Kuro Privacy Policy
Version 1.0 · Last updated 12 November 2026
This policy explains what personal data Kuro, the app for Windows and macOS, and the website kurodock.com handle, where it goes, and your rights. In short:
- Kuro works on your computer. Your clipboard history, notes, chats and files stay on your computer. We, the company that makes Kuro, do not receive them.
- No analytics, tracking, advertising or telemetry. Kuro sends no usage statistics and no automatic crash reports. The website sets no cookies and uses no analytics.
- Some features go online, only when you use them. They talk directly to the service concerned (section 4). If you connect Luni to a cloud AI provider with your own key, your conversations, and what Luni's tools find on your computer for them, go to that provider.
1. Who we are
ANT-Palvelut Oy, business ID (Y-tunnus) 2237315-8, VAT number FI22373158, Tietotaajamansuora 16, 04300 Tuusula, Finland. Email: info@kurodock.com. Web: https://kurodock.com
We are the controller under the EU General Data Protection Regulation (GDPR) for the personal data we receive ourselves (section 5). We are not required to appoint a data protection officer. Write to info@kurodock.com with any privacy question.
2. What stays on your computer
Kuro keeps the following only on your computer, in your user account's folders. We cannot see it.
- Windows:
%APPDATA%\ClipDeck\; the app's web-view storage in%LOCALAPPDATA%\fi.avto.clipdeck\; generated pictures inPictures\Kuro\; the date your trial began also in the registry, underHKEY_CURRENT_USER\Software\Kuro. - Mac (when the Mac version is released):
~/Library/Application Support/ClipDeck/and the app's preferences (fi.avto.clipdeck); generated pictures in~/Pictures/Kuro/.
| Data | Where (in the folders above) | How it is stored | How long |
|---|---|---|---|
| Clipboard history: text, links, images and files you copy. This can include passwords or personal data you copy. | history.json, Blobs/, clipboard_archived/ | Unencrypted files (JSON and images). Kuro skips items that password managers mark as concealed, and the password-manager apps listed in Settings. | Until it is older than the period you set in Settings (1 day unless you change it; Kuro Free keeps clips for at most 30 days), unless you pin it, or until you delete it. |
| Notes, macros, snippets, bookmarks, web-tab history | notes.json, macros.json, bookmarks.json, browser-history.json (Mac: some in preferences) | Unencrypted JSON | Until you delete them. |
| Luni chats and scheduled tasks. These can contain anything Luni read for you: files, clipboard items, emails, web pages. | Windows: the web-view storage folder and tasks.json; Mac: Assistant/ | Unencrypted | Until you delete them. |
| Licence: your licence key, the ID Polar gave this computer's activation, when the key was last checked, and when your trial began | Windows: licence.json and the registry; Mac: the Keychain and preferences | The key is encrypted by the operating system (Windows DPAPI / Keychain). The rest is unencrypted. | Until you remove the key in Settings or uninstall Kuro. |
| Cloud AI keys | Windows: assistant\cloud\; Mac: the Keychain | Encrypted by the operating system, for your user account only (DPAPI / Keychain) | Until you remove the key in Settings. |
| Email account: server, user name and password | Windows: assistant\mail\; Mac: preferences and Keychain | Server and user name unencrypted; password encrypted by the operating system | Until you remove the account. |
| AI models and programs Luni downloads | assistant\, voice\ (Mac: Assistant/) | Files | Until you remove them in Settings or delete the folder. |
| Generated pictures | Pictures\Kuro, and a preview copy in the assistant's folder | PNG files, marked as AI-generated in their metadata | Until you delete them. |
| Diagnostic log: a technical log for troubleshooting. It can contain file names, app and window names, the mail server name, and picture descriptions you gave Luni. | diagnostic.log, diagnostic.previous.log | Unencrypted text | Rolls over at 1 MB, keeping one older file. |
| Crash reports | Windows: %APPDATA%\ClipDeck\Crashes\ and Windows Error Reporting's folders; Mac: ~/Library/Logs/DiagnosticReports/ | Text files | Until you or the operating system delete them. |
| Your location, only when you ask Luni about the weather without naming a place | In memory, for at most 30 minutes | Not written to disk | Until Kuro quits. |
Kuro also uses, on your computer only, the information its features need in order to work: the names and titles of open windows (for the window switcher and docking), the apps you switch between, screen images when you take a screenshot, record the screen or ask Luni to look at your screen, and key presses for keyboard shortcuts and, if you switch them on, text snippets. Key presses are not stored or sent anywhere.
