Privacy Policy

CORA Privacy Policy

Effective date: April 2, 2026

Introduction

Welcome to CORA. We are committed to protecting your privacy. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data. It applies to our mobile application and any related websites or services (collectively, "CORA" or the "App").

Please read this policy carefully. By using CORA, you agree to the practices described here.

1. Information We Collect

We collect the following types of information when you use CORA:

Information collected automatically through your use of our website:

  • Standard first-party cookies set by our website host (Shopify) for basic visitor analytics, such as anonymous visit counts and which site referred you. These cookies apply only to our marketing website — not the cora app — and are not used to track you across other companies' apps or websites
  • Device type and browser information
  • Pages visited and time spent on our landing page

Information you provide directly:

  • Images you upload to your moodboard for style analysis
  • Pinterest account connection (read-only access to your boards and pins, only when you choose to connect)

Information collected automatically through your use of the app:

  • Products you click on
  • Products you like, save, or add to wishlists or collections
  • Style preferences and tags derived from your activity
  • Device type and operating system (for app performance purposes)

Information processed on your behalf:

  • Images and Pinterest content are sent to third-party AI services for real-time style analysis. These services do not retain your images after processing.

2. How We Use Your Information

We use the data we collect to:

  • Analyze your style preferences and generate a personalized style profile
  • Recommend products tailored to your taste
  • Improve and personalize your in-app experience over time
  • Monitor usage trends to improve app performance and features
  • Fulfill any requests or communications you initiate with us

We process your data on the basis of your consent (where you actively connect your Pinterest account or upload images) and our legitimate interest in providing and improving a personalized service.

3. Data Storage

  • Uploaded images and Pinterest content are processed temporarily and not stored long-term
  • We store derived data such as style tags, color preferences, liked products, and recommendations
  • Wishlist and collection data is stored locally on your device
  • We retain your profile data for as long as your account is active, or until you request deletion
  • If you have connected your Pinterest account, we may periodically sync your boards and pins to keep your style profile up to date, even when you are not actively using the app.

4. Data Sharing and Disclosure

We do not sell or rent your personal data to third parties.

We may share data in the following limited circumstances:

  • AI processing services: Images and style data are sent to third-party AI services solely to generate your style analysis. These services act as data processors on our behalf and are contractually prohibited from using your data for any other purpose.
  • Legal obligations: We may disclose your data if required by law, court order, or to protect the rights, property, or safety of CORA, our users, or others.
  • Business transfers: If CORA is acquired or merges with another company, your data may be transferred as part of that transaction. We will notify you in advance if this occurs.

5. Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate or incomplete data
  • Delete your data ("right to be forgotten")
  • Restrict or object to how we process your data
  • Data portability — receive your data in a structured, machine-readable format
  • Withdraw consent at any time without affecting prior processing
  • Know what personal data we collect, use, and share
  • Request deletion of your personal data
  • Opt out of the sale of your data — we do not sell personal data
  • Not be discriminated against for exercising your privacy rights

To exercise any of these rights, contact us at support@cora-app.shop. We will respond within 30 days.

6. Your Controls

  • You can disconnect your Pinterest account at any time within the app
  • You can request full deletion of your data by contacting us
  • You can withdraw consent for image analysis by not uploading images or disconnecting Pinterest

7. Data Transfers (EU Users)

If you are located in the European Union, your data may be transferred to and processed in countries outside the EU, including the United States. Where this occurs, we ensure appropriate safeguards are in place in accordance with GDPR requirements, such as standard contractual clauses.

8. Security

We use reasonable technical and organizational measures to protect your data from unauthorized access, loss, or misuse. However, no method of data transmission or storage is completely secure. We cannot guarantee absolute security and encourage you to use the app responsibly.

9. Children

CORA is not directed at children under the age of 13 (or 16 in certain EU countries). We do not knowingly collect personal data from children. If you believe a child has provided data through CORA, please contact us and we will promptly delete it.

10. Changes to This Policy

We may update this policy from time to time. If we make significant changes, we will notify you via the app or by email before the changes take effect, and update the effective date above.

11. Contact

For any questions, data requests, or concerns about this policy:

Support@cora-app.shop