This Privacy Policy describes how Kuru ("Kuru," "we," "our," or "us") collects, uses, shares, and protects personal information when you use Kuru — our social platform for car enthusiasts — through our mobile apps, the website at kuru.world, and related services (the "Service"). By using the Service, you consent to the practices described here and in our Terms of Service.
Information you provide. Account details (email address, username, and, if you set them, display name, bio, profile and cover photos, garage name, and links); the content you post (builds, photos, videos, captions, comments, and direct messages); and anything you send us for support or verification.
From sign-in providers. If you sign in with Apple, Google, or another provider, we receive basic profile information they share, such as your name, email, and avatar.
Automatically collected. IP address, device and app/browser type, operating system, and usage data (screens viewed, actions taken, session activity), collected through analytics and similar technologies to operate and improve the Service.
Notifications. If you enable push notifications, we store a device push token so we can deliver them.
Payments (if applicable). If you ever make a payment (for example, a subscription or premium feature), card details are collected and processed directly by our payment processor (Stripe). Kuru never stores full card numbers or CVV codes.
We use personal information to:
With other users. Your profile and the content you post publicly (builds, photos, videos, comments) are visible to other users and may be re-shared within the Service. Direct messages are visible to their participants. Please be thoughtful about what you share.
Service providers. We use vendors to run the Service — including hosting and database (Vercel, Neon), authentication (Clerk), media storage and delivery (Amazon S3, Cloudinary), product analytics, error monitoring, email delivery, and push notification delivery (Apple/Google). They process data on our behalf under confidentiality and security obligations.
Legal & safety. We may disclose information when required by law, subpoena, or court order, or when reasonably necessary to protect Kuru, our users, or the public — including acting on reports of objectionable content or abusive behavior.
Business transfers. In a merger, acquisition, financing, or sale of assets, information may be transferred as part of the transaction, subject to standard confidentiality.
We do not sell your personal information.
We use cookies, local storage, mobile identifiers, and similar technologies to keep you signed in, remember preferences, measure performance, and analyze usage. You can disable cookies in your browser, but parts of the Service may not work correctly. We honor Do Not Track where technically feasible.
We retain personal information for as long as your account is active or as needed to operate the Service, and afterward only as required to satisfy legal obligations, resolve disputes, and enforce our agreements. When you delete your account, your content and personal information are removed as described in Section 8, except for limited records we must retain for legal or safety reasons.
We use industry-standard technical and organizational safeguards, including TLS encryption in transit, access controls, hashed credentials, and regular security review. No system is perfectly secure; we cannot guarantee absolute security and you acknowledge that you provide information at your own risk.
Delete your account from the app: open the Kuru app, go to Settings → Delete account, and follow the confirmation prompts. This permanently removes your profile, your posts (builds, photos, and other content), your follows, likes, saves, and your messages, and revokes your sign-in. It cannot be undone.
Depending on your jurisdiction (including California, the EU/UK, and other regions), you may have the right to access, correct, delete, restrict, or port your personal information, and to object to certain processing. To exercise these rights, email marcagallo11@icloud.com. We will verify your identity before responding and will respond within the timeframes required by applicable law.
California residents (CCPA/CPRA): You have the right to know, delete, correct, and limit use of sensitive personal information, and to opt out of "sharing" for cross-context behavioral advertising. We do not sell personal information.
The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact marcagallo11@icloud.com and we will delete it.
Kuru is based in the United States, and information we collect may be transferred to, processed, and stored in the U.S. or other countries where our service providers operate. These jurisdictions may have data-protection laws different from your own.
The Service may link to third-party websites or services. We are not responsible for their privacy practices and encourage you to review their policies before providing information.
We may update this Privacy Policy from time to time. Material changes take effect when posted on this page, and we will update the effective date above.
Privacy questions or requests? Email marcagallo11@icloud.com.