1. Who we are
Olive Studios operates Koro, the iOS pet-care app, and the website at https://koro.olivestudios.io (the website). This policy explains how we collect, use, share, store, and delete information when you visit the website or use Koro, including during testing before public launch. Features may vary by app version and availability. For privacy questions or requests, email koro@olivestudios.io.
2. Information we collect
- Account information: your name, email address, account identifier, sign-in provider, verification status, account settings, and authentication information needed to create and secure your account. Email/password authentication is handled by Firebase Authentication.
- Pet and care information you enter or import: pet profiles and photos; medications, vaccinations, appointments, veterinary contacts, lab results, observations, routines, food and activity records; expenses, notes, and uploaded documents. Documents may contain names, addresses, contact details, or other personal information about you or another person. Please include only information you are entitled to share.
- Sharing information: household membership, roles, permissions, invitations, invitee email addresses, and the records you choose to share or export.
- Optional AI inputs: questions, recent chat messages, relevant pet records, selected photos, and text extracted from documents, when you authorize an available cloud AI feature. Saved chat history and chat photos are kept on your device rather than shared through household sync.
- Purchase information: subscription status, product and transaction identifiers, signed purchase records, and entitlement or usage information. Apple processes App Store payments; Koro does not receive your full payment-card details.
- Usage and technical information: feature actions, screen views, app lifecycle events, subscription tier, device identifiers and attributes, app/OS information, notification tokens if enabled, timestamps, errors, security signals, and service request information such as IP addresses. Hosting and service providers may process request logs to operate and protect their services.
- Support information: the messages and attachments you send us when asking for help.
3. Google sign-in
If you choose Sign in with Google, Google provides basic identity information such as your Google account identifier, email address, name, and profile image when supplied. Firebase Authentication processes the sign-in credential and links your identity to your Koro account. We use this information to authenticate you, maintain your account, display your profile, support household membership, communicate about your account, and associate service usage with your account. Koro does not receive your Google password or request access to Gmail messages, Google Drive files, Google Contacts, or Google Calendar through Google sign-in.
Your account identifier and email address may also be processed by Customer.io for account communications and account-linked product analytics as described below. We do not sell Google user data, use it for advertising, or use it to train generalized AI models. Google identity data is not sent to OpenAI simply because you sign in; document or chat content you choose to send to an AI feature may independently contain personal information.
Koro's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements: https://developers.google.com/terms/api-services-user-data-policy
You can manage or revoke Koro's connection in your Google Account's third-party connections settings. Revoking Google access does not itself delete your Koro account or stored pet records; use the deletion controls described below.
4. How we use information
We use information to provide pet-care records and reminders; authenticate and protect accounts; save and synchronize supported records; manage household sharing; process imports and exports; provide optional AI responses; validate purchases and manage usage allowances; send verification, password-reset, invitation, and other service communications; respond to support requests; understand feature use and improve reliability; and detect fraud, abuse, and security problems. Where consent is required for a feature, we request it before the relevant processing. We do not sell personal information or use pet records or Google user data for targeted advertising.
5. Storage, household sharing, and exports
Koro stores app data on your device. Account data, supported shared pet records, uploaded documents, and pet photos are also processed through Google's Firebase services, including Authentication, Firestore, Cloud Storage, Cloud Functions, and App Check. Expense records synchronize for household owners and co-managers; view-only members and sitters cannot access them. Saved chat history and chat photos are device-local rather than part of household sync. Service availability and your use of a feature determine what is uploaded.
Household owners, co-managers, members, and sitters can access information according to the permissions configured in the app. Inviting someone or granting access makes the permitted information available to that person. Reports, files, calendar copies, and other exports are sent to the apps or recipients you select. Recipients may keep their own copies; removing access or deleting your account cannot recall copies already exported or saved elsewhere.
6. Optional AI processing
On-device text recognition and parsing can process documents without sending their text to OpenAI. When an available feature requires cloud AI, Koro asks for your AI Data Sharing permission. If you allow it, Koro's backend sends OpenAI the information needed for that request: your question, recent messages, relevant pet records and selected photos for chat, or extracted document text for document processing. This content may include personal information present in your documents or messages. Declining prevents that cloud AI request; it does not prevent ordinary record keeping.
Koro does not persist AI chat prompts or replies in its backend database. OpenAI response storage is disabled for these requests, but this is not a zero-retention guarantee: OpenAI may retain content for abuse and safety monitoring under its API data controls. OpenAI states that API inputs and outputs are not used to train its models by default. See https://developers.openai.com/api/docs/guides/your-data for its current controls. Koro retains account-linked consent and usage metadata, such as request identifiers, token counts, allowance balances, and duplicate-prevention information, to operate these features.
