Privacy Policy

Last updated: July 9, 2026

1. Who We Are

This Privacy Policy describes how Kure-Cal("Kure-Cal", "we", "us", or "our") collects, uses, and shares information when you use our website, products, and services (collectively, the "Services"). If you have questions, use our contact form.

2. Information We Collect

• Account data: name, email address, authentication provider, profile preferences, time zone, and account identifiers. Password credentials are handled by our authentication provider.
• Usage data: device/browser type, IP address, pages viewed, features used, timestamps, referral URLs.
• Calendar and content: events you add or import, calendar connection credentials, community posts, comments, reports, images, categories/tags, and related metadata you choose to store in the app.
• Cookies and similar technologies: essential cookies to operate the Service and optional analytics cookies.
• Mobile device data: push-notification token, app version, a locally generated device identifier, and approximate location when you ask for nearby results. Device calendar access is used only when you choose to save or remove an event.
• Payment data: subscription product, purchase status, renewal and expiration information processed by Apple and RevenueCat. We do not receive or store full payment-card numbers.

3. How We Use Information

• Provide, maintain, and improve the Services.
• Personalize features (e.g., time zone, view preferences).
• Understand feature adoption and improve performance and reliability.
• Communicate with you (account updates, security notices, support).
• Detect, prevent, and investigate fraud, abuse, or security incidents.
• Comply with legal obligations.

4. Legal Bases (EEA/UK Users)

We process personal data under the following legal bases, where applicable:

• Contract: to provide the Services you requested.
• Legitimate interests: to secure, improve, and market our Services, balanced against your rights.
• Consent: where required for non‑essential cookies or marketing communications.
• Legal obligation: to meet regulatory and compliance requirements.

5. Sharing and Disclosure

• Service providers: hosting, analytics, error monitoring, email delivery, and payments—only as needed to perform services for us.
• Legal and safety: to comply with laws, enforce our terms, or protect rights, property, or safety.
• Business transfers: in connection with a merger, acquisition, or asset sale, with appropriate safeguards.

Our principal service providers include Supabase for authentication, database, and file storage; Apple and Google for sign-in and optional calendar connections; RevenueCat and Apple for in-app subscriptions; and Expo for push-notification delivery. Their processing is limited to providing these functions and is governed by their applicable terms and privacy commitments.

6. Cookies and Tracking

We use essential cookies to operate the Service and may use analytics cookies to understand usage. You can control cookies in your browser settings and, where required, via our cookie preferences. Disabling certain cookies may impact functionality.

7. Data Retention

We retain personal data for as long as needed to provide the Services and for legitimate business purposes (e.g., security, backups, legal compliance). When data is no longer required, we securely delete or anonymize it.

8. Security

We implement administrative, technical, and physical safeguards appropriate to the sensitivity of the data, including encryption in transit, access controls, and monitoring. No method of transmission or storage is 100% secure.

9. Your Rights

Your rights may include:

• Access, correction, deletion, and portability of your personal data.
• Objection or restriction to certain processing.
• Withdrawal of consent where processing is based on consent.

To exercise rights, submit a request through our contact form. We may verify your identity to process requests.

Mobile users can initiate permanent account deletion from Settings → Delete account. Deletion removes the Kure-Cal account and associated personal data unless retention is legally required. Deleting Kure-Cal does not cancel an Apple subscription; subscriptions can be cancelled in Apple Account subscription settings.

10. International Transfers

If we transfer data internationally, we use appropriate safeguards such as Standard Contractual Clauses and additional measures as needed.

11. Children’s Privacy

The Services are not directed to children under 13 (or older as required by local law). If we learn we have collected data from a child, we will delete it and take appropriate steps to disable the account.

12. Changes to This Policy

We may update this Policy from time to time. We will update the “Last updated” date and, for material changes, provide additional notice (e.g., banner or email). Your continued use of the Services after changes indicates acceptance.

13. Contact Us

Use our contact form, or write to support [at] kurecal [dot] app.