Privacy policy
Last updated: September 2026.
KuroCode is a desktop app. This page lays out plainly what data of yours reaches our servers and what we do with it.
Who is responsible for your data
The data controller is Ezequiel Mizrahi Behar, Spanish tax ID 46762976C, owner of KuroCode, address Calle Josep Irla 23, 08195 Barcelona, Spain.
Data protection officer: [email protected]. For legal matters, [email protected]. For anything else, [email protected].
If you believe we have mishandled your data, you can complain to the Spanish Data Protection Agency (aepd.es).
What we store
To make the account work we store the minimum: email address, whether that email is confirmed, first name, last name, country (if you give it — optional), an account identifier, the sign-up date, and the last-access date. Nothing else.
If you use projects to work as a team, we also store what a team needs to work on the same thing: the project idea, the analysis, the plans, each team member's contributions (who wrote it and when), and any documents you attach.
What we do NOT store
What never leaves your computer is your project code and the prompts you write to the agent. They go straight to whichever model you configure: a local model never leaves your machine; a cloud model goes to that provider under its own terms, not ours.
The app talks to our servers to check that your session is still valid and to check whether a new version is available.
Who we share it with
We do not sell or hand your data to third parties for commercial purposes. It is shared only with whoever is needed to make the service work:
- Mailgun: sends the account-confirmation and password-recovery emails.
- Google: if you sign in with "Sign in with Google", Google is involved in that sign-in under its own terms.
- Google Analytics: processes website usage data only after you accept analytics.
- Cloudflare: sits in front of our site and filters malicious traffic before it reaches the server.
Where this data lives
The database runs on our own server in Germany (Hetzner). The website sits behind Cloudflare.
How long we keep it
We keep this data for as long as the account exists. If you delete the account — from the app, or by email if you already uninstalled it — it is deleted from the service. Anything left on your own computer is untouched: that is yours, and we do not touch it.
If you delete a project, its document and every contribution written to it are deleted too, under the same 30-day rule as backups.
Encrypted database backups are kept for 30 days and then destroyed. So after you delete your account, a copy may survive in a backup for up to 30 days before it disappears for good.
Cookies and analytics
Google Analytics measures visits to this website only if you accept. Google may receive the page path (never URL parameters), visit time and browser/device information, and may set analytics cookies. We do not use it for advertising or to track use of the desktop app. You can withdraw consent at any time using “Cookie settings” on this site.
The account service also uses a necessary session cookie when you sign in.
Your rights
You can request access to your data, ask us to correct it, or have it deleted. Deleting the account can be done from the app itself. For anything else — including deletion if you already uninstalled the app — write to: