1. Overview
Kortress ("we") processes your personal data in accordance with applicable laws while operating the Kontrol app (the "Service"). Kontrol has no sign-up, and the app does not ask for contact details such as your name, email address or phone number.
2. Data we process
To provide the Service, we process the following:
- App identifiers: a random user ID and device ID created when you install the app (random on iPhone; on Android, a hash derived from device information)
- Subscription data: product, purchase and expiry times, transaction number and premium status (payments are handled by the App Store and Google Play; we never receive card numbers or other payment details)
- Notification data: if you turn on the trial-ending reminder, a push token, device type (iOS/Android) and app language
- Usage statistics: in-app events such as pressing SOS, opening a tool, recording a resist or viewing the paywall, plus device model, OS version and app version (Firebase Analytics)
- Advertising data: an advertising identifier, device information, approximate location inferred from your IP address, and ad performance and error data used to show ads to free users (Google AdMob). On iPhone, the advertising identifier is used only if you allow tracking
- Support data: your email address and message when you contact us by email
3. Data that stays on your device
The contents of the following records are stored only on your device, are never sent to our servers, and is deleted when you delete the app:
- Resist counts, stats, Resist Jar records and settings such as Home shortcuts
- The camera view in Blue Lens and Mirror (never saved or transmitted)
4. How we use data
- Verifying subscriptions and providing premium features
- Sending the reminder one day before a trial ends
- Analyzing usage statistics to improve the app
- Showing ads to free users
- Responding to support requests and meeting legal obligations
5. Processors and international transfers
We use the following providers to run the Service; data is transmitted over the network while you use the app. We do not share your data with any other third party without your consent unless required by law.
- Supabase: stores app identifiers, subscription and notification data (server location: Seoul, Republic of Korea)
- RevenueCat (USA): subscription status
- Google (USA): Firebase Analytics (usage statistics), Firebase Cloud Messaging (notifications), AdMob (ads)
- Apple (USA): App Store payments and push notification delivery
- Discord (USA): internal alerts for subscription starts and renewals (truncated user ID, product, price)
6. Retention
- Push tokens: deleted once the trial ends and the reminder is no longer needed, and automatically after 45 days without an update
- Trial reminder records: deleted automatically 30 days after the trial ends
- App identifiers and subscription data: kept while we provide the Service and deleted without delay on request (data we must keep by law is kept for the required period)
- Usage statistics: per Google Analytics data-retention settings
- Support emails: 3 months after the request is resolved
7. Your rights and choices
- You can request access, correction, deletion or restriction of processing by email. If you subscribe, include the order number from your store receipt so we can find your records
- You can opt out of the trial-ending reminder with the switch on the paywall when you start a trial, and turn it off during the trial in your device's notification settings
- You can limit ad tracking in iPhone Settings > Privacy & Security > Tracking, or reset or delete your advertising ID in Android settings
- Deleting the app removes all data stored on your device
8. Contact
Email fortressofko@kortress.com and we will reply within seven business days. We may ask for information to verify your identity before acting on a request.
9. Changes
If this policy changes, we will post the new version on this page and update the date above.