Privacy Policy
The short version. Your care records never leave your device. We never receive them and could not read them if asked. The only personal information we hold is what you give us to bill you: your name, your email, and your payment status through Stripe.
What Kura Notes does with care records
Daily notes, drafts, monthly summaries, goals, medication lists, and people's labels are written on your device and stored there, encrypted. Nothing about the people you support is transmitted to us or to any third party. Kura Notes contains no analytics, no advertising code, and no third-party scripts. Individuals are recorded by a label you choose, and the note itself never carries a name.
What we collect
- Account details — your name, email address, what kind of caregiver you are, and how many people you document for, entered at signup.
- Billing — handled entirely by Stripe. We never see your card number. Stripe's privacy policy governs the payment itself.
- Subscription status — about once a day, the app sends your email address (only) to our billing service to confirm the subscription is active. No note content is included.
- Support — anything you send us when you ask for help.
Your licence key
Kura Notes checks your licence key with our licence server when you activate it and about once a week after that. Each check sends three things: the licence key, a random device ID the app made up on first run, and a device label such as "iPhone" or "Windows PC". Nothing about the people you support, no note text, no names and no dates of service are ever sent. If you're offline the check simply waits for next time; it never stops you writing or signing a note. The key and device ID are kept only on the device and are left out of backups and exports.
Staff names and the activity ledger
When you add staff, their name, role and a random ID (like KN-7K3Q) are stored on the device so notes can be signed by the person who wrote them, and each PIN unlocks that person's own encrypted copy of the record key — the PIN itself is never stored. A note, draft, addendum or summary can only be changed by the user who created it. The activity ledger — who signed, viewed, edited or exported what, and when — is append-only within the app: no screen or action can edit or delete an entry, which makes any tampering evident rather than impossible. It is kept in your device's own storage alongside your notes, is included in backups, and is never sent to us.
What we don't collect
Care records. Location. Contacts. Device identifiers. Usage analytics. We do not sell or share personal information with anyone, and we do not use it for advertising.
Where your records live
On the device you use Kura Notes on — and only that device. There is no cloud: a note written on your phone will not appear when you sign in on a desktop, and the reverse. Move records with Back up / Restore, or export them. If you clear the app's data, lose the device, or forget your PIN, we cannot recover your records — we never had them. Use the encrypted backup and the Excel export regularly.
Your rights
You can see, correct, or delete the account information we hold by emailing us. Cancelling your subscription removes your billing relationship with us; your records stay on your device under your control.
Children
Kura Notes is for adult caregivers and is not directed at children under 18.
Changes
If this policy changes materially we will post the new version here with a new effective date.
Contact
privacy@riosventures.org