Privacy Policy

This Privacy Policy explains how Kurr ("Kurr", "we", "us", or "our") collects, uses, stores, shares, and protects information when you use the Kurr mobile application (the "App"). Kurr is a text-only community app where posts appear under an auto-assigned username. We collect the minimum information needed to operate the service securely and meet our compliance obligations. You sign in with a mobile OTP. We do not require your real name, email address, or any social or third-party login. Your phone number is used for authentication, security, and compliance — it is never shown on posts or comments.

By using the App, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the App.

1. Information we collect

1.1 Information you provide

• Content you create — posts, comments and replies, reactions (like, love, laugh, sad, angry), and the content of reports you submit. Content is shown under your auto-assigned username, not your phone number or real name.
• Mobile number for OTP — required to create or sign into an account (India +91).

1.2 Information created automatically for your account

• User identifier — a randomly generated ID (UUID) that represents your account.
• Auto-assigned username — generated by Kurr and shown on your posts and comments. Usernames cannot be customised or changed by you.
• Phone number (secured) — we store a one-way hash of your number for login, security, and abuse prevention, and may store an encrypted copy for lawful disclosure when required by valid legal process. Your number is never shown on posts or profiles.
• Notification preferences — your in-app settings for which notifications you wish to receive.

1.3 Information collected automatically

• Push notification token — if you enable notifications, a device messaging token (via Firebase Cloud Messaging) is stored so we can deliver notifications to your device.
• Advertising identifier — the App displays ads through Google AdMob, which may collect your device's Advertising ID and related device information to serve and measure ads. See Section 4.
• Technical and log data — basic technical information such as request timestamps and approximate device/network information that is processed to operate the service, prevent abuse, and maintain security.

We do not collect your legal name, email, contacts, photos, precise GPS location, or social media accounts. Phone numbers are used for OTP sign-in, security, and compliance, and are not shown publicly.

2. How we use information

Purpose	Data used
Create and sign into your account	User ID, secured phone number, OTP verification
Provide core community features (feed, posts, comments, reactions, pinning)	Content you create, user ID, username
Deliver notifications you have enabled	Push token, notification preferences
Moderate content, review reports, and keep the community safe	Content, reports, technical/log data
Security and compliance, including lawful requests	Secured phone number, user ID, content metadata, technical/log data
Display advertising to support the free service	Advertising ID, device data (via AdMob)
Prevent fraud, spam, and abuse	Technical/log data, secured phone identifiers

3. Legal bases for processing

Where applicable law (such as the EU/UK GDPR) requires it, we process personal data on the following bases: performance of our service to you (providing the App), our legitimate interests (security, abuse prevention, and improving the service), your consent (for example, enabling notifications or consenting to personalized ads), and compliance with legal obligations.

4. Advertising

Kurr uses Google AdMob to show advertisements. AdMob is provided by Google and may collect and process the device Advertising ID and related information to serve, personalize, cap, and measure ads, and to detect fraud. We do not control the data collected by Google through AdMob.

You can learn how Google uses this information here: policies.google.com/technologies/partner-sites. You can reset or limit ad personalization at any time in your device settings (Settings → Google → Ads), or opt out of personalized ads where offered.

5. Third-party services

We rely on the following third-party service providers to operate the App:

• Google Firebase Cloud Messaging — to deliver push notifications. (Firebase Privacy)
• Google AdMob — to display advertisements. (Google Privacy Policy)
• Cloud hosting provider — our servers and database are hosted with a reputable cloud infrastructure provider to store and process the data described above.

6. Data sharing and disclosure

We do not sell your personal information. We do not share your information with third parties except:

• With the service providers listed in Section 5, only as needed to operate the App;
• When required by law, regulation, legal process, or enforceable governmental request;
• To protect the rights, safety, and security of our users, the public, or Kurr, including to investigate and prevent fraud or abuse.

Remember that any content you post is public within the App and visible to other users under your auto-assigned username (which you cannot change). Please do not include personal or sensitive information in your posts or comments.

7. Data retention and deletion

• You can delete your own posts and comments at any time from within the App.
• You can delete your entire account at any time from Settings → Delete account. Deleting your account permanently removes your posts, comments, reactions, reports, pinned items, notification preferences, and account record from our active systems (cascade deletion).
• We retain limited data only as long as necessary to operate the service, comply with legal obligations, resolve disputes, and enforce our agreements. Anonymized or aggregated data that cannot identify you may be retained.

8. Security

All communication between the App and our servers is encrypted in transit using HTTPS/TLS. Phone numbers are stored as one-way hashes (and, where configured, encrypted at rest for lawful disclosure only). We apply reasonable technical and organizational measures to protect information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Children's privacy

Kurr is not directed to children. The App is intended for users aged 13 years and older (or the minimum age required in your country). We do not knowingly collect personal information from children under this age. If you believe a child has provided us information, please contact us so we can remove it. See also our Child Safety Standards.

10. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, or restrict processing of your personal information, and to object to certain processing. Because Kurr is anonymous, the primary way to exercise these rights is through in-app controls (deleting content or your account). For other requests, contact us using the details in Section 13.

11. International data transfers

Your information may be processed and stored on servers located in countries other than your own. Where required, we take steps to ensure appropriate safeguards are in place for such transfers.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, provide additional notice within the App. Your continued use of the App after changes become effective constitutes acceptance of the revised policy.

13. Contact us

If you have questions about this Privacy Policy or wish to make a privacy or account-deletion request, contact us at:

• Email: [email protected]
• App: Kurr — Anonymous Community App