Privacy Policy

Last updated: August 26, 2026 Effective date: August 26, 2026

In plain terms: every Koaura product is made by one company — AIvantage Consulting Inc. — and this is our only privacy policy. The first part describes the promises that apply to everything we make and the shared account, billing, support, and website systems some products use. Then a short annex for each product tells you exactly what that product collects. Read this policy plus the annex for the product you use, and you have the complete picture.

1. One Company, One Policy

All Koaura products — including Koaura LIVING and Koaura SOLITAIRE, and any product we add later — are made and operated by AIvantage Consulting Inc. ("Koaura," "we," "us"). AIvantage Consulting Inc. is the single business and data controller that determines the purposes and means of processing personal information described in this Policy.

This Policy has two layers:

• This master policy describes who we are, the promises that apply to every Koaura product, and the shared account, billing, support, and website systems that products may use.
• A product annex for each Koaura product describes what that specific product collects and why. The annex for the product you use, together with this master policy, is the complete privacy notice for that product.

Which annex applies to you: see the Annex Index in Section 9. If a product's app-store listing or website links you here, the annex named for that product applies.

2. Contact

Support and privacy requests for every Koaura product: support@getkoaura.com

Legal entity: AIvantage Consulting Inc.

Mailing address: 1401 21st St #16276, Sacramento, CA 95811, United States

Phone (voicemail; we reply by email): +1 408-598-1321

3. Promises That Apply to Every Koaura Product

• We do not sell personal information, and we do not share personal information for cross-context behavioral advertising.
• Our apps are ad-free and tracking-free. Koaura apps do not show advertising, contain no advertising pixels or SDKs, and do not use third-party analytics to track what you do inside the apps.
• No facial recognition, no biometric identifiers. No Koaura product collects, stores, or uses faceprints, voiceprints, or other biometric identifiers.
• We do not use your content or activity to train third-party AI models, and we do not use it for advertising.
• Children. Koaura products are intended for adults and families and are not directed to children. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us personal information, contact support@getkoaura.com and we will delete it.
• Where Koaura is offered. Koaura products are intended for users in the United States. They are not directed to individuals in the EU, EEA, UK, or Switzerland. If you access a Koaura product from outside the United States, you do so on your own initiative and are responsible for compliance with local law.

4. Accounts, Billing, and Support

The following company-wide services and practices apply to products that use them:

Koaura Account (sign-in). Products that offer sign-in use Google or Apple sign-in through Firebase Authentication. We receive your sign-in provider identifier, email address, display name, and account status. One person's identities across Koaura products may be linked so you can see and manage your Koaura products as one account; the link is used to show you a consolidated view and to route support and deletion requests — not for advertising.

Billing (paid products only). Paid subscriptions are purchased through Stripe (Stripe Checkout and the Stripe Customer Portal). Stripe handles payment-card details; we do not collect or store full payment-card numbers. We store billing identifiers, subscription state, plan and entitlement records, and audit events needed to activate access, manage subscriptions, and resolve billing issues.

Support. Support requests to support@getkoaura.com create support records (your message, account identifiers, and operator notes) retained to provide support and maintain audit history.

Koaura websites. Our websites use cookies that are necessary to make them work (sign-in, secure checkout, account flows). Where a Koaura website uses analytics (Google Analytics 4), it is opt-in via a consent banner, on the website only — never inside the apps — and used for our own product and traffic analytics, not advertising. You can withdraw consent at any time through the site's cookie controls or support@getkoaura.com.

Notify-me updates (optional). Some Koaura web pages let you leave your email address to be notified about a product you choose (for example, a new game or a product launch). This is optional and consent-based: we store your email address, what you asked to hear about, and when you asked. We use it only to send the updates you requested, and every message includes a way to stop future updates. We do not add you to other lists.

Security verification. Koaura websites and apps use Firebase App Check (with Google reCAPTCHA Enterprise on the web) to verify that requests come from genuine Koaura clients. This protection is essential to keeping the service secure; it is not used for advertising or cross-site tracking.

Service providers behind the shared layer. Google LLC (Firebase and Google Cloud, including Firebase Authentication, Firestore database, Firebase Storage, hosting, Cloud Functions, and security logging), Stripe, Inc. (billing), Apple and Google (sign-in, app distribution, push messages, store/platform requirements), and email/support providers — each under contracts limiting their use of the data. Product annexes name any additional providers specific to that product.

5. Your Privacy Rights

Depending on where you live, you may have rights to know, access, correct, delete, receive a copy of, or limit the use of your personal information, to withdraw consent, to appeal, and to complain to a regulator — including under the CCPA/CPRA for California residents. We do not sell or share personal information and have not in the preceding 12 months.

To exercise rights for any Koaura product, email support@getkoaura.com. Products with signed-in accounts also provide a self-serve deletion page (named in the product's annex). We will verify your request; you may use an authorized agent. We plan to acknowledge verified deletion requests within 7 days and complete deletion or anonymization of active systems within 30 days, subject to the legal, billing, security, backup, and shared-household exceptions described in the applicable annex.

