Privacy Policy

We want using Karo to feel calm and clear, including how we handle your data. This policy explains what we collect, why, and the choices you have. Using Karo means you agree to the practices described here.

Our approach

When you trust us with your data, our job is to keep it as safe and private as we reasonably can. We collect only what we need, we don’t sell your personal data, and anything you share with other people is shared only with your consent.

What we collect

Account. The email address and display name from your sign-in (Google or email). We never see or store your password; your sign-in provider handles that.

Learning. Your progress, streak, XP, review history, and settings, so we can save and sync where you are.

Technical. Device model, OS and app version, language, an anonymous install identifier, approximate region from your IP address, and crash reports.

Ads (free tier only). If you use Karo for free, our ad provider may access a device advertising identifier to show and measure ads. Karo Pro has no ads.

Payments. Purchases are handled by the app stores and their payment providers. We don’t store your card details on our servers.

How we use it

To provide and maintain the Service; to save and sync your progress across devices; to improve lessons and features using aggregated, de-identified data; to keep the Service secure and diagnose problems; and to contact you about important matters such as changes to these policies. We do not use your learning content for advertising.

Ads and analytics

The free tier shows ads through Google AdMob, which may use a device advertising identifier to show and measure them; you can reset or limit this identifier in your device settings, and Karo Pro removes ads entirely. We also use privacy-friendly product analytics and crash reporting (Google Firebase) on aggregated, de-identified data to make Karo better. We do not run third-party behavioural ad tracking inside your lessons.

On-device smart features

Karo’s smart helper runs on your own device. Your practice text isn’t sent to an external AI service to power it, so what you type stays with you.

Keeping the app safe from abuse

To protect learners and stop automated abuse, we verify that requests come from the genuine Karo app (using Google Play Integrity / App Check) and apply server-side rules and rate limits. This uses technical signals, not your learning content.

Legal bases (GDPR)

Where the GDPR applies, we process data to perform our contract with you (running the app), for our legitimate interests (security and product improvement), with your consent (where required), and to meet legal obligations. You can withdraw consent at any time.

How we share data

We don’t sell or rent your personal data. We share it only with trusted service providers who work on our behalf (for example hosting, authentication, and crash analytics such as Google Firebase), with authorities where the law requires it, and with a successor in a merger or acquisition under the same protections.

Keeping and deleting data

We keep your data while your account is active. You can delete your data in the app under Profile → Settings → Delete data, or by emailing us. After deletion, related personal data is removed or anonymised within a reasonable period (usually up to 90 days) unless the law requires otherwise.

Security

The best way to protect data is not to hold more than we need, so we keep collection minimal. Where we do store data, we use encryption in transit (TLS), access controls, and server-side checks. No system is perfectly secure, but we take reasonable steps to protect your information.

Your rights

Depending on where you live (including under the GDPR and CCPA), you may have the right to access, correct, delete, restrict, or object to the processing of your data, to data portability, and to withdraw consent. To exercise these rights, email privacy@karo-learn.com. We won’t treat you differently for using them.

Children

Karo isn’t directed at children under 13, and we don’t knowingly collect their data without a parent or guardian’s consent. If we learn we have, we’ll delete it.

International transfers

Your data may be processed on servers in other countries where protections may differ from your own. In those cases we apply safeguards required by law, such as standard contractual clauses.

Changes

We may update this policy. If we make material changes, we’ll notify you in the app or by email and update the date above. Continuing to use Karo means you accept the updated policy.

Contact

Privacy questions: privacy@karo-learn.com. General support: support@karo-learn.com.