Privacy Policy for getkorys.com
Last updated: October 11, 2026
KORYS App and KORYS Junior are operated by Intercