Kora’s Privacy Notice
Why are we here?
We pay you to reduce your Carbon footprint.
Do you feel too small to act on climate? Small wins are massive motivators in the fight against climate change. But we rarely recognize them. Kora is changing that.
With Kora, your climate-positive actions are measured and rewarded, so you’ll know that you’re moving in the right direction. Instead of feeling overwhelmed, you’ll feel confident that your actions count.
You can call us an app, a game, a currency, or a movement – either way. Kora ensures we all become a climate heroes.
Our contact details
Email: support@kora.app
Address: Kora Sustainability Limited, c/o Bernard Rogers & Co Bank Gallery, High Street, Kenilworth, England, CV8 1LY, United Kingdom
What is this notice all about?
We want to be completely transparent about how we collect and use your personal data and this privacy notice exists to tell you exactly how we do this.
This notice applies wherever we decide why and how we process personal data (and therefore act as a Data Controller under data protection law). It covers the personal data we process when you use our services.
Our privacy notice tells you the journey of your personal data from the moment it enters our systems up until it’s time for us to say “goodbye”, as well as the various stops it makes along the way.
The different ways we process personal data
Personal data can identify an individual, either on its own or through combining it with other factors that could eventually identify an individual.
When you first join our app, we’ll need some information about you, such as your name, email address, and your country of residence. The legal basis we rely on for this is Article 6(1)(b) of the GDPR – Contractual Obligation.
While you use the Kora app, we’ll be using your location data to track your journeys and access to your fitness data to track steps so that we can offer you Kora balance for your carbon impact. The legal basis we rely on for this is Article 6(1)(f) of the GDPR – Legitimate Interests.
We may also send you push notifications related to your usage of the app. In order to send you push notifications, we will need to process your app usage and will rely on Article 6(1)(f) of the GDPR – Legitimate Interests when doing so.
Our app is hosted on AWS servers based in Frankfurt. To find out more about AWS, you can visit their privacy notice here.
We also share your movement data with MOTIONTAG, based in Germany, who analyse and categorise your journey data on our behalf. Their privacy notice can be found here.
We keep the personal data mentioned for the duration of your account with us and for 12 months after you left us, in line with our business needs.
Personal data is anything that can identify an individual, either on its own or through combining it with other factors that could eventually identify an individual.
When you use your Kora balance and spend directly within the Kora app, we will need your home address in order to send you your purchases and your payment details. The legal basis we rely on for this is Article 6(1)(b) of the GDPR – Contractual Obligation.
We provide various payment options and partner with payment providers for this purpose. All data is stored within the UK/EEA.
We keep the personal data related to your purchase for 6 years after your last purchase, in line with statutory retention periods.
Personal data is anything that can identify an individual, either on its own or through combining it with other factors that could eventually identify an individual.
When you join a team through the Kora app**,** we need to process and share your name and information about your carbon footprint with other users to rank you against them and against our global leaderboard. We rely on Article 6(1)(f) of the GDPR – Legitimate Interests when doing this.
Our app is hosted on AWS servers based in Frankfurt. To find out more about AWS, you can visit their privacy notice here.
We keep the personal data mentioned for the duration of your account with us and for 12 months after you left us, in line with our business needs.
Once you leave a team or the community part of our app, we will stop sharing any data with other members of the community.
Personal data is anything that can identify an individual, either on its own or through combining it with other factors that could eventually identify an individual.
If you’ve signed up to receive marketing materials from us, we’ll need to process your name and email address to deliver these to you and rely on Article 6(1)(a) of the GDPR – Consent for doing so.
We may also send you surveys for research purposes from time to time. If you choose to take part in such a survey, we’ll process your user ID and survey responses and rely on Article 6(1)(f) of the GDPR – Legitimate Interests for collecting this data.
We use an email provider to send out email newsletters, which is based in the USA.
We keep data about current subscribers and retain the details of anyone who unsubscribes so that we don’t email you when you don’t want us to. This data is stored for 2 years after unsubscribing.
Our website uses cookies and other similar technologies of which you should be aware.
Cookies are text files placed on your hard drive by a web page server when you visit a website and are saved in your browser’s history. They allow the website to recognise your device and store some information about your preferences or past actions. Cookies cannot be used to run programs or deliver viruses to your computer; they are uniquely assigned to you and can only be read by a web server in the domain that issued the cookie.
When you use our website, the cookies that can be stored on your device are either first-party cookies, which are placed and read by us directly while you are using our website, or third-party cookies, which are set by other third parties we have partnered with.
Below is a list of the cookies we use and the purposes for which they are used:
These are essential to the operation of our website and are integral to the functioning of our Website, therefore, they cannot be removed.
These cookies are additional to the performance of our Website and help us improve the service we provide to you.
These are third-party cookies that enable us to monitor and analyse how visitors use our website and generate statistics based on them.
These cookies can be set by Google Analytics. Google Analytics is a web analysis service provided by Google Inc. (“Google”) which uses the Data collected to track and examine the use of our Website, prepare reports on its activities and share them with other Google services. Google may use the Data collected to contextualise and personalise the ads of its own advertising network.
Personal Data processed: Cookies and Usage Data.
Place of processing: United States – Privacy Policy.
You can choose not to store Non-essential cookies on your computer when you first visit our website, or you can adjust your browser settings to prevent cookies from being saved on your computer. You can find information about how to manage Cookies in the most commonly used browsers at the following addresses:
What are your rights?
Your personal data is yours and you have rights in relation to it granted by the UK GDPR, which include:
You have the right to be informed about the collection and use of your personal data, the purposes for processing, retention periods for that personal data and who it will be shared with. We have set this information out in this privacy notice.
You have the right to ask us for copies of the data we hold about you. If you ask us, we’ll confirm whether we’re processing your personal information and, if so, provide you with a copy of that personal information (along with certain other details).
You have the right to ask us to stop processing your personal information in some circumstances, such as when we are relying on our own (or someone else’s) legitimate interests to process your personal information, when we are processing your personal information for direct marketing or when we are processing your personal information for research.
You have the right to ask us to rectify the personal information you think is inaccurate or to complete information you think is incomplete. When you ask us to rectify your information, if we’ve shared your personal information with others, we’ll let them know about the rectification where possible.
You have the right to ask us to erase your personal information, in some circumstances, such as when we no longer need it or you withdraw your consent (where applicable).
You have the right to ask us to restrict the processing of your personal information for a period of time in some circumstances, such as where you contest the accuracy of that personal information or object to us processing it. This right is separate from the right to object and will only stop us from using your personal information further, not from processing it. If we’ve shared your personal information with others, we’ll let them know about the restriction where possible.
You have the right to ask that we transfer the personal information you gave us to another organisation, or to someone else, in some circumstances.
You don’t have to pay anything in order to exercise your rights. Please contact us by emailing {email address} if you wish to make a request under your rights; we have a calendar month to get back to you with a response.
How can you complain
If you have any concerns about our use of your personal information, please let us know by:
Emailing us at: support@kora.app or
Writing to us at Kora Sustainability Limited, c/o Bernard Rogers & Co Bank Gallery, High Street, Kenilworth, England, CV8 1LY, United Kingdom
If you are not satisfied with our response or you are unhappy with how we have used your data, you can complain to the Information Commissioner’s Office (ICO). You can find the ICO contact details below
ICO Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, Helpline number: 0303 123 1113.
ICO Website: https://www.ico.org.uk
