Privacy Policy

Last updated: September 14, 2026

Kororā ("Kororā", "the app", "we", "us") helps you turn photos of items you own into ready-to-post marketplace listings, and optionally share them with buyers via a web link. This policy explains what information is collected, how it's used, and who it's shared with — and applies both to the Kororā mobile app and to the korora.app website (including shared listing pages, which anyone with a link can view without installing the app).

No account, no sign-up

Kororā doesn't ask you to create an account, and doesn't collect your name, email address, or phone number. Each install is identified only by an anonymous, randomly-generated device identifier (via Firebase Anonymous Authentication) — there is no way for us to connect this identifier back to your real-world identity.

Information we collect

Photos. When you photograph or select photos of an item to list, those photos are:

• sent to Google's Gemini AI API to generate a title, description, category, condition, and other listing details (see "Third parties" below);
• stored in our cloud database if you choose to "Share to web," so the shareable link can display them to buyers you send it to.

Photos you don't share to web stay only on your device.

Voice notes. If you use the "speak item details" feature, your device's built-in speech recognition (Apple's or Google's, depending on your platform) converts your speech to text on the fly. We only receive and store the resulting text — we do not record or store the audio itself.

Listing content. Titles, descriptions, categories, conditions, brands, prices, and tags — whether you type them, edit an AI suggestion, or accept it as-is — are stored in our cloud database for as long as the listing exists.

Approximate region. We use your device's language/region setting (not GPS or precise location) to guess a sensible currency, marketplace suggestions, and app language. We don't request or use location permissions.

Usage counts. We track how many AI-generated listings your device has used, so we can enforce the free-tier limit fairly. This count is tied to your anonymous device identifier, not to you personally.

Support status. If you choose to support the app (e.g. via the in-app "tip" feature), we record that a tip was made and when, so the app can recognize your device as a supporter. If in-app payments are processed through a payment provider, that provider handles your payment details directly — we never see or store your card information.

Shared listing pages

Tapping "Share to web" publishes the listing details and photos you choose to a public, unlisted web page (a link you send to buyers). Anyone with that link can view it — that's its purpose. We also count page views on shared listings; this count isn't tied to who's viewing, only to the listing being viewed.

The korora.app website and Google Analytics

We use Google Analytics on korora.app (shared listing pages and this website generally) to understand, in aggregate, how the site is used — for example how many people view a shared page, roughly which country/device/browser visitors use, and which pages are popular. Google Analytics does this using cookies and similar technologies (see "Cookies" below).

This means when you visit a shared listing page, Google may process some information about that visit as our analytics provider, under Google's Privacy Policy. We don't use this data to identify individual visitors, and we don't combine it with the listing/photo data described above.

Cookies

• Essential cookies/storage — used by our hosting and cloud infrastructure (Firebase) to make the site function; these aren't optional, as the site can't run without them.
• Analytics cookies (Google Analytics) — where the law requires asking first (e.g. the EU, EEA, UK, Switzerland), these are only set if you consent, via the cookie banner shown when you first visit. Elsewhere, they may be enabled by default. Either way, you can change your choice at any time from the link in the site's footer.

The Kororā mobile app itself does not use cookies.

Third parties we work with

• Google Firebase (Authentication, Cloud Firestore, Cloud Storage, Cloud Functions, Hosting, App Check) — the cloud infrastructure the app and website run on.
• Google Gemini API — processes the photos and any voice-note text you provide to generate listing suggestions.
• Google Analytics — provides website usage analytics for korora.app, as described above.
• Your device's operating system (Apple or Google) — provides on-device speech recognition for voice notes.

We do not use advertising networks or sell your information to anyone.

How long we keep information

Listing data and shared-page content are kept for as long as the listing or share exists. Deleting a listing or a share in the app removes it from our database. Uninstalling the app does not automatically delete data already stored in our cloud database — contact us if you'd like anything removed.

Children's privacy

Kororā is not directed at children, and we do not knowingly collect information from anyone under 13 (or the relevant minimum age in your country).

Your choices

Since there's no account, most of your data is naturally scoped to your device and disappears when you delete a listing or uninstall the app. To request deletion of anything still stored in our cloud database, contact us using the details below.

Changes to this policy

If we make material changes to this policy, we'll update the "Last updated" date above and, where appropriate, note it in the app.

Contact

Questions about this policy or your data: kororaapp@gmail.com