Kuro stores this data on your computer only to provide the features you use. It does not store or read anything on your computer for tracking or advertising.
How to delete it: use the delete buttons in the app (the clipboard's trash button, deleting chats, removing keys and accounts in Settings), or quit Kuro and delete the folders above. On Windows, uninstalling removes the program. To remove your data as well, delete %APPDATA%\ClipDeck and %LOCALAPPDATA%\fi.avto.clipdeck. On a Mac, delete ~/Library/Application Support/ClipDeck and run defaults delete fi.avto.clipdeck.
Because this data never reaches us, we cannot restore it, and we cannot delete it for you.
3. Cloud AI providers you choose
Luni (Beta) runs on your computer with an on-device model (Google's Gemma), unless you choose a cloud "brain" in Settings › Luni: Anthropic (Claude), OpenAI (GPT) or Google (Gemini), using your own API key.
When a cloud brain is selected, Kuro sends the following to that provider, directly from your computer:
- the whole conversation: your messages and Luni's earlier answers in that chat;
- everything Luni's tools return for it. This can include clipboard items, the contents and names of files Luni opens, emails it reads from your mailbox, screen captures and pictures you attach or ask it to look at, web pages it opens, and your approximate location and the weather when you ask about the weather;
- questions from the quick-answer box in Kuro's search, when no on-device model is installed;
- the prompts of scheduled tasks, which run without you watching;
- web searches: with a cloud brain, Luni uses the provider's own built-in web search. Your search terms go to the provider, which runs the search under its terms, possibly through its own search partners.
You are the provider's customer. Your agreement with Anthropic, OpenAI or Google decides how it uses, stores and protects this data, and where. Read their terms and privacy policies, and check whether your plan lets the provider use your content to improve its models (some free plans do). We do not receive any of it, and we are not a party to your agreement with the provider.
4. What Kuro sends over the internet, and when
Every connection goes directly from your computer to the service named. We run no server in between. Each connection shows that service your computer's IP address and the usual technical data, such as the time and the app's name.
| Service | When | What is sent (besides your IP address) | Why | Who receives it |
|---|---|---|---|---|
Update check: https://kurodock.com/updates.json | About 20 seconds after Kuro starts, then at most once every 20 hours. You can turn it off in Settings. | Nothing about you: a plain request for the file. | To tell you about new versions, including security fixes. | Us, through Cloudflare (section 5). |
Licence check: Polar's licence service (api.polar.sh) | When you enter a licence key or move it to another computer, and about once a week while a key is in use. | Your licence key, our store ID, the activation ID, and when you activate: the name of your computer, as set in Windows (for example "DESKTOP-1A2B3C"), so you can recognise it in your order. A Mac sends a random name made by Kuro. | To check the key is genuine and to count the computers it is used on. | Polar, which runs the licence service for us (section 6). |
KLIPY GIF search (api.klipy.com and its media servers) | When you open the GIFs tab in Search mode (it loads trending GIFs and categories) and when you search. | Your search words, the content-filter setting and our API key. | To show GIFs. | KLIPY, under its own privacy policy. KLIPY may show sponsored results. |
Hugging Face (huggingface.co) | When you set up Luni, picture generation or voice input. Picture generation may set itself up after Luni is installed. | Which model files are requested. | To download AI models to your computer. | Hugging Face. |
GitHub (api.github.com, github.com) | Same as above. | Which program releases are requested. | To download llama.cpp, stable-diffusion.cpp and whisper.cpp. | GitHub (Microsoft). |
MET Norway (api.met.no) | When you ask Luni about the weather and Luni's web access (the globe button) is on. | The coordinates of the place, to at most four decimal places. For your own location they are rounded to about 1 km. | To get the forecast. | The Norwegian Meteorological Institute. |
| Your operating system's location service | Only when you ask about the weather without naming a place, and only if you let Kuro use your location (the system asks you). | Handled by Microsoft (Windows location service) or Apple (Core Location) under their own privacy policies. | To know where you are for the forecast. | Microsoft / Apple. |
OpenStreetMap Nominatim (Windows, nominatim.openstreetmap.org) | When Luni looks up a place you named, or the name of the place where you are. | The place name you gave, or your coordinates rounded to about 1 km. | To turn a place name into coordinates, and back. | OpenStreetMap Foundation (UK). |
| Apple geocoding (Mac) | Same as above. | The place name you gave, or your rounded coordinates. | Same. | Apple. |
