Privacy Policy

Last updated: October 4, 2025

At Kora, our mission is to help couples repair and strengthen their relationships after conflict. We are committed to protecting your privacy.

1. Our Commitment to Privacy

At Kora, our mission is to help couples repair and strengthen their relationships after conflict. We are committed to protecting your privacy. This Privacy Policy (“Policy”) explains why we collect your personal data, how we use it, and the rights and choices you have under applicable law. For clarity, references in this Policy to “data”, “personal information”, or “information” all mean personal data as defined under the General Data Protection Regulation (GDPR).

This Policy applies whenever you use our mobile application (the “Kora App”), access our website (“Website”), or interact with us through online or social media channels. In this Policy, we refer to all these touchpoints as our “Services”.

We may update this Policy from time to time to remain transparent about how we handle your personal data. Where changes are significant, we will notify you in accordance with applicable legal requirements. This Policy was last updated on 4th October 2025.

2. Who is collecting your data

You know us as Kora, but for legal purposes the data controller responsible for your personal data is Francesco Marino, based in Italy (“we”, “our”, “us”).

As the data controller, we decide what personal data is collected from you and how it is used when you interact with our Services.

Our Services may also contain links to third-party websites or platforms (for example, Twitter, Facebook, Instagram, or resources shared by experts). These third parties have their own privacy policies, which you should read carefully before providing any personal data. We are not responsible or liable for the privacy practices of these third parties.

3. How we collect and use your personal data

When you use the Kora App, we collect different types of personal data depending on how you interact with the Services. To identify you and allow pairing with your partner, we may collect your name, a unique user code generated by us, your device ID, and, if you choose to create an account or subscribe, your email address.

You can also choose to personalise your profile by submitting information such as a username, a profile or cover photo, an anniversary date, or other relationship details. This information helps us tailor your experience, but it is entirely optional and not required to use the App.

In the course of your activity on Kora, we collect the responses you give during sessions and exercises, records of when you connect with your partner, and details of your progress over time. If you decide to share media such as photos, videos, or voice notes, we will process this information as well, but only if you grant us permission to access your device’s camera or photo album.

We may analyse your activity data in an anonymised form to improve features, provide personalised recommendations, and contribute to research into how couples use the App.

At times, you may also choose to provide demographic details such as age, gender, interests, or other relationship information. Where you decide to share more sensitive information, such as sexual orientation, ethnicity, or health-related details, we will only process it with your explicit consent, which you may withdraw at any time either by deleting the information from your profile or by contacting us.

Anonymised demographic data may also be used for research to improve the Services.

We also collect usage information to help us improve the App. This includes data about how you interact with the Services, such as surveys you complete, time spent in the App, and features you use most often. We may collect your IP address to determine your general location for security purposes and to prevent fraud, as well as device identifiers or push notification tokens to communicate with you about your activity.

If you contact us for support, we will collect the email address you use to reach us along with any information you provide in your message. We may also gather technical information about your device to help us diagnose and resolve issues more effectively.

When you subscribe to Kora Premium or register for an account, we collect the details of your subscription along with the information you provide when setting up your account, such as an email address and password. This information allows us to create and maintain your account, enable secure login, and provide backup and restore functions.

Finally, we may use your email address to send you updates, newsletters, or promotional offers related to Kora, but only where this is permitted by law and with your consent where required. You may opt out of these communications at any time. We also use technologies such as cookies, device identifiers, and pixels (as explained further in our Cookie Policy) to remember your preferences, personalise your journey, and, where allowed, present you with relevant Kora promotions.

4. Our lawful bases for the use of your personal data

Under data protection law, we must identify the lawful basis on which we process your personal data. The lawful bases we rely on in Kora are explained below.

• Performance of a contract: Some of the data we collect is necessary to provide you with the Services you have signed up for.
• Legitimate interests: We process certain data because it is necessary for our legitimate business interests, and doing so does not override your rights and freedoms.
• Consent: Where you choose to provide sensitive information, we only process this data with your explicit consent.

Examples of how these apply:

• Identity, usage, support, and technology data are generally processed on the basis of our legitimate interests.
• Subscription and account details are processed to perform our contract with you.
• Optional profile and demographic information are processed on legitimate interests, and if sensitive, only with your consent.
• Activity information is used for legitimate interests to provide insights and track progress, and if sensitive, with your consent.
• Marketing information is used on legitimate interests or consent where required.

5. Information sharing you control

When you use Kora, your personal data is not automatically shared with your partner. You decide if and when to pair your account with your partner’s account. By choosing to pair, you control the sharing of information such as your name and the conversations you choose to engage in together through the App.

Once paired, your conversations in Kora will be visible to your partner until you unpair or delete your account. You can end sharing at any time by disconnecting your account from your partner’s, or by deleting your account entirely.

6. Sharing personal data with service providers and other organisations

We never sell your personal data to advertisers or share it with third parties in exchange for compensation. However, we may share your data with trusted third parties when necessary to provide the Services.

We work with service providers who carry out functions on our behalf, such as network and technology providers, cloud hosting and data storage, payment processors, subscription management platforms, data analytics (including artificial intelligence and machine learning), mailing and communications providers, and customer support tools. We only share the minimum personal data necessary for them to perform their services, and they must act in accordance with our instructions.