You can turn off future cloud AI sharing for your account in Account → Data & Privacy → AI Data Sharing. Turning it off does not undo requests already processed or delete local chat history. AI features provide general pet-care assistance and are not a substitute for a veterinarian.
7. Analytics, communications, and service providers
Customer.io processes product analytics, account communications, and enabled push notifications for Koro. We associate a Koro account identifier, first name, last name, email address, account creation time, and plan with a profile. Product events include feature actions, screen views, counts, categories, booleans, and plan information; the SDK also processes lifecycle events and device information. Koro's analytics events do not include pet names, medication or food names, document text, notes, chat content, or photos. First name, last name, and email are used as profile attributes rather than event properties.
Verification, password-reset, and invitation emails use Customer.io. These transactional email integrations disable open/click tracking and message-content retention. Product analytics and notification-delivery metadata are separate from those email settings. If you enable push notifications, a device push token is associated with your Customer.io profile. You can disable notifications in iOS Settings.
Other providers include Google/Firebase for authentication, storage, synchronization, and backend security; Apple for sign-in, purchases, and notification delivery; OpenAI for cloud AI requests you authorize; and Vercel for this website's hosting. Providers process information to deliver their services under their applicable terms and privacy policies. We may also disclose information when required by law, to protect users and the service, or in connection with a business transfer subject to appropriate privacy protections. We do not provide pet records to advertising networks.
8. Device permissions and website requests
Koro requests camera or photo access when you choose to add photos or scan documents. You choose files through the system's selection controls. Notification permission enables reminders and supported push messages. If you copy a task into Calendar, the system editor lets you review and save it; Koro does not read your calendars for that action. You can change device permissions in iOS Settings. Denying a permission limits the corresponding feature.
The public website does not require a Koro account to read this policy. Its hosting infrastructure processes ordinary requests and technical information to serve pages and protect the site. Links to other services are subject to those services' privacy policies.
9. Retention and deletion
We retain account and pet-care information while needed to provide the service and for the purposes described here. You can edit or delete supported records in the app. Sync deletion markers and operational metadata may remain temporarily so devices can reconcile changes, prevent duplicate requests, and resolve failures. Certain AI usage metadata is configured for time-based cleanup; cleanup is not an instant deletion guarantee.
To delete your account, open Account → Data & Privacy → Delete Account and complete identity verification. If you own a household, deletion also removes that household and its shared pet records and uploads; if you are a member of another person's household, the household's records can remain for its owner and other authorized members. The deletion process removes account/profile data, applicable local and shared records, and per-account AI consent and usage data. Purchase transaction records used to prevent replay or fraud may remain linked to the original account identifier. Limited security, delivery, support, provider, and backup records may remain where needed for security, legal obligations, or the provider's retention cycle. Do not assume that deleting the app deletes cloud records or your account.
Contact koro@olivestudios.io for help with access, correction, deletion, or service-provider profile and analytics removal requests. We may need to verify your identity before acting. Deleting your Koro account does not automatically cancel an Apple subscription; manage subscriptions through your Apple account. Removing Koro's Google connection also does not cancel a subscription.
10. Your choices and rights
You can update account details and records, manage household access, use the available Export All Data control, withdraw AI permission, manage notifications and device permissions, revoke Google access, and request account deletion. Depending on where you live, applicable law may also give you rights to access, correct, receive a copy of, restrict, object to, or request deletion of personal information, and to complain to your local privacy regulator. Email koro@olivestudios.io to exercise a right or ask about the information we hold. We will assess requests under applicable law and explain any limits.
11. Security and international processing
We use authentication, access controls, encrypted network connections, and platform security features to protect information. Access to shared records is governed by account and household permissions. No service or device can guarantee absolute security. Protect your device and account, review household access, and avoid uploading unnecessary personal information.
Olive Studios and its service providers may process information outside your province, state, or country, including in the United States. Privacy laws and government-access rules may differ there. Information processed by a provider is also subject to its applicable safeguards and retention practices.
12. Children and policy changes
Koro is intended for people managing pet care, not as a service directed to children under 13. If you believe a child has supplied personal information without appropriate authorization, contact us so we can investigate and address it.
We will update this policy as the service changes and revise the date above. Where required, we will provide an additional notice or request consent before using information in a materially different way.
13. Contact
For privacy questions and requests, contact Olive Studios at koro@olivestudios.io.
Website: https://koro.olivestudios.io