| Search in your browser (on-device Luni) | When Luni, running on your computer, needs a web search and web access is on. | Kuro opens a Google search for Luni's search words in your default web browser. From then on it is ordinary browsing. | So you can see and choose results yourself. | Google, through your browser. |
| Web pages Luni opens | With web access on, when Luni opens a page, for example a link you gave it or a search result. | The page address, which Luni chooses from the conversation. | To read the page for you. | The website concerned. |
Wiktionary (en.wiktionary.org) | When you ask Luni for a picture with web access on: unusual words in the description are looked up. | Single words from your picture description. | So the picture model understands the words. | Wikimedia Foundation. |
Cloud AI providers (api.anthropic.com, api.openai.com, generativelanguage.googleapis.com) | Only if you choose a cloud brain (section 3). | Your conversations and tool results as described in section 3, and your API key. | To answer you. | The provider you chose. |
| Pictures by Google or OpenAI (Mac) | Only if you have a Gemini or OpenAI key in Settings › Luni and pictures are set to be made by that company, when you ask Luni for a picture. | The picture's description and your API key. | To make the picture. Each picture is charged to your key. | Google or OpenAI, under their API terms. |
| Gemini in your browser (Mac) | Only when the Mac can't make pictures itself and no key is set: Luni opens gemini.google.com and puts the description on your clipboard. Nothing is sent until you paste it there yourself. | What you paste. | So you can make the picture there. | Google, through your browser. |
| Your email server (IMAP over TLS) | Only if you add an email account in Settings › Luni, when Luni reads mail for you. | Your user name and password (to log in, encrypted in transit), then requests to read messages. Kuro opens mailboxes read-only: it never sends, moves, deletes or marks mail. | So Luni can read and summarise your email. | Your email provider. |
Speed test (speed.cloudflare.com) | Only when you press the speed-test button on the System tab. | Nothing besides a download request. | To measure your connection. | Cloudflare. |
| Web tab | When you browse in Kuro's web tab. | Ordinary browsing data: the sites you visit and the cookies those sites set. Searches typed in the address bar go to Google. | Browsing. | The sites you visit; Google for searches. On Windows the web tab uses Microsoft Edge WebView2, which may use Microsoft Defender SmartScreen under Microsoft's privacy statement. |
| Crash report or support email | Only if you choose "Send Report…" or write to us. Kuro opens a draft in your own email app, and nothing is sent until you send it. | What you choose to send: usually the crash report and the diagnostic log (section 2). | To fix the problem. | Us (section 5). |
Voice input is turned into text on your computer: by whisper.cpp on Windows, and by Apple's on-device speech recognition on the Mac. Where a language isn't supported on-device, voice mode stays off rather than send your speech to Apple. Picture generation also runs on your computer (stable-diffusion.cpp, or Apple's Image Playground on the Mac), except as described in the "Pictures by Google or OpenAI" row. What you say then goes to Luni like typed text, and so to your cloud provider if you chose one.
Luni uses the internet (the rows from MET Norway to Wiktionary) only while its web access (the globe button) is on. Everything else in Luni works offline once the model is installed.
5. Personal data we receive, why, and on what basis
| What | Why | Legal basis (GDPR article 6(1)) | How long we keep it |
|---|---|---|---|
| Purchase and licence data, from Polar: your name, email address, country, what you bought, the order and payment status (never your card details), your licence key and its activations (computer names, dates). | To provide and support your licence, move it between computers, handle refunds and faults, and answer your questions. | (b) performing our contract with you | As long as your licence exists, so we can help you if you lose your key or need to move it. You can ask us to delete it sooner. Polar keeps its own records under its privacy policy. |
| Crash reports, diagnostic logs and support emails you send us, with your email address and anything in them. | To answer you and fix faults. | (b) performing our contract with you (support, fixing faults); (f) our legitimate interest in improving Kuro and answering questions from people who haven't bought it | 24 months after our last message on the matter, unless we need it longer for a legal claim. |
| Requests to kurodock.com, the website and the update list: IP address, time, the page or file requested, browser or app name. | To deliver the pages and the update list, and to keep them secure. | (f) our legitimate interest in running a secure website and telling users about updates | We keep no access logs. Cloudflare, which hosts the site, processes this data to deliver and protect it, and keeps it only as briefly as its security and operations require. |
You don't have to give us any personal data to use Kuro. To buy Pro, Polar needs your email address and payment details. To get support, we need a way to answer you.
Polar (Polar Software, Inc., USA) sells Kuro Pro as merchant of record. It handles the checkout, your payment details, VAT and receipts as an independent controller under its own privacy policy (https://polar.sh/legal/privacy). It also runs the licence service for us.
We do not sell personal data, do not use it for advertising, and do not make decisions about you by automated means that have legal or similarly significant effects. Disabling a refunded key is not such a decision.
Where Kuro connects to other services (section 4), those services receive the data directly from your computer, and we never receive it. We chose which services Kuro uses, and we explain them here so that you can decide whether to use each feature. Each service handles the data under its own privacy policy.
The website (kurodock.com) sets no cookies, uses no analytics and loads nothing from other sites. So there is no cookie banner: there is nothing to consent to.
6. Who else handles your data, and transfers outside the EU/EEA
We use these service providers (processors) for the data in section 5. Each has a data processing agreement with us:
| Provider | What for | Where | Safeguard for transfers |
|---|---|---|---|
| Cloudflare, Inc. | Hosting and DNS for kurodock.com and the update list | USA and worldwide | EU–US Data Privacy Framework (Cloudflare is certified) and the EU standard contractual clauses |
| Google Ireland Ltd | Email (Google Workspace), and the Gemini API for drafting answers to support emails. A person reads and approves every answer before it is sent. Google does not use this data to train its models. | EU, with transfers to the USA | Google's data processing terms: EU–US Data Privacy Framework and standard contractual clauses |
| Polar Software, Inc. | The licence service (section 4) and our view of your order | USA | EU standard contractual clauses |
Our accountant does not receive your personal data. Our books record Polar's payouts, not individual buyers.
Several services in section 4 are based outside the EU/EEA, mostly in the USA (for example KLIPY, Hugging Face, GitHub, Cloudflare, Wikimedia, Microsoft, Apple, Google, Anthropic and OpenAI). The OpenStreetMap Foundation is in the United Kingdom, which has an EU adequacy decision. MET Norway is in Norway, in the EEA. When you use those features, your computer sends the data to them directly, under their own terms and safeguards.
7. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you and get a copy of it;
- have it corrected if it is wrong;
- have it erased, or its use restricted, in the cases the law provides;
- object to our use of it based on our legitimate interests;
- data portability, for data you gave us under a contract;
- withdraw consent at any time, where we rely on consent. This does not affect anything done before.
To use these rights, write to info@kurodock.com. We answer within one month. For complex requests this can be extended by two more months, and if so we will tell you. We may need to confirm who you are.
The data on your computer (section 2) is under your own control: you can view, export and delete it yourself. For data held by a service you use through Kuro (section 4) or by your cloud AI provider (section 3), contact that service.
You can complain to a data protection authority, in particular in the EU country where you live or work. In Finland that is the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto), PO Box 800, 00531 Helsinki, https://tietosuoja.fi, tietosuoja@om.fi.
8. Security
Passwords, API keys and your licence key are stored encrypted by the operating system (DPAPI on Windows, the Keychain on the Mac). Connections to online services use HTTPS or TLS. Other local data (section 2) is stored unencrypted in your user account, protected by your computer's login and disk encryption (BitLocker or device encryption on Windows, FileVault on the Mac), which we recommend you switch on. Anyone with access to your user account can read your clipboard history and chats.
Luni can read files, clipboard items and email when you ask it to, and can open web pages. A web page or an email could contain hidden instructions meant to trick an AI assistant. Keep web access off when you don't need it, and check what Luni is about to do before you approve an action.
9. AI features
Luni is an AI assistant, and Kuro tells you so when you set it up. Pictures it makes are AI-generated, and Kuro writes a machine-readable mark into each one saying so (IPTC Digital Source Type trainedAlgorithmicMedia). AI answers can be wrong, so check them before relying on them. Neither we nor Kuro use your conversations to train AI models. Cloud providers' use of your data is governed by your agreement with them (section 3).
10. Children
Kuro is not meant for children under 13, and we do not knowingly collect children's personal data. A child under 13 should use Kuro's online features only with a parent's consent.
11. Changes
We will update this policy when Kuro's features or our practices change, and show the date at the top. If a change materially affects how your data is handled, we will tell you in the app or by email before it takes effect. This is the first version.