Privacy Policy
Effective July 26, 2026
Overview
Kura ("we", "our", "us") is a personal content vault app, operated by Kunal Singh, that helps you save and organize content from around the web. This policy explains what data we collect, why we collect it, and how you can control it. For any privacy question or request, email hello@usekura.app. We do not sell your data.
Information we collect
Everything below is linked to your account through your unique user ID, with one exception: analytics events, which use that same ID but are never matched back to your name or email inside our analytics tool. Nothing here is used to track you across other companies' apps or websites.
Account information
When you sign in with Google or Apple, we receive your name, email address, and a unique user identifier from that provider. We store this in Firebase Authentication to identify your account. This is personal data.
Content you save
URLs, text, and metadata (title, thumbnail) for items you save to Kura. This content is stored in Firestore and a vector store, associated with your account. We only process content you explicitly share with us. We do not access your private social media accounts, messages, or profile data. When you save a YouTube, TikTok, Instagram, or Facebook link, we send that URL to the platform's own public metadata service to fetch its title and thumbnail. See Third-party services below.
AI-generated data
Kura uses the Gemini API (Google) to generate thread titles, briefs, and cover images from your saved content. Your saved content is sent to the Gemini API to produce these outputs. Per Google's API Terms, your data is not used to train AI models. To generate a cover photo, we may also send a short topic phrase (never your full saved content) to Unsplash's photo search.
Device tokens
If you enable push notifications, we store your device's FCM token to deliver notifications. Disabling notifications removes the token from our servers. This token is reset by the OS whenever the app is reinstalled. It is not a permanent hardware identifier, and Kura never reads your device's IMEI, serial number, or other permanent ID.
Subscription and billing information
If you subscribe to Kura Pro, payment is handled by the App Store or Google Play, and subscription status is managed through Adapty. We receive your subscription status and entitlements, not your payment card details. Those never reach our servers.
Waitlist signups
If you join our launch waitlist at usekura.app, we collect the email address you provide. This is stored separately from any in-app account and used only to notify you when Kura becomes publicly available. Email us to have it removed at any time.
Usage analytics
We use PostHog to collect pseudonymous event data (e.g. which features are used, how often the app is opened). Events are associated with your user ID (a Firebase UID, not your name or email). This data is used only to improve the app and is retained for 12 months.
Server logs
Our backend on Google Cloud Run automatically logs request metadata including IP addresses. Logs are retained for 30 days.
How we use your information
- To provide the Kura service (saving, organizing, and displaying your content)
- To generate AI-powered thread summaries and briefs via the Gemini API
- To send push notifications about your briefs (only if you opt in)
- To understand how the app is used and improve it over time
- To authenticate you securely via Firebase
Third-party services
All processing of your data happens in the United States (Google Cloud infrastructure). If you are located in the EU or another jurisdiction, your data is transferred to and processed in the US, which may have different data protection standards than your country.
Kura uses YouTube API Services when you save a YouTube link. By using this feature you are also agreeing to be bound by the YouTube Terms of Service. You can revoke Kura's access to YouTube API Services via your Google security settings.
Advertising and tracking
Kura has no advertising SDKs and does not track you across other companies' apps or websites, so Apple's App Tracking Transparency framework does not apply to Kura. We do not use your device's advertising ID, IDFA, or any other tracking identifier.
Data retention
- Account data, threads, and saved content: retained until you delete your account
- Account deletion: all Firestore data, authentication record, and device tokens are permanently deleted immediately upon request
- Analytics events: retained for 12 months in PostHog
- Server logs: retained for 30 days in Google Cloud
Your rights
- Access: View all your saved content and threads within the app at any time.
- Deletion: Delete your account via Settings → Profile → Delete Account. All data is permanently removed immediately.
- Opt out of notifications: Disable push notifications in Settings at any time.
- Data requests: Email hello@usekura.app for any other data requests or questions.
EU residents (GDPR)
If you are located in the European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR).
Legal basis for processing: We process your data on the basis of contract performance (to provide the Kura service you signed up for) and legitimate interest (analytics to improve the service).
International transfers: Your data is transferred to and processed in the United States. We rely on Google's Data Processing Addendum and Standard Contractual Clauses for these transfers.
Your GDPR rights: You have the right to access, rectify, erase, restrict, or port your personal data, and to object to processing. To exercise these rights, email hello@usekura.app. You also have the right to lodge a complaint with your local supervisory authority.
Automated processing: Kura uses AI to automatically cluster what you save into threads and generate summaries from it. This is not automated decision-making with legal or similarly significant effects on you: no decision is made about you as a person, only about how your own content is organized for your own viewing. You can review, edit, or delete any AI-generated content, or any item it was generated from, at any time.
California residents (CCPA/CPRA)
If you are a California resident, you have rights under the California Consumer Privacy Act.
- We do not sell your personal information. We never have and never will.
- We do not share your personal information with third parties for cross-context behavioral advertising. Because we do not sell or share personal information, there is no "Do Not Sell or Share My Personal Information" opt-out to provide, but every other right below is still available to you.
- Right to know: You may request to know what personal information we collect and how we use it. This policy is our disclosure.
- Right to delete: Use Settings → Profile → Delete Account, or email us.
- Right to correct: Update your display name in the app, or email us for other corrections.
- Non-discrimination: We will not discriminate against you for exercising your privacy rights.
India residents (DPDP Act 2023)
If you are located in India, you have rights under the Digital Personal Data Protection Act 2023.
- Right to access: Request a summary of the personal data we hold about you.
- Right to correction and erasure: Request correction or deletion of your personal data. Account deletion removes all data immediately.
- Right to grievance redressal: Contact our grievance officer at hello@usekura.app. We will acknowledge requests within 72 hours and resolve them within 30 days.
Children's privacy
Kura is not directed at children under 13 (or under 16 in the EU). We do not knowingly collect personal information from children. If you believe we have inadvertently done so, contact us and we will delete the information promptly.
Changes to this policy
We may update this policy from time to time. We will notify you of significant changes via the app or email. The effective date at the top of this page reflects the most recent update.
Contact
Questions about this policy? Email us at hello@usekura.app. We aim to respond within 2 business days.