← karuu

Privacy Policy

Effective 1 August 2026 · This policy covers the karuu website and the email waitlist only. karuu is not released yet; when the app launches, a full policy will replace this one and we will say so here.

1. Who we are

karuu is an independent project in development, operated under the name karuu. We decide why and how the information described below is handled — in data protection terms, we are the controller. You can reach us at hello@karuu.app.

2. What we collect

• Your email address — the one you type into the waitlist form.
• Signup context — the campaign or referral parameters carried in the link you arrived through (utm_source, utm_medium, utm_campaign) and a language value, stored alongside your subscription so we know where signups came from.
• Automatically — our hosting provider processes ordinary access records (IP address, browser type, time of request) to keep the site secure and to prevent abuse.

We do not use advertising or analytics trackers, and we collect nothing beyond the above.

3. Why we use it, and on what basis

To run the waitlist and to send you updates about the build and notices when a beta opens. The basis is your consent — given when you tick the box and then confirm by clicking the link we email you (double opt-in). Security logs rest on our legitimate interest in protecting the site from abuse.

4. How long we keep it

Until you unsubscribe or ask us to delete it — then without undue delay. If we close the waitlist, we delete the list. Access records are retained only briefly by our hosting provider.

5. Who else handles it

Provider	Location	Role
beehiiv, Inc.	United States	Email subscription management and delivery
Cloudflare, Inc.	United States	Website hosting, DNS, security

Both act on our instructions under their data processing terms. Because they operate in the United States, your information is transferred outside your own country — including outside the EEA and the UK. Those transfers rely on the standard contractual clauses these providers offer. We do not sell your information or share it with anyone else.

6. Your rights

• Leave at any time — every email has an unsubscribe link at the bottom. One click removes you from the list.
• You can also ask us to show you what we hold about you, correct it, delete it, give it to you in a portable form, or limit how we use it.
• Withdrawing consent does not undo what was lawful before you withdrew it.

Write to hello@karuu.app and we will respond as quickly as we can, and within one month at the latest. If you are in the EEA or the UK, you may also complain to your national data protection authority.

7. Children

The waitlist is not intended for children. Please do not sign up if you are under 16, or under the age your country sets for consenting to this kind of processing. If we learn that we hold a child's address, we delete it.

8. Changes

If this policy changes, the new version appears on this page with a new effective date. If a change is significant and you are on the list, we will tell you by email.