Privacy Policy
This Privacy Policy explains how Kore ("we", "our", "us") collects, uses, discloses, and protects information when you use the Kore mobile application, related services, and this website (collectively, the "Service").
1. Information We Collect
We collect only the data needed to provide and improve the Service, including:
- Account profile details you provide (for example, email, currency preferences, snapshot settings).
- Financial data you submit, including balances, account labels, categories, snapshots, and imported statement data.
- Uploaded content, such as photos, screenshots, PDFs, CSV files, and text files used for AI-assisted import features.
- Import-processing data derived from those uploads, such as extracted text, institution names, account names, balances, dates, currencies, categories, and your selected main currency.
- Account and feature-access state needed to provide current app functionality.
- Technical and diagnostics data, including device type, app version, crash logs, and basic usage events.
2. How We Use Information
- Operate core app functionality, including net worth tracking, snapshots, exports, and insights.
- Process AI-assisted imports only after you choose that feature and grant permission in the app.
- Extract account names, institutions, balances, dates, currencies, and categories from imported files and images.
- Maintain security, prevent abuse, troubleshoot issues, and monitor service reliability.
- Provide support, send essential service communications, and enforce legal terms.
- Comply with legal obligations and respond to lawful requests.
3. Legal Bases (Where Applicable)
Where privacy law requires a legal basis, we process data based on contract necessity, legitimate interests, legal compliance, and your consent where required.
4. AI and Third-Party Processing
Kore's AI import feature sends the files you select and the import-processing data described above to Kore's cloud service and, depending on availability, to OpenAI or Google Gemini. We use these processors only to perform the import requested by you, and we use contractual and technical safeguards designed to restrict provider use to service delivery.
Kore is privacy-first. AI import is the only feature in Kore that can send the files you choose and extracted financial fields to third-party AI processors. Kore does not add an app account ID, email address, or account credentials to those AI import requests beyond whatever information appears in the file you selected.
The in-app Portfolio Insights feature is generated by Kore services and does not send your financial data to third-party AI processors.
5. Sharing of Information
We do not sell personal information. We may share data with:
- Service providers (hosting, analytics, AI processing, customer support) under confidentiality restrictions.
- Platform providers (for example, Apple) to distribute the app and support core platform services.
- Authorities or counterparties when required by law, court order, or to protect rights and safety.
- Successors in a merger, acquisition, or asset transfer, subject to this Policy.
6. Data Retention
We retain data as long as needed to provide the Service, meet legal obligations, resolve disputes, and enforce agreements. Data may be deleted or anonymized upon valid request, subject to required retention periods.
7. Security
We use administrative, technical, and organizational safeguards to protect data. No system can guarantee absolute security, and you are responsible for protecting your device credentials and account access.
8. International Data Transfers
Your data may be processed in countries outside your residence. Where required, we use safeguards intended to provide adequate protection under applicable law.
9. Your Privacy Rights
Depending on your location, you may have rights to access, correct, delete, restrict, or port data, and to object to certain processing.
To exercise rights, contact privacy@mykore.app. We may verify your identity before processing requests.
10. California Privacy Disclosures
California residents may request details about categories of personal information collected, disclosed, and sources of collection. We do not sell or share personal information for cross-context behavioral advertising as those terms are defined by California law.
11. Children's Privacy
The Service is not directed to children under 13 (or the age required by local law). If we discover unauthorized child data, we will take steps to remove it.
12. Changes to This Policy
We may update this Policy from time to time. Material changes will be reflected by updating the "Last updated" date and, where required, providing additional notice.
13. Contact
Privacy inquiries: privacy@mykore.app