Privacy Policy

«OPERATOR NAME» («COMPANY REGISTRATION NUMBER»), «REGISTERED ADDRESS», is responsible for the personal data described in this policy. For requests and questions: legal@kuratowski.com

• Account data: email address, name and profile image (if any). This data comes from our authentication provider, Clerk, and is kept in a user record on our side.
• Usage data: the apps you install, the reviews and ratings you write, the reviews you report and, if you are a developer, the app submissions you send.
• Connection suggestion requests: the text you write to connect two apps, and your daily usage counter.
• Technical data: session cookies and server error logs.

We do not process payment data.

• Creating your account and managing your installations and library: performance of a contract.
• Publishing reviews, assessing reports and preventing abuse: legitimate interest and legal obligation.
• Generating connection suggestions between apps when you ask for them: performance of a contract (this runs only when you request it).
• Keeping the service secure and fixing faults: legitimate interest.

• Clerk (authentication): account data is stored there and sessions are managed there.
• Hosting and database providers: the Platform runs on cloud hosting, and app data is stored in a hosted Postgres database.
• Sentry (error monitoring): when an error occurs, technical details about it are sent so that we can fix it. Personal data is removed before sending.
• Resend (email delivery): the transactional emails we send you, such as review decisions and account notices, are delivered through it.
• Anthropic (AI): if you use a feature that relies on AI, such as search or connection suggestions, the text you write for it and the names of the apps involved are sent to the model. Your account identity is never sent.
• Developers: when you open an app inside the Platform, the developer receives NOT your identity but a pseudonymous identity derived for that app only. The same person looks different in every app, so two developers cannot combine their data to match you. Your email address and name are never passed to a developer automatically.

These providers may store and process data in countries other than your own.

Data is kept as long as your account is open. When you delete your account, your user record and every row linked to it (installations, reviews, reports, usage counters and, if any, your developer profile and submissions) are deleted from the database. A review hidden for moderation is deleted too. Records that the law requires us to keep are kept for the required period. Only your email address is kept in a separate record, so that we can tell you the deletion is complete; that record is deleted once the notice is sent, within 30 days at the latest. Deleted data stays for at most 6 months in the encrypted backups we keep to restore the system after a failure and is deleted automatically when that period ends; backups are not used for any other purpose.

You can delete your account yourself on the Settings > Profile page; you do not need to contact us. Deleting your account also closes the app connections you set up, so no data flow continues after your account is deleted.

We use essential cookies only: authentication cookies that keep you signed in. We do not use third-party tracking cookies for advertising or profiling.

You have the right to learn whether your personal data is processed and to receive information about it; to learn why it is processed and whether it is used for that purpose; to know the third parties it is shared with; to have incomplete or inaccurate data corrected; to have your data deleted; to receive a copy of your data; to object to its processing; and to have corrections and deletions passed on to the third parties your data was shared with. You can also lodge a complaint with the data protection authority where you live.

Send your requests to legal@kuratowski.com. We answer within thirty days at the latest.

Sessions are signed and short-lived; the identity tokens given to embedded apps are valid for 120 seconds and are issued only for the app concerned. Administrative access is limited to authorized accounts. Even so, no system can promise absolute security; if a breach occurs, we make the notifications that the law requires.

This policy may be updated. The date at the top of the page shows the version in force, and material changes are announced before they take effect.