We may also share personal data with other organisations in specific situations: if required by law or a public authority; if needed to establish, exercise, or defend our legal rights (including sharing with professional advisors); or if we sell, transfer, or enter into negotiations to sell or transfer part of our business. In the event of such a transfer, the receiving organisation may use your data in the same way as set out in this Policy.

7. How we protect your information and where we store it

We use physical, electronic, and procedural safeguards that comply with legal standards to protect your personal data. However, no method of transmission over the internet or method of electronic storage is 100% secure, so we cannot guarantee absolute security.

The personal data we collect may be processed or stored outside Italy or the European Economic Area (“EEA”). If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as the EU’s Standard Contractual Clauses, to protect your information. Access to personal data is limited to employees, contractors, and service providers who need it in order to operate, develop, or improve the Services.

8. How long we use personal data for

We keep your personal data only for as long as necessary for the purposes for which it was collected, taking into account the nature and sensitivity of the data, the potential risks of unauthorised use or disclosure, the purposes of processing, and applicable legal or regulatory requirements. We may also retain personal data as necessary to comply with legal obligations, resolve disputes, and enforce our agreements and rights. When personal data is no longer needed, we will delete it or anonymise it so it can no longer identify you.

9. Your data protection rights – UK and EEA residents

If you are a resident of the European Economic Area (EEA) or the United Kingdom, you have specific rights under the GDPR in relation to your personal data. You may exercise these rights by contacting us (see “How to Contact Us” below):

• Access: You have the right to request a copy of the personal data we hold about you.
• Correction: You can ask us to correct inaccurate or incomplete information.
• Deletion: You may ask us to delete your personal data where it is no longer needed or was processed unlawfully.
• Restriction: You can request that we temporarily restrict our use of your data while accuracy or objections are reviewed.
• Objection: You may object to our processing where we rely on legitimate interests.
• Direct marketing: You can object at any time to direct marketing.
• Portability: You may request your data in a structured, machine-readable format.
• Complaints: You may lodge a complaint with your national data protection authority.

10. Children’s data

Kora is not intended for individuals under the age of 18, and we do not knowingly collect personal data from children. If we become aware that we have inadvertently collected personal data from someone under 18, we will delete it as soon as possible in accordance with the law.

11. International privacy laws

This Policy complements and does not replace national data protection laws. If you are located outside the EEA, local data protection laws may also apply. Where there is a conflict, the stronger protections will prevail.

12. Advertising

At this stage, Kora does not share your personal data with advertisers or third-party ad networks. If this changes in the future, we will update this Policy and provide you with clear information about how your data may be used and your ability to opt out of interest-based advertising.

13. U.S. State Data Privacy

This section of our Policy contains information required by certain U.S. state data privacy laws. If you reside in California, Colorado, Connecticut, Utah, or Virginia, this section applies to you and supplements the rest of our Policy.

California

The California Consumer Privacy Act (“CCPA”), as amended by the California Privacy Rights Act (“CPRA”), requires us to provide California consumers with additional information regarding how we collect, use, and disclose your personal information, and the rights available to you under the CCPA.

As described in Section 3 above, Kora may have collected the following categories of “personal information” within the last 12 months:

• Identifiers, such as your name, email address, and username.
• Personal information categories listed in the California Customer Records statute.
• Commercial information, such as transaction and purchase history.
• Internet or network activity, such as interactions with our Website.
• Geolocation data based on your IP address.
• Audio, electronic, visual, or similar information such as media you upload.
• Account login details (username and password).
• Inferences drawn from the above to create a summary of your preferences.

Kora does not sell your personal data for money. However, we may use cookies and similar technologies that disclose limited information to third-party analytics or advertising providers, which may be considered a “sale” or “sharing” under the CCPA. You can opt out of such data uses via our cookie banner or privacy-choices link on our Website. We do not knowingly sell or share information of California residents under 16.

If you are a California resident, you may exercise the following rights under the CCPA:

• Know and Access: Request details about the categories and specific pieces of personal information we have collected.
• Correct: Request correction of inaccurate information.
• Delete: Request deletion of personal information collected from you.
• Opt-Out of Sales and Sharing: Request that we not sell or share your personal information.
• Limit Sensitive Data Use: Kora collects certain sensitive data only when you choose to provide it and uses it solely for the limited purposes described in this Policy.
• Non-Discrimination: You will not be discriminated against for exercising these rights.

Colorado, Connecticut, Utah & Virginia

Residents of these states have similar rights to access, correct, delete, or obtain a copy of their personal data, and to opt out of data processing for targeted advertising. You may exercise these rights by emailing getkoraapp@gmail.com. We may request verification of your identity to protect your data. We will respond to verified requests within 45 days (or within the period required by law).

14. Making rights requests

To exercise your rights, please contact us at getkoraapp@gmail.com. In some cases, we may need to verify your identity before fulfilling your request. Authorized agents may submit requests on your behalf where permitted by law. We will only use verification information for that purpose.

15. How to contact us

If you have any questions about how we collect, store, or use personal data—or to exercise any of your rights—please email getkoraapp@gmail.com.