6. Retention

We retain information only as long as needed for the purposes described in this Policy and the applicable annex, then delete or anonymize it, except where a longer period is required by law or for legitimate operational reasons (billing, tax, security, fraud review, audit, backups). Product annexes state retention specifics for product data.

7. Security

We use technical and organizational measures intended to protect accounts, records, and service operations. No online service can promise absolute security. Do not send passwords, full payment-card details, or sensitive personal details through ordinary support email unless support provides a secure handling path.

8. Changes to This Policy

We may update this Policy and its annexes as Koaura products change. If changes are material, we will provide notice appropriate to the change, such as updating the effective date, posting a notice, or requiring renewed acknowledgment. Adding a new product adds a new annex; it does not create a separate policy. We always show the date the latest version took effect at the top of this page.

9. Annex Index

Annex A — Koaura LIVING

Koaura LIVING is Koaura's TV-first wellness and family-connection service. This annex is part of this Policy and, together with the company-wide sections above, is the complete privacy notice for Koaura LIVING. Use this company policy for the Koaura LIVING privacy notice.

A1. Scope and Contact

Koaura LIVING covers its public pages, account and support pages, TV and mobile apps, device pairing, routines, family media, guided stretching, Self View, Phone Live View, Remote Helper, subscriptions, and deletion requests. Some account, purchase, device, and support features require sign-in with Google or Apple. Privacy requests can be sent to support@getkoaura.com. Koaura LIVING is intended for users in the United States and is not directed to individuals in the European Union, European Economic Area, United Kingdom, or Switzerland.

A2. Information We Collect

• Account and sign-in. Account ID, email address, display name, sign-in provider information, account status, and profile records.
• Household and subscription. Household and role information, plan and entitlement state, quotas, renewal or cancellation state, billing identifiers, and related support and audit records. Stripe handles payment-card details; we do not collect or store full payment-card numbers.
• Device and pairing. Device or install identifiers, device type, paired and approved-device state, device presence and routing state, push-token references where needed, and device removal or expiry state.
• Routine and wellness activity. Routine identifiers, titles, duration, thumbnails, categories, access and delivery state, downloads, Send-to-TV actions, quota usage, reminder settings and interactions, and local TV cache status. When enabled, foreground TV-app context and remote-control or D-pad activity signals may help time gentle wellness nudges. Koaura LIVING is not designed to collect a broad inventory of all apps installed on your TV.
• User media and family content. Photos, videos, thumbnails, metadata, storage paths, delivery metadata, and TV cache state that you choose to upload, transfer, or send to an approved TV.
• Guided stretching, Self View, Phone Live View, and Remote Helper. Session and invite IDs, device roles, session state, approved participant and device state, quota usage, session limits, and connectivity records. Remote Helper may use a TURN provider when a direct connection is unavailable; TURN usage may be logged for reliability, quota, and cost control. These features are for invited household connection, not clinical care or professional supervision. See A5 regarding biometrics.
• Support, operations, security, and reliability. Support ID, household identifiers, request details, operator notes, entitlement-repair notes, audit history, webhook delivery logs, authentication and App Check signals, error records, reliability records, security signals, and cost-control records. Error and reliability records include app crash and diagnostic reports; these reports never include your name, photos, videos, or messages.
• Website and product usage. Pages viewed, sign-in and checkout flow state, account flow state, and aggregate launch metrics. Koaura LIVING does not sell personal data, use advertising pixels, or use cross-context behavioral advertising.

A3. How We Collect and Use Information

We collect information when you create or sign in to an account, use the website or apps, pair devices, manage a household, upload or transfer media, send routines to a TV, enable reminders, start or join sessions, purchase or manage a subscription, or contact support. We also receive security, provider, webhook, error, and reliability events needed to run the service.

We use this information to provide accounts, households, subscriptions, support, deletion, paired-device features, routines, family media, invited sessions, quotas, optional wellness reminders, fraud and abuse prevention, security, reliability, troubleshooting, aggregate product improvement, and legal, accounting, tax, and platform obligations. We do not use wellness activity or family media for advertising or to train third-party AI models.

A4. Service Providers and Sharing

We do not sell personal information or share it for cross-context behavioral advertising. Service providers that help operate Koaura LIVING include Google LLC (Firebase and Google Cloud for authentication, hosting, functions, storage, database, security, and logging), Stripe, Inc. (checkout, subscriptions, invoices, and customer portal), Apple and Google (sign-in, app distribution, push messages, and platform requirements), a Metered TURN/WebRTC provider, and email and support providers. We may disclose information when required by law, to protect rights and safety, reduce fraud or abuse, investigate security issues, enforce our Terms, or complete a business transfer.

