Privacy Policy

Who is responsible

Koru is operated by PEAK SALES DIJITAL PAZARLAMA SATIS VE DIS TICARET LIMITED SIRKETI (Necip Fazıl Mah. Mina Sok. No:1-2, Ümraniye, 34773 İstanbul, Türkiye). Contact: [email protected]. Last updated: 2026-09-28.

What Koru is, and is not

Koru is a family safety app. Software on the child's (or an older relative's) phone learns the normal day on the phone itself; when something is unusual it asks the child first and tells the parent only if there is no answer. Family members see each other on the family map; each person's card carries one status sentence.

Koru is not an emergency service. The SOS button calls only your family and the emergency contacts you chose; it does not call police, ambulance or fire services. In an emergency call your local emergency number.

Koru is not a medical or psychological service; it does not diagnose or treat. If a child's text shows signs of self-harm it shows helplines and tells the parent only the category ('a worrying expression'), never the text.

Core principles

Location is shared continuously within the family: each member's phone (parent, child, older relative) regularly sends its location to the server and it appears on the family map. The child sees the same map the parents see. Coordinates are encrypted with that person's own key and only members of the same family can see them. The latest location is kept while the account exists; the history trail (where someone was during the day) is deleted after 48 hours. Saved places (home, school, practice) are learned on the phone; place records carry no coordinates, only their labels.

Anyone can pause their own location sharing in the app. When paused, the latest location is deleted, is not shown on the map, and the other family members are told; this is also written in the shared log (nothing is hidden). There is also a more frequent, time-limited live share: when the parent turns on concern mode (60 minutes at most; the child is notified), when the child starts transit or walk mode, or during SOS; these points are encrypted and deleted 24 hours after the share ends.

Message content never leaves the phone. On Android the child may grant notification access; messages are evaluated on the phone and only a category (e.g. 'secrecy request from an unknown account'), severity and signal counts reach the server. The parent cannot read any message; Koru does not store any.

The child sees what is reported. Every line the parent sees is also in the child's shared log. There is no hidden monitoring.

No ads, no data sales. Location, exception, risk or health data never goes to any ad network, data broker or insurer.

Your account

No email, phone number or name is needed; the app generates a random identifier on the device. A parent may link Apple or Google so the family survives a phone change. A child's account never asks for an email.

Children's accounts and parental consent

For children under 13 (under 16 in some countries) an account is created only through a parent's or legal guardian's in-app invitation, and the parent gives verifiable consent (in-app confirmation from the parent's own account; stored with date and text version). The parent may withdraw consent at any time, which deletes the child's account and data.

Data collected about a child is minimal: a name (may be a nickname), birth year, device identifier, the place labels the child types, status reports, answers to questions (one tap or a short text/voice answer; audio is not stored, only its text), trust score, location (latest location and a 48-hour trail; encrypted), battery level, and time-limited live share points (24 hours).

A child's data is never used for advertising or profiling and is never sold.

What we process

Profile: name, language, country, time zone, role (parent / child / elder), birth year (child and elder), morning hour.

Family: members, invite codes, emergency contacts (name and phone; encrypted), settings (curfew, quiet hours, sensitivity).

Status and exceptions: status reports (home / known / moving / unknown / off, battery), exception records (kind, time, whether asked, answer category and an optional short answer text — encrypted), the day's summary sentence (encrypted), trust ledger.

Location: latest location (coordinates, accuracy, time, battery; encrypted), the last 48 hours of trail (encrypted), whether sharing is on or paused.

Live share: time-limited coordinates (encrypted, 24 hours), who opened it, why, how long.

Walking companion and voice answers: live audio is not recorded; the transcript is kept during the session and summarized (encrypted). The elder morning call works the same way.

Online risk (Android only, if the child enables it): category, severity, signal counts, app name, an irreversible digest (hash) of the sender identifier. Message text never reaches the server.

Usage: screen view events, app version, device type, subscription events via the app stores (we never receive card details).

Safety flags: if signs of crisis are detected in a child's text, only the date, level and country are recorded.

How we protect it

Location coordinates, place labels, answer texts, day summaries, emergency contact details, guidance texts, reports and live points are encrypted in the database with a per-user key (AES-256-GCM); keys are wrapped with a master key. Data is protected with TLS in transit. Labels, coordinates and texts are never written to server logs. API keys never reach the device.

Why and on what basis

To provide the service (performance of a contract); verifiable parental consent for children's data (COPPA, GDPR art. 8, Turkish KVKK); safety and abuse prevention (legitimate interest); legal obligations.

Who we share it with

AI providers: OpenAI (live voice for the walking companion and the elder morning call, voice-answer transcription) and Anthropic (question phrasing, day summary, parent guidance, weekly report, crisis classifier). They receive only the text or audio needed at that moment, never your account identifier; the data is not used to train models and is not retained. No location coordinate ever goes to an AI provider.

SOS calls: Twilio (to ring emergency contacts). Subscriptions: Apple App Store, Google Play, RevenueCat. Error tracking: Sentry (user id only). Push notifications: Apple Push Notification service and Google (Expo). There is no advertising SDK in the app; we collect no advertising identifier (IDFA/AAID) and we do not track you across apps. Hosting: Hetzner (EU) and Cloudflare.

We do not sell data and do not share it with anyone else unless required by law.

How long we keep it

Status reports are kept 30 days, the location trail 48 hours, and live points 24 hours after a share ends; the latest location is deleted when sharing is paused or the account is deleted. Other data is kept while the account exists. Deleting your account in the app permanently destroys your encryption key and content; when a child's account is deleted, every record the family holds about the child becomes unreadable. A deleted family is permanently erased after 30 days.

Your rights

You can access, correct, delete, export and object (GDPR and KVKK). Parents can see, correct and delete their child's data; children see their own log. Use the in-app deletion or write to [email protected].

Age

Parent accounts are for adults 18 and over. Child accounts are for ages 8–17 through a parent's invitation. Elder accounts are created through a family member's invitation and require the elder's own consent.

Changes

When this policy changes we notify you in the app and update the date above.