What Kora does with your data

Kora is a private, voice-based companion for reflection. You talk, Kora listens and responds, and afterward Kora keeps a short structured summary so the next conversation can pick up where the last one left off. Kora is not a therapist and not an emergency service.

Kora stores your profile (display name, the email you sign in with), structured post-call summaries (topics, decisions, a next step), projects and tasks you create or approve, and memory candidates once you explicitly approve them.

Kora does not store raw audio, recordings of your voice, or your full transcript by default. The live transcript exists only in memory while a call is active and is cleared once the call ends and a summary is generated. If summarizing fails, Kora shows an error rather than silently saving the raw transcript.

After a call, Kora may propose memory candidates: things it thinks are worth remembering. These sit as pending suggestions. Kora never treats a candidate as a permanent memory until you approve it. You can review, edit, or delete anything Kora remembers at any time from the Memory page.

Third-party account connections are currently parked. Kora is not connecting to Google Calendar, reading calendar events, or writing anything back to a calendar while this work is paused.

If connected accounts are reintroduced later, Kora will ask for explicit consent, keep provider access scoped to the feature being enabled, and document what is read before you connect anything.

Kora uses a small number of service providers to operate: OpenAI for the live voice conversation and for generating post-call summaries, Supabase for authentication and the database, Vercel for hosting, Stripe for subscription billing (Kora's own servers never see or store your card details), and PostHog for product analytics (see "Cookies and analytics" below). None of these providers receive more than what is needed to provide their part of the service, and Kora does not sell your data to anyone.

Kora uses a small number of cookies and similar browser storage. Some are strictly necessary — keeping you signed in — and are always on. A few remember a preference you set yourself, like your Light/Dark theme choice or voice setup, so Kora looks and behaves the way you left it; these never require a popup to ask permission, in line with UK guidance on this kind of storage.

Kora also uses PostHog, a third-party analytics provider, to understand which features are used and where errors happen — for example, that a call started, or that a summary failed to save — never the content of your conversations, memories, or projects. Screen recording and automatic click-tracking are switched off in Kora's configuration. This is on by default as a service-improvement measure, and you can turn it off at any time from Settings → Privacy & data, which stops both new analytics events and the identifiers this browser stores for it. Kora does not use cookies for advertising, cross-site tracking, or behavioural profiling.

From Settings, you can delete your conversation history, your approved memories, your projects and tasks, or all of the above, individually or all at once. You can also delete your account entirely, which permanently removes your data.

Every table that holds your data is scoped to your account with row-level security, so one user cannot see another user's conversations, memories, projects, tasks, or connected accounts. Encrypted credentials for connected services are stored separately from everything else and are reachable only by server-side code, never directly by your browser.

Kora is an evolving beta product. If what Kora stores or shares changes, this page will be updated to reflect it, and the "last updated" date above will change.

Questions about this policy or your data: privacy@ubuncare.com.