Privacy
KORA is a private practice, and it is built that way. Almost everything you make in it stays on your own phone. This page says exactly what does not, where it goes, and why.
KORA is made by Chase Waters. Where this page says "I", it means me.
What stays on your device
All of the following is kept only on your phone. It is never uploaded, never backed up to me, and I cannot see it:
- Your name, birth date, birth time and birth place
- Your answers to the intake, and the goddess, centres and themes drawn from them
- Every Working you seal, every return to it, and your whole Grimoire
- Your vision board, and every photograph you place on it
- Your recorded voice
- Your pulse and heart-rate-variability readings, and your resonance pace
- Your cycle record, if you keep one, your journal and your vow
- Your settings and your reminders
On iPhone this lives in the app's private storage. In the web app on Android it lives in your browser's storage on that phone.
Because it lives only on your device, deleting the app, or clearing the web app's data from your browser, deletes it permanently. I hold no copy and cannot restore it for you.
What leaves your device, and where it goes
Readings and the words written for you. When KORA writes a reading, the day's counsel or an affirmation, the request travels over an encrypted connection to my own server function, hosted by Supabase, which passes it to Google's Gemini model and returns what it wrote. A request can carry your first name, your birth date, time and place, the sky, cards and centres being read, and the words you wrote for that reading. Your intake answers are sent only if you chose "Use online personalization"; otherwise they are read on your phone and go nowhere.
I do not store these requests, attach them to an account, or use them to train anything. Google processes them under its own terms, and on the service level KORA uses today those terms allow Google to use requests to improve its products. Every reading also has a written voice that works without a connection, so KORA keeps working with no network at all.
Finding where you were born. KORA searches its own built-in list of places on your phone. Only if a place is not in that list is the name you typed sent to OpenStreetMap's place search to find its coordinates, and those coordinates to timeapi.io to find its time zone.
Your location now. If you allow location access, your coordinates are used on your device to calculate sunrise, the planetary hours and the sky above you. They are not sent to me or to anyone.
Your camera, microphone and photographs
- Camera: used only to read your pulse from your fingertip. No video or image is recorded, saved or sent. The same is true of the pulse reading on this website.
- Microphone: used only to record the affirmation you choose to seal, which stays on your device, and to let the water on screen move with your voice.
- Photo library: the pictures you choose are copied into the app's private storage for your vision board and your portrait. They stay there.
Payments
On iPhone, memberships are bought through Apple. I never see or handle your payment details. I use RevenueCat to confirm whether a membership is active; it receives an anonymous identifier and your purchase receipt from Apple, and nothing personal from me.
The web app on Android is a test build, and paying there is not open yet. When it opens, payment will be taken by Stripe, which receives what you enter at its checkout, and I will never see your card. Today the way in is an access code I give you: it is checked on my server and remembered by a cookie in that browser so the door stays open.
This website, and letters from me
koratemple.com is hosted by Netlify. If you sign up for the Three Minute Reset or ask for an hour with a person, the form sends your first name, your email and anything you write to Netlify, which keeps the submission, and the email that follows is sent through Resend. I use your address only to send what you asked for and the occasional letter from me. Every letter after the guide carries a one-click way off the list, and once you leave, nothing more is sent.
If you write to me through Instagram, that conversation is held by Instagram, and by ManyChat where it answers on my behalf, under their own terms.
Like any host, Netlify keeps ordinary server logs, such as the address a request came from, for security. I do not use them to follow or profile anyone.
An optional vault, not yet open
KORA contains the beginnings of an optional account that would keep a copy of your practice so it can return on a new phone. It is switched off for everyone. Before it is ever switched on, this page will say exactly what it keeps and where, and you will be able to delete the account and everything in it from inside the app.
Tracking and advertising
KORA contains no advertising, no third-party analytics and no tracking of any kind, and neither does this website. I do not build a profile of you and I do not sell or share data.
Children
KORA is intended for adults and is not directed at children under 13.
Your rights
Your practice is stored on your own device, so you are already in full control of it: deleting the app erases everything. To have a form submission or your email address removed, or to ask what is held about you in connection with a purchase or a letter, write to me and I will answer myself.
Changes
If this policy changes in a way that matters, the date at the top changes with it.
Contact
Chase Waters · thekoratemple@gmail.com