Privacy Policy

Kora (“the App”) is a movement planning tool for cast members, athletes, performers, and instructors. This policy explains what information we collect, how we use it, and your rights regarding your data.

Developer: Kora Kinetic
Contact: [hello@korakinetic.com]

2a. Account Information

When you sign in, we collect:

• Your email address (via Apple Sign-In or magic link)
• Your name (only if provided through Apple Sign-In and you choose to share it)

We use this solely to authenticate you and associate your workspaces with your account.

2b. Movement Content

When you use the App, you may create:

• Workspace titles, descriptions, and company/class names
• Movement names, notes, and descriptions
• Formation maps (stage layouts, spacing marks, and shapes)
• Cast size and cast labels (initials you assign to cast members)
• Rehearsal plans and session task lists
• Cast member names and tags
• Movement library entries

This content is stored on our servers so you can access it across sessions.

2c. Photos and Videos

• Photos and videos you capture or upload for movements are stored exclusively on your deviceusing your browser’s IndexedDB.
• We never upload, access, transmit, or store your photos or videos on our servers.
• This is separate from formation stage layouts (Section 2b), which are saved as workspace data when you use a signed-in account.
• You can delete all locally stored media at any time from the Profile screen.

2d. Local Preferences and Preview Data

Notes saved for later, UI preferences, dismissed coaching tips, onboarding state, and demo or preview workspace data may be stored in your browser’s local storage. This data stays on your device and is not uploaded to our servers. Signed-in workspace content listed in Section 2b is stored on our servers separately.

• We do not collect location data
• We do not collect device identifiers or advertising IDs
• We do not use analytics, tracking pixels, or behavioral tracking tools
• We do not collect health, fitness, or biometric data
• We do not sell, rent, or share your personal information with third parties for advertising purposes

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, we process your personal data under the following legal bases as defined by the General Data Protection Regulation (GDPR):

We do not rely on consent as a legal basis for our core processing activities. Where consent is required in the future (e.g., for optional analytics), we will request it separately and you may withdraw it at any time.

We use a small number of trusted service providers to operate the App:

These providers may process your email address and workspace data on our behalf under strict data-processing agreements. They do not have independent rights to use your data.

We share your data only in these circumstances:

• When you choose to share a workspace via a public read-only link
• With service providers as necessary to operate the App (see Section 6)
• If required by law (e.g., valid legal process)

We never sell your data.

• Account data: Retained as long as your account is active. You can request deletion at any time.
• Workspace data: Retained until you delete it or request account deletion.
• Local media:Stored only on your device. You control it entirely via the “Device Media Storage” section in your Profile.
• Local preferences: Stored in your browser until you clear browser data.

Depending on your jurisdiction, you may have the right to:

• Access your personal data
• Correct inaccurate data
• Deleteyour data (“right to be forgotten”)
• Export your data in a portable format
• Withdraw consent at any time
• Lodge a complaint with your local data protection supervisory authority (for EEA/UK residents)

To exercise any of these rights, contact us at [hello@korakinetic.com].

We will respond within one calendar month of receiving your request (or sooner if required by applicable law).

• Authentication is handled by our provider using industry-standard protocols (OAuth 2.0, PKCE)
• All data in transit is encrypted via HTTPS/TLS
• Media files never leave your device
• Database access is restricted to authenticated server-side operations

Kora is not directed at children under 13 (or the applicable age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will promptly delete it.

Your data may be processed in the United States through our service providers (see Section 6). When your data is transferred outside the European Economic Area (EEA), the United Kingdom, or Switzerland, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission, incorporated into our agreements with service providers
• EU-U.S. Data Privacy Framework certification, where applicable to our providers

These mechanisms ensure that your personal data receives a level of protection substantially equivalent to that guaranteed under EU law, regardless of where it is processed.

We may update this policy from time to time. We will notify you of material changes by posting a notice in the App. The “Last updated” date at the top reflects the most recent revision.

For privacy-related questions or requests:

• Email: [hello@korakinetic.com]
• Developer: Kora Kinetic