Privacy Policy

1. Introduction

Welcome to Koru ("App", "we", "us", or "our"), a pregnancy and baby companion app developed by Jacob Ko / 제이콥엔코 ("Developer"). This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the Koru mobile application on iOS or Android.

By using Koru, you agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of the App.

2. Information We Collect

2.1 Account Information

• Name and email address (when you sign in with Google or Apple)
• Profile photo (optional, from your Google or Apple account)
• Authentication tokens used to maintain your session

If you use Guest Mode, no account information is collected. All data in Guest Mode is stored locally on your device only.

2.2 Baby & Pregnancy Data

• Baby's name (or nickname)
• Due date or date of birth
• Country of residence (used to localise well-child and vaccination schedules)

2.3 Health & Tracking Records

• Journal entries (text notes you write)
• Symptom logs (symptoms you record during pregnancy or postpartum)
• Appointment records (dates, notes, and types of appointments)
• Vaccination schedule records (check-offs and notes)
• Well-child check records (check-offs and notes)

2.4 Photos & Media

• Photos you upload to the "Memories" feature (stored in Firebase Storage)
• We do not access your device's photo library without your explicit permission

2.5 Device & Usage Information

• Device type, operating system, and version (collected automatically by Firebase)
• App crash reports and performance data (Firebase Crashlytics / Analytics)
• Advertising identifier (IDFA/GAID) used by Google AdMob to serve banner ads
• IP address (collected temporarily by Firebase infrastructure; not stored by us)

3. How We Use Your Information

We use the information we collect to:

• Provide and personalise app features (tracking, schedules, journals, memories)
• Sync your data across devices when you are signed in
• Display localised well-child and vaccination schedules based on your country
• Send optional reminders for appointments and check-ups (if you enable notifications)
• Diagnose crashes and improve app stability (Firebase Crashlytics)
• Understand general usage patterns to improve the App (Firebase Analytics — aggregated, not sold)
• Display relevant banner advertisements via Google AdMob to keep the App free

We do not sell, rent, or share your personal information with third parties for marketing purposes.

4. Third-Party Services

Koru integrates the following third-party services, each with its own privacy policy:

Firebase services are operated by Google LLC and data may be stored on Google servers outside New Zealand, including the United States, under Google's standard contractual clauses.

5. Data Retention & Deletion

We retain your data for as long as your account is active or as needed to provide the App's services.

Deleting Your Account

You can delete your account at any time from within the App (Settings → Delete Account). When you delete your account:

• All data stored in Firebase Firestore is permanently deleted.
• All photos stored in Firebase Storage are permanently deleted.
• Your authentication record is removed.
• This process is irreversible — deleted data cannot be recovered.

Guest Mode Data

Data in Guest Mode is stored only on your device. Deleting the App removes all Guest Mode data permanently.

Aggregated Analytics

Anonymised analytics data may be retained by Firebase for up to 14 months per Google's standard policy.

6. Data Security

Your data is stored in Google Firebase, which provides encryption in transit (TLS) and at rest. Access is controlled by Firebase Security Rules. No method of internet transmission is 100% secure — while we strive to protect your data, we cannot guarantee absolute security.

7. Children's Privacy (COPPA)

We do not knowingly collect personal information from children under 13. Baby data you enter is controlled by you as a parent or caregiver — it is your data, not your child's, in the context of COPPA. If you believe we have inadvertently collected such information, contact us at jacobkosmart@gmail.com.

8. Your Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Delete your account and associated data (see Section 5)
• Opt out of personalised advertising (via your device's ad tracking settings)
• Withdraw consent at any time (by deleting your account)

NZ users: Under the Privacy Act 2020, you have the right to request access to and correction of your personal information. Contact jacobkosmart@gmail.com.

Opt-Out of Personalised Ads

• iOS: Settings → Privacy & Security → Tracking → turn off "Allow Apps to Request to Track"
• Android: Settings → Privacy → Ads → Opt out of Ads Personalisation

9. International Data Transfers

Koru is available in New Zealand, Australia, the United States, and Canada. Your data is stored on Google Firebase servers which may be located outside New Zealand. By using the App, you consent to such transfers under Google's standard contractual clauses.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page. Continued use of Koru after the updated policy is posted constitutes your acceptance.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us:

We aim to respond to all privacy-related enquiries within 5 business days.