Privacy policy

Information we handle

• Learning on your device: completed Kurals, star ratings, saved Kurals, the last Kural opened, reading preferences and voice recordings are kept locally. Voice recordings are not uploaded; a previous recording is deleted when a new one starts.
• Optional account: if you sign in with Google or Apple, we receive the provider account identifier and may receive a verified email address and display name. Apple may provide a private relay email. We do not use email to merge accounts.
• Synced progress: for signed-in users, we store completed Kural numbers, star ratings, the learning round and the local date a daily chapter was completed, so progress can be backed up and synced across devices.
• Leaderboard: only if you choose to join, we store your chosen nickname and calculate points and Kurals learned from progress. The public leaderboard displays the nickname, points, Kurals learned and rank. It does not display your real name or email.
• Service operations: authentication and sync require short-lived session data and security records, including hashed refresh tokens and single-use sign-in token/nonce hashes. The API may receive standard connection data such as IP address and request metadata while handling a request.

How we use information

We use account information to authenticate you, keep your account secure, sync progress, provide account management and operate the optional leaderboard. We do not sell personal information or use it for advertising. The app's learning features do not require an account.

Sign-in providers

Google and Apple handle sign-in according to their own privacy policies. Kuralini verifies sign-in tokens with the selected provider. If you link Apple, an encrypted provider token may be retained so it can be revoked when you delete your Kuralini account.

Sharing and service providers

We share information only as needed to operate features you choose: with Google or Apple for sign-in, with the Kuralini API and database for account and progress sync, and with the public leaderboard when you opt in. We do not publish account identifiers, email addresses or display names. We do not authorize service providers to use account data for their own advertising.

Retention and your choices

Synced account information is retained while the account is active. You can leave the leaderboard at any time in the app; this removes the public nickname entry. You can sign out to end a session. To erase the account and associated server-stored data, use Delete Account in the Account screen, or send a deletion request through our contact form. Account deletion removes the user record and sessions and requests revocation of linked Apple credentials. Information stored only on your device can be removed by clearing the app's data or uninstalling it.

Children's privacy

Kuralini is designed for children and can be used without creating an account. An account is optional and sign-in is provided through Google or Apple. Parents or guardians should help children manage sign-in and any public leaderboard nickname. Please contact us if you believe a child has provided personal information and you would like it removed.

Security

We use measures such as provider-token verification, encrypted transport for production API connections, hashed session-token storage and protected credential storage on the device. No method of transmission or storage is completely secure.

Changes to this policy

We may update this policy as Kuralini changes. The effective date above shows when this page was last revised. Continued use after an update means the updated policy applies going forward.