Kororā mascot

Kororā

Privacy Policy

Last updated: October 4, 2026

Kororā ("Kororā", "the app", "we", "us") helps you turn photos of items you own into ready-to-post marketplace listings, and optionally share them with buyers via a web link. This policy explains what information is collected, how it's used, and who it's shared with, and applies both to the Kororā mobile app and to the korora.app website (including shared listing pages, which anyone with a link can view without installing the app).

No account, no sign-up

Kororā doesn't ask you to create an account, and doesn't collect your name. Each install is identified only by an anonymous, randomly-generated device identifier (via Firebase Anonymous Authentication). The only contact details we ever receive are the optional ones you choose to add so buyers can reach you (see "Seller contact details" below); without those, there is no way for us to connect this identifier back to your real-world identity.

Information we collect

Photos. When you photograph or select photos of an item to list, those photos are:

Photos you don't share to web stay only on your device. Photos you take with the in-app camera are also saved to a "Korora" album in your device's photo library, so you keep a copy; that copy stays on your device and is under your control.

Seller contact details (optional). If you choose to add an email address and/or a phone number under "Edit contact info" so that buyers can contact you, we store them in our cloud database against your shared page. They are never shown on the web page itself. When a buyer taps "Message the seller" and picks a channel (email, WhatsApp, or a call/text), korora.app opens that buyer's own email, WhatsApp, or messaging app with your address or number filled in, so that buyer receives it. We don't use these details for anything else, and we don't send you marketing. You can change or remove them at any time from "Edit contact info" in the app; a change applies the next time you post.

Voice notes. If you use the "speak item details" feature, your device's built-in speech recognition (Apple's or Google's, depending on your platform) converts your speech to text on the fly. We only receive and store the resulting text - we do not record or store the audio itself.

Listing content. Titles, descriptions, categories, conditions, brands, prices, and tags - whether you type them, edit an AI suggestion, or accept it as-is - are stored in our cloud database for as long as the listing exists.

Approximate region. We use your device's language/region setting (not GPS or precise location) to guess a sensible currency, marketplace suggestions, and app language. We don't request or use location permissions. If you choose a different listing language or currency under "Language & currency", that choice is stored only on your device.

Usage counts. We track how many AI-generated listings your device has used, so we can enforce the free-tier limit fairly. This count is tied to your anonymous device identifier, not to you personally.

Support status. If you choose to support the app (e.g. via the in-app "tip" feature), we record that a tip was made and when, so the app can recognize your device as a supporter. If in-app payments are processed through a payment provider, that provider handles your payment details directly - we never see or store your card information.

Print flyer details. If you use "Print Flyer," the sale headline, date, time, address, and payment methods you enter are stored in our cloud database in a separate record, shown on the flyer web page you print or save from, and on the printed flyer. That record can only be opened for 30 minutes after you last opened a flyer from the app (each Print or Download restarts that time); after that it can no longer be read, and it is deleted later. If you enter a physical address, it's also sent to Google's Maps Static API to render a small map image on the flyer (see "Third parties" below).

Shared listing pages

Tapping "Share to web" publishes the listing details and photos you choose to a public, unlisted web page (a link you send to buyers). Anyone with that link can view it - that's its purpose. We also count page views on shared listings; this count isn't tied to who's viewing, only to the listing being viewed.

The korora.app website and Google Analytics

We use Google Analytics on korora.app (shared listing pages and this website generally) to understand, in aggregate, how the site is used, for example how many people view a shared page, roughly which country/device/browser visitors use, and which pages are popular. Google Analytics does this using cookies and similar technologies (see "Cookies" below).

This means when you visit a shared listing page, Google may process some information about that visit as our analytics provider, under Google's Privacy Policy. We don't use this data to identify individual visitors, and we don't combine it with the listing/photo data described above.

Usage analytics and crash reports in the app

Usage analytics. In the mobile app we use Google Analytics for Firebase to understand, in aggregate, how the app is used, for example how many people create a listing, whether AI generation succeeds, which buttons get used, and roughly which countries, device models, operating-system versions and languages people use. This is recorded as anonymous events tied to a random identifier for your installation (which changes if you reinstall) - never your name, email or any account, and never the titles, descriptions, photos or voice-note text of your listings. We don't collect your device's advertising ID and don't use analytics for advertising or ad personalization.

Where analytics is off. We don't collect usage analytics at all from devices whose region setting is in the EU, EEA, United Kingdom or Switzerland (or can't be determined), since the app has no consent prompt.

Crash reports. Everywhere, the app uses Firebase Crashlytics to receive technical crash reports (what went wrong in the app, plus device model, operating-system version and app version) so we can find and fix bugs. These aren't used for anything else.

Reports you send us. If you use “Report a problem” in the app, we receive the reason you pick, any note you write, and — when you report from a listing — that listing’s title and description, along with a random identifier for your installation. Each report also includes basic technical details that help us fix the problem: the app version, device platform and operating-system version, your device’s region and language settings and the currency in use, and the most recent error code from listing generation, publishing or flyers. We use it only to review and address the problem you flagged.

Cookies

The Kororā mobile app itself does not use cookies.

Third parties we work with

We do not use advertising networks or sell your information to anyone.

How long we keep information

Listing data and shared-page content are kept for as long as the listing or share exists. Deleting a listing or a share in the app removes it from our database. Uninstalling the app does not automatically delete data already stored in our cloud database - contact us if you'd like anything removed.

Children's privacy

Kororā is not directed at children, and we do not knowingly collect information from anyone under 13 (or the relevant minimum age in your country).

Your choices

Since there's no account, most of your data is naturally scoped to your device and disappears when you delete a listing or uninstall the app. To request deletion of anything still stored in our cloud database, contact us using the details below.

Changes to this policy

If we make material changes to this policy, we'll update the "Last updated" date above and, where appropriate, note it in the app.

Contact

Questions about this policy or your data: help@korora.app

Kororā is operated by Acidrain Limited, New Zealand.

← Back to Kororā