A5. Wellness and Biometric Boundaries

Some wellness activity is health-adjacent. Koaura LIVING uses coarse engagement signals, such as whether a routine was started or completed, to operate features and time optional nudges. It does not assess, manage, monitor, or infer a medical condition or health status, and it does not provide medical, clinical, emergency, diagnostic, treatment, or professional-care services.

Koaura LIVING does not use facial recognition and does not collect, store, or use faceprints, voiceprints, retina or iris scans, or other biometric identifiers. Self View, Phone Live View, and Remote Helper relay live video and audio between approved devices in real time; Koaura LIVING does not record that live video for biometric identification.

A6. Voice Commands

If you use the voice button, your TV's own speech service converts what you say into text. Koaura LIVING receives only that text — we never record, store, or transmit audio.

A7. Household Visibility and Local Storage

Koaura LIVING is designed for household use. Routine names, family media, connection prompts, helper invitations, and device-pairing status may be visible on a shared TV or to approved household devices. Pair devices and share media only with people and devices you trust.

TV and mobile apps may store routine videos, thumbnails, family media, session state, or cache metadata locally to make playback reliable and reduce repeated downloads. Removing an account, unpairing a device, clearing the app, or using app cache controls may remove locally stored data, though behavior can vary by platform.

A8. Cookies, Analytics, and Security Verification

Essential website cookies support sign-in, secure checkout, and account flows. Google Analytics 4 and other non-essential website analytics are opt-in, used for our own product and traffic analytics rather than advertising, and can be withdrawn through the site's consent controls. Koaura LIVING apps do not use third-party analytics to track in-app activity.

Firebase App Check with Google reCAPTCHA Enterprise helps verify that requests come from a genuine Koaura client. Google may process limited device and interaction signals for that security service; it is not advertising or cross-site tracking and does not depend on the analytics choice.

A9. Retention

We retain information only as long as needed for the purposes in this Policy, then delete or anonymize it, except where longer retention is needed for billing, tax, security, fraud review, audit, backups, provider obligations, or law. Account and profile data is targeted for deletion or anonymization from active systems within 30 days of a verified request, subject to those exceptions. Device tombstones, routine activity, entitlement records, support records, and security, webhook, error, and reliability logs are retained for limited operational, support, security, and audit purposes. User media is retained while needed for the feature or until deleted, subject to backup expiry and legal limits. Provider-held records may take longer to expire.

A10. Rights and Account Deletion

Depending on where you live, you may have rights to know, access, correct, delete, receive a copy of, or limit the use of your information, withdraw consent, appeal a decision, or complain to a regulator. California residents may have additional CCPA/CPRA rights. To submit a request, email support@getkoaura.com or use the Koaura LIVING account deletion page at https://living.getkoaura.com/account/delete. We plan to acknowledge verified requests within 7 days and complete deletion or anonymization of active systems within 30 days, subject to legal, billing, security, fraud-review, provider, backup, audit, and shared-household exceptions.

A11. Children and Security

Koaura LIVING is intended for adults and families and is not directed to children. We do not knowingly collect personal information from children under 13. Family media you upload may include images of children; you are responsible for having the right and any necessary consent to share it. Contact support if you believe a child under 13 has provided information.

We use technical and organizational measures intended to protect accounts, household records, support records, and service operations. No online service can promise absolute security. Do not send passwords, full payment-card details, private family media, or sensitive personal details through ordinary support email unless support provides a secure handling path.

A12. Changes

We may update this Policy and its annexes as Koaura LIVING changes. If changes are material, we will provide appropriate notice, such as updating the effective date, posting a notice, or requiring renewed acknowledgment.

Annex B — Koaura SOLITAIRE

What Koaura SOLITAIRE collects: nothing. Koaura SOLITAIRE does not collect, transmit, or share any personal information. The game is free, shows no advertising, requires no account, requests no device permissions, and works fully offline — it makes no network connections at all.

Your game settings (including accessibility options such as large cards, high-contrast colors, and control layout), your play statistics, your saved game, and the optional daily play-limit counters are stored only on your device, in the app's local storage. They are never uploaded. Uninstalling the app or clearing its data removes them.

Because Koaura SOLITAIRE collects nothing, the shared Koaura platform layer (Section 4) does not currently apply to it: there is no Koaura Account sign-in, no billing, and no analytics in this product. If a future version adds an online feature or Koaura Account sign-in, we will update this annex first and reflect the change in the app's store data-safety declarations.

Key Terms

Controller — the company legally responsible for deciding how and why personal information is processed. For every Koaura product, that is AIvantage Consulting Inc.

Annex — the short product-specific section of this Policy that says what one Koaura product collects. The master policy plus one annex is the complete notice for that product.

App Check / reCAPTCHA — a security service that helps us verify requests come from a genuine Koaura app or website rather than an automated abuser. It protects the service; it is not advertising or cross-site tracking.

Cookies — small files a website stores in your browser. Koaura websites use essential cookies to keep you signed in and secure; analytics cookies run only if you opt in.