Karo

Privacy Policy

Effective 20 October 2026

Shivansh Moore runs Karo and is responsible for your data under the GDPR. Contact: support@karo-app.app. Karo has no ads or tracking, and your data is never sold.

What we collect

Your email and password (stored hashed). Your name, username and profile photo, which anyone on Karo can see. Your tasks, goals, proof photos, messages, reactions, friends, groups, and screen-time unlocks with the reasons you give, which your groups and friends can see (direct messages only the other person). A push token, device ID, phone type and app version for notifications, and IP addresses in server logs. Reports you make.

The apps you lock stay on your phone. On Android, Karo uses Accessibility only to spot when a locked app opens. We don't collect your location or contacts.

Why

To run Karo for you, and to keep it safe from abuse. Camera, photos, notifications and Screen Time are only used with your permission, which you can turn off in your phone's settings.

Who handles it

Supabase hosts Karo in the EU (Ireland). Expo, Apple and Google deliver push notifications, and Resend sends account emails. These are US companies, so transfers are covered by the EU–US Data Privacy Framework or standard contractual clauses.

How long

Proof photos are deleted after 7 days. Everything else stays until you delete it or delete your account in the app, which erases your data, including your direct messages for both people.

Your rights

Email support@karo-app.app to access, correct, delete or export your data, or to object to how it's used. You can complain to the Data Protection Commission at dataprotection.ie.

Children

Karo is for ages 16 and up.

Changes

We'll tell you in the app before any significant change.