Privacy Policy

Scopes We Request

Korulearn requests only the following non-sensitive Google OAuth scopes:

• openid — confirms Your Google identity.
• .../auth/userinfo.email — Your primary Google email address.
• .../auth/userinfo.profile — Your basic profile information (name and profile picture).

Korulearn does not request access to Google Drive, Gmail, Google Classroom, Calendar, Contacts, or any other restricted or sensitive Google Workspace scopes.

Google User Data We Access

• Your Google account email address
• Your name (given name and family name)
• Your Google profile picture URL
• Your Google account identifier (the "sub" claim)

How We Use Google User Data

Google user data is used solely to authenticate You and provide the core account features of the Service. Specifically, we use this data to:

• Create Your Korulearn account or sign You in to an existing Korulearn account.
• Display Your name and profile picture inside the Service so You can recognize Your own session.
• Send You essential account-related communications (for example, security and support emails) at the email associated with Your Google account.

Korulearn does not use Google user data for advertising, for building user profiles for purposes unrelated to the Service, or for any purpose other than the authentication and account features described above.

How We Store and Process Google User Data

Google user data is stored in Korulearn's authentication database and is associated with Your Korulearn account. Data is transmitted to and from Google over encrypted connections (HTTPS/TLS) and stored at rest with our infrastructure providers. Access to this data inside Korulearn is restricted to the systems and personnel that need it to operate the Service.

How We Share Google User Data

Korulearn does not sell, rent, or share Google user data with third parties for advertising or for their own independent use. Google user data may be processed by infrastructure sub-processors strictly on our behalf to operate the Service (for example, our hosting provider, our authentication provider, and our transactional email provider). These sub-processors are bound by contracts that limit their use of the data to providing services to Korulearn.

AI and Machine Learning

Korulearn does not use Google user data to develop, improve, or train generalized or non-personalized AI and/or machine learning models. Google user data is not transferred to any third-party AI model provider for training purposes.

Retention and Deletion

Google user data is retained for as long as Your Korulearn account is active. You may revoke Korulearn's access to Your Google account at any time at https://myaccount.google.com/permissions. You may also request deletion of Your Korulearn account and any associated Google user data by emailing team@korulearn.com. On account deletion, Your Google user data is removed from our active systems within 30 days, subject to short-term retention in encrypted backups.

Compliance with Google API Services User Data Policy

Korulearn's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.