Privacy Policy
Kure is a daily wellbeing check-in app. This policy explains what information we collect, why, and what you can do about it. We have tried to write it plainly rather than in legal language.
This policy covers the Kure app. Our website has its own policy.
Who we are
Kure is made by NHRM Tech Ltd, a company registered in England and Wales, company number 17390130, registered office 66 Paul Street, London EC2A 4NA. We are the data controller for the information described here.
For anything about privacy, email hello@kuredaily.com.
The short version
You tell Kure how you are feeling. We store that so we can show it back to you, and we send some of it to an AI service so the Coach can reply and your weekly summary can be written. We do not sell it, we do not advertise to you, and you can take it with you or delete it whenever you like.
What we collect
Your account: your name, your email address, the focuses you chose when you signed up, and when you joined.
Your check-ins: how the day was for you, how many hours you slept and how you described that sleep, your answer to each day’s question, and anything you write in the optional note. We also record which days you checked in and whether it was a full check-in or a quick pulse. Check-ins recorded before we changed the daily questions may also include separate ratings for energy and calm.
Your goals: what you set, and your progress.
Your Coach conversations: everything you write to the Coach and everything it replies.
Your weekly summaries: the summaries we generate for you and the weeks they cover.
A summary of your history: Kure keeps a short summary of the themes and patterns in what you have told us over time. It is generated from your own check-ins, notes and conversations, and it exists so the Coach can respond with a sense of your history rather than only your last few days. It is deleted along with everything else if you delete your account, and it is included if you export your data.
Your subscription: whether you have an active subscription or trial. We never see or store your payment details. Apple handles all payment.
Your preferences: whether you have daily reminders turned on and at what time.
How you found us: if you chose an option on the screen that asks, we store that. It is optional and you can skip it.
Your consents: the date and time you confirmed you are 18 or over, agreed to our Terms and this policy, and gave consent for us to process information about how you are feeling.
We do not collect your location, your contacts, your photos, or anything from other apps.
Information about your health
Some of what you tell Kure is information about how you are feeling, physically and mentally. Under UK data protection law this is treated as a special category of personal data, which gets extra protection.
We only process it because you have given us your explicit consent to do so, which you gave as a separate step when you created your account. That is different from simply agreeing to this policy.
You can withdraw that consent at any time. Because your check-ins are what Kure is for, we cannot continue to provide the app without them, so withdrawing consent means deleting your account. You can do that from within the app, and we explain below what happens when you do.
Why we use your information, and our legal basis
We use your information to provide Kure: to store your check-ins, show you your patterns, let the Coach respond to you, generate your weekly summary, keep track of your goals and streak, and send you the reminders you asked for. Our legal basis for this is that it is necessary to provide the service you signed up for.
For information about how you are feeling, our additional legal basis is your explicit consent, as described above.
We use your subscription status to know whether to give you access to the app. Our legal basis is the same: providing the service.
We may use information about how people found us, in aggregate, to understand which of our efforts worked. Our legal basis is our legitimate interest in understanding how our own product is discovered.
We do not use your information for advertising, we do not sell it, and we do not share it with anyone for their own purposes.
Who else handles your information
We use a small number of companies to run Kure. Each acts on our instructions.
Supabase stores your account and everything in it. Your data is held in the United Kingdom.
OpenAI generates the Coach’s replies and writes your weekly summaries. This is the transfer we most want you to understand, so we will be specific about it.
When you message the Coach, or when your weekly summary is written, we send OpenAI the content needed to respond: your first name, your focuses, your recent check-ins including anything you wrote, the summary of your history described above, and the conversation itself. We do not send your email address, your account identifier, or anything else that identifies you to them. OpenAI does not use this information to train its models. OpenAI retains it for up to 30 days for safety monitoring, and then deletes it, unless the law requires them to keep it longer. OpenAI is based in the United States, so this information is transferred outside the United Kingdom under appropriate safeguards.
If you would rather not have anything you write sent to OpenAI, do not use the Coach and do not write notes on your check-ins. The rest of Kure works without them.
RevenueCat manages subscriptions and tells the app whether yours is active. It receives an identifier for your account and your subscription status, not your check-in data. RevenueCat is based in the United States.
OneSignal delivers push notifications. It receives a device token so notifications can reach your phone. It does not receive your check-in data. OneSignal is based in the United States.
Apple processes your payment and, if you use Sign in with Apple, verifies who you are. Apple’s handling of your payment information is governed by Apple’s own privacy policy, and we never see your card details.
How long we keep your information
We keep your information while your account exists.
If you delete your account, we keep it for 30 days and then erase it permanently. The 30 days exist so that you can change your mind: if you sign back in within that window, everything is restored exactly as it was. After 30 days it is gone, and we cannot recover it.
When we erase your account we delete your check-ins, goals, Coach conversations, weekly summaries, the summary of your history, your preferences, and your account itself. We also ask RevenueCat and OneSignal to delete their records of you.
Apple keeps its own record of any transaction you made, and we cannot delete that. Apple’s retention is governed by Apple’s policy.
Your rights
Under UK data protection law you have the right to:
See your data. You can export everything we hold about you from within the app, at any time, in a readable file. You can also email us and we will send it.
Correct it if something is wrong.
Delete it. You can delete your account from within the app.
Take it elsewhere. The export gives you your data in a portable format.
Object to or restrict how we use it.
Withdraw consent for us to process information about how you are feeling, which means deleting your account, as explained above.
To exercise any right that is not already available in the app, email hello@kuredaily.com. We will respond within one month.
If you are unhappy with how we have handled your information, you can complain to the Information Commissioner’s Office at ico.org.uk. We would rather you told us first so we can put it right.
Security
Your data is protected by access controls that mean only your account can read your information. Connections between the app and our servers are encrypted. We limit who can access production data and what our own systems can do.
No system is completely secure, and we will not pretend otherwise. If something went wrong in a way that affected you, we would tell you.
Children
Kure is for adults. You must be 18 or over to use it, and you confirm this when you create your account. We do not knowingly collect information from anyone under 18. If you believe a child has created an account, email us and we will delete it.
Kure is not medical care
This is not strictly a privacy matter, but it belongs somewhere prominent. Kure supports general wellbeing. It does not diagnose, treat, or provide medical advice, and the Coach will tell you the same if you ask it something medical. If you are unwell or struggling, please speak to a doctor or someone qualified to help.
Changes to this policy
We may update this policy. If we change something significant about how we use your information, we will tell you in the app or by email before it takes effect.