭제): removes your account and all associated data permanently

On account deletion or eviction, all asset rows owned by that user are removed from the database. The deletion takes effect immediately and cannot be reversed.

You can revoke Koru's access to your Google account at any time via Google Account permissions. Revocation will sign you out of Koru.

Koru 사용을 원치 않을 경우 위 링크에서 권한을 철회할 수 있습니다.

Koru is intended for adult users managing household finances and is not directed at children under 13. We do not knowingly collect data from children under 13.

We may update this privacy policy from time to time. The current version will always be available at https://khaleesi.uk/privacy. When we make material changes — particularly any change to how Koru accesses, uses, stores, or shares Google user data — we will:

• Update the "Last updated" date at the top of this page
• Display an in-app notification on your next sign-in to Koru summarizing the change
• Where the change affects how Google user data is used, request your renewed consent before continuing service

Continued use of Koru after a notified change constitutes acceptance of the revised policy. Users should review this page periodically.

정책이 변경될 경우 본 페이지에 갱신일을 표시하고, 다음 로그인 시 앱 내 알림으로 변경 내용을 안내합니다. Google 사용자 데이터 처리에 영향을 주는 변경은 사용자의 재동의를 받습니다.

For privacy-related questions, please contact khaleesi.support@gmail.com.