Privacy policy
Last updated 21 July 2026
We're honest about data — it's a value we build the product on, and it applies to your data too. This explains what we collect, why, and the control you have. Plain English; no dark patterns.
Who we are
Khora (“we”, “us”) is provided by Mediamatic Ltd, registered in England & Wales at 19 Rennie Street, London SE10 0XT, which owns and operates the Khora app and this website. For UK/EU data-protection law, Mediamatic Ltd is the data controller. Reach us any time at privacy@getkhora.app.
What we collect
Waitlist. When you join the waitlist we store your email address and the date you joined, so we can tell you when Khora is ready in your city.
In the app. Your account details; your location while you're walking (only when the app is in use, to follow the route and trigger the stray alert); the snaps and notes you choose to save to a walk — backed up to our servers once you're signed in, so they survive a lost or new device; routes you save or rate; and basic device and usage data to keep the app working.
How we use it
To run the service — serve cached routes, follow your position, fire the stray alert, store your snaps and saved walks — to answer support requests, to keep the product safe and improve it, and to email you about the launch and updates you asked for. We may review uploaded photos to enforce these terms and remove content that's unlawful, unsafe or abusive. We do not sell your data, and we don't use your walks for advertising.
Legal bases (UK/EU)
We rely on: performing our contract with you (running the app and Khora Pass); your consent (waitlist and marketing emails — withdraw any time); and our legitimate interests in keeping the service secure and improving it.
Who we share it with
Trusted service providers acting on our behalf — hosting, email delivery, and payment processing for Khora Pass. Map imagery and geographic data are provided under open licences: map & data © OpenStreetMap contributors (ODbL), tiles © CARTO. We may disclose data if required by law.
Keeping and deleting data
We keep waitlist emails until launch or until you unsubscribe, whichever comes first. Account and walk data are kept while your account is active. Delete your account and we remove your personal data within 30 days, except where we must keep records by law.
Your rights
You can access, correct, export or delete your data, object to certain processing, and withdraw consent at any time. Email privacy@getkhora.app and we'll sort it. You also have the right to complain to your local data-protection authority (in the UK, the ICO).
Cookies
This site uses only the cookies needed to make it work and to remember your waitlist signup. If we add optional analytics later, we'll ask first.
Children
Khora isn't intended for children under 16, and we don't knowingly collect their data.
Changes
If we update this policy we'll change the date above and, for anything significant, let you know by email. Questions? privacy@getkhora.app.
This is a plain-language starting point, not legal advice — have it reviewed by a qualified adviser and fill in the bracketed details before you publish.