KORA Privacy Policy

Version 2026-09-27

This text says what data KORA holds about you, why, where it sits, who can see it and how you take it back. It describes what the application actually does today, not what it might do one day.

Data controller: KORA Social Network, a business registered in Québec (Canada), whose address is 300-204, rue du Saint-Sacrement, Montréal, Québec H2Y 1W8, Canada. Contact: [email protected] (or by post: KORA Social Network, 300-204, rue du Saint-Sacrement, Montréal (Québec) H2Y 1W8, Canada). Person in charge of the protection of personal information: the owner of the business, reachable at [email protected].

1. What we collect

What you give us at sign-up: your email address, a password, a display name, a public handle, your date of birth, your country, the application language and the interests you tick. The biography is optional. You can then choose, in your settings, the languages of the videos you want to see.

Your password is never visible to us: it is kept as a cryptographic hash by the authentication service, and we can neither read it nor give it back to you.

What you post: your videos and their files, captions, comments, your likes, your follows, your reposts.

What use produces: the creation date of each item, the blocks you set, the reports you file.

What we do not collect: we do not ask for your location, we do not access your contacts or address book, and we use no advertising trackers and no third-party analytics. The application shows no advertising. We sell no data.

2. Why

Your email address and password identify you and let you come back to your account. The display name, handle, country, biography and interests make up your profile, which is public within the application. Your videos and comments are published because that is the point of the service.

Your interests and the languages you have chosen are also used, together with the accounts you follow, to filter the videos offered to you. You can change these choices at any time in your settings.

Your email address is also used to write to you about your account: sign-up confirmation, password reset, moderation decisions that concern you, and confirmation that your account has been deleted. We send you no newsletter and no advertising.

Your date of birth serves only to check that you are eighteen or older. It is shown to no one.

Reports and blocks serve moderation — that is, protecting the other people present.

3. Who sees what

Public, visible to everyone in the application: your display name, your handle, your country, your biography, your interests, your published videos, their captions and your comments.

Visible to you alone: your email address, your date of birth, the list of accounts you have blocked.

Visible to moderation: reports, with the reason you wrote. At the moment of a report we keep the name of the author concerned and an excerpt of the content, so that a decision remains possible even if the content has since disappeared.

How your videos are protected. A published video can only be played through a signed, temporary address, which our servers issue only after checking that the person watching is entitled to see it. Unpublishing a video, deleting your account, or blocking someone therefore genuinely stops the video being reachable, not merely displayed.

A published video can nevertheless be watched, recorded and passed on by the people who can see it. Do not post on KORA what you would not want circulating.

4. Where your data is

Four providers, for four different things.

Your account and your text — profile, captions, comments, follows — sit with a specialised database host, which runs on the infrastructure of a major cloud computing provider. They are currently located in the European Union (Frankfurt, Germany).

Your videos are entrusted to a global video delivery network, which transcodes them and delivers them from servers spread around the world, close to whoever is watching. That is what lets a video adapt to a slow connection instead of being sent as-is.

The emails we send you (see § 2) go through an email delivery service, which receives your email address and the content of the message for that purpose. It processes these emails from the European Union (Ireland).

The messages you write to us (at our contact addresses) are received in a business email service provided by a major cloud computing provider, whose servers are spread around the world.

If you live outside the European Union — in Africa or Canada, for example — your data is therefore transferred and processed outside your country.

These transfers are governed by the Canadian and Québec laws on the protection of personal information, to which KORA is subject as a business established in Québec.

We share your data with no other company, apart from the four providers above, which act on our behalf and on our instructions. We may be required to disclose it to a judicial authority upon a lawful order.

If the operation of KORA were entrusted to another company of the same group, or transferred to a successor (merger, reorganisation, sale of the business), your data and this policy would follow the application, under the same conditions and for the same purposes. We would inform you in the application before the change takes effect.

5. For how long

Your data is kept as long as your account exists.

When you delete your account, the following are erased immediately and permanently: your profile, your videos and their files, your comments, your likes, your follows, your reposts, your blocks and your authentication account. This deletion is irreversible: we never restore a deleted account. The database's automatic backups, used only to recover from a failure, still contain this data for at most seven days, then are overwritten. Emails already sent to you obviously cannot be recalled; the email delivery service keeps a technical record of them for a limited time, then erases it.

Two clarifications, which we would rather state:

Reports you have filed remain, but stripped of your identity: the row stays, the link to your account is erased. The reason is simple — someone harassed who reports and then leaves should not take with them the record of what they endured.

Content under a report is not kept aside: it is deleted from our servers like any other content, whether you remove it yourself or delete your account. Only the report itself remains, with the author's name and the excerpt recorded when it was made (see § 3).

6. Your rights

At any time you may:

View and correct your profile from within the application.

Delete a video, a comment, or your entire account, from Profile then Settings.

Request a copy of the data concerning you, or ask any question about this text, by writing to [email protected] (or by post: KORA Social Network, 300-204, rue du Saint-Sacrement, Montréal (Québec) H2Y 1W8, Canada). We answer within 21 days.

If you believe your rights have not been respected, you may lodge a complaint with the data protection authority of your country.

7. Security

Traffic between the application and our servers is encrypted. Access to data is governed by rules enforced by the database itself, not by the application alone: one account cannot read another's private data, even if the application were modified.

No system is infallible. In the event of a data breach presenting a risk to you, we will inform you and notify the competent authority.

8. Children

KORA is not intended for people under eighteen and we do not knowingly collect their data. If you believe an account belongs to a minor, write to us at [email protected] (or by post: KORA Social Network, 300-204, rue du Saint-Sacrement, Montréal (Québec) H2Y 1W8, Canada): we will delete it.

9. Changes

We will revise this text. Each version carries a date. Where a change is significant, we will tell you in the application before it takes effect.