Privacy Policy
The three things that matter most
- Your manuscripts never leave your device. Koru Press is a local-first writing app: storing, editing, previewing and exporting your documents all happen on your computer. We never upload, sync or back up any of your manuscript content.
- AI features do not pass through our servers. Koru Press AI features use a BYOK (Bring Your Own Key) model: requests are sent from your device directly to the AI provider you configure. We cannot see what you send, and we never touch your API keys.
- We collect only the minimum needed to run the store. An email address and your theme purchase records — that is all. No advertising, no third-party tracking.
1. Introduction
Beijing Fuguang Biyu Internet Sales Store (sole proprietorship) ("we", "us") is the developer and operator of the Koru Press desktop application (the "Product"). We understand the importance of your personal information and handle it in accordance with the Personal Information Protection Law of the People's Republic of China, the Cybersecurity Law, the Data Security Law and other applicable laws and regulations. This Policy explains what we collect, why we collect it, how we protect it, and the rights you hold.
2. Information We Collect
2.1 Information you provide
- Account information: the email address and password you provide when registering a Theme Store account (passwords are stored in irreversible encrypted form — no one, including us, can recover the plaintext). Using the Product's editing and AI features requires no account; an account is only needed if you wish to purchase or download store themes.
- Order information: records created when you purchase a theme (theme, amount, time, and a type marker for the payment method). Payment itself is completed through WeChat Pay or Alipay; we do not collect, touch or store your payment credentials, card numbers or payment passwords.
2.2 Information generated as we provide the service
- Theme entitlements and configuration: the list of themes you own (ownership) and your light/dark theme slot configuration. These are stored on our servers so that entitlements follow your account — sign in on a new device and your purchased themes can be re-downloaded.
- Server logs: request logs (IP address, request time, API path) and download logs (which account successfully downloaded which theme package, and when). Logs are used for security, troubleshooting, and as proof of delivery — the basis for determining whether delivery was completed if you request a refund or assert an entitlement.
2.3 Information we do not collect
- Your manuscript content, file names, folder structures or keystroke records;
- Anything you send to your configured AI provider through the AI features (see Section 3);
- Contacts, photos, calendars or any other device data unrelated to the Product's functions.
3. AI Features and Data Flow
The Product includes AI features such as Beta Reader, all operating in BYOK mode:
- You configure the provider: in the app's settings you supply the AI provider's endpoint, API key and model name yourself. This configuration is stored only on your device (keys are kept in the system keychain or equivalent secure storage).
- Direct delivery, not through us: when you use an AI feature, the request is sent from your device directly to the provider you configured and never passes through any of our servers. We cannot see the request content and retain no copy.
- You decide what is sent: only the text you explicitly select and trigger is sent; there is no background upload.
- Fees and terms sit between you and your provider: AI services are provided and billed by your chosen provider under its own terms. We do not charge for them and are not a party to that service. For how your data is handled between you and the provider, please review that provider's privacy policy.
- No login required for AI: using AI features does not require registering or signing in to an account with us.
4. How We Use Information
- Providing core store functions: account sign-in, theme purchase, download authorization and entitlement reconciliation;
- Processing orders, refunds and support requests;
- Keeping the service secure (identifying abnormal requests, preventing fraud and chargeback abuse);
- Fulfilling obligations imposed by laws and regulations (e.g. tax and judicial requirements).
We do not use your personal information for advertising profiling, nor for any purpose beyond those listed above. If a new purpose arises, we will obtain your consent again.
5. Sharing and Disclosure
- No selling, no renting: we do not sell or rent your personal information to any third party.
- No third-party tracking: neither the Product nor this website embeds third-party advertising SDKs, analytics SDKs or tracking pixels.
- Payment institutions: payments are processed by WeChat Pay / Alipay as licensed payment institutions; we only receive a "this order has been paid" result notification.
- Legal disclosure: we disclose necessary information only when required by law or by judicial/administrative authorities through statutory procedures.
6. Storage and Security
- Location: your personal information is stored on servers within the People's Republic of China (Alibaba Cloud); no cross-border transfer takes place.
- Retention: retained while your account exists; after account deletion we delete or anonymize your personal information, except where laws prescribe a retention period (e.g. transaction records under accounting and e-commerce rules).
- Security measures: encryption in transit (HTTPS/TLS), irreversible password hashing, authenticated download endpoints, least-privilege access. In the event of a personal information security incident, we will notify you and report to regulators as required by law.
7. Your Rights
Under the Personal Information Protection Law, you have the right to:
- Know and decide: understand how we process your information, and restrict or refuse processing;
- Access and copy: obtain a copy of your account information and purchase records;
- Correct and supplement: request corrections when information is inaccurate;
- Delete: request deletion in statutory circumstances, or simply delete your account;
- Withdraw consent: withdraw consent previously given; withdrawal does not affect processing already carried out on the basis of that consent.
How to exercise them: email us at support@koruform.com (or use the in-app feedback entry). We will respond within 15 business days.
8. Cookies and Local Storage
This website uses no advertising or third-party cookies. The Product uses local storage on your device (app settings, login credentials, theme caches); this data stays on your device and exists to make the features work — deleting app data clears all of it. Login credentials are kept in the system keychain or equivalent secure storage.
9. Protection of Minors
The Product is primarily intended for adults. We do not knowingly collect personal information from children under 14. If you are a minor, please read this Policy with a guardian and use the Product with the guardian's consent; if we discover that we have collected personal information of a child under 14 without verifiable guardian consent, we will delete it as soon as practicable.
10. Updates to This Policy
We may revise this Policy from time to time. The updated Policy will be published on this page with a new "Last updated" date; material changes (e.g. to collection scope, purposes or contact channels) will additionally be announced through a website notice or an in-app prompt. Continued use of the Product after an update constitutes acceptance of the revised Policy.
11. Contact Us
For any questions, comments or requests regarding this Policy:
- Operator: Beijing Fuguang Biyu Internet Sales Store (sole proprietorship)
- Email: support@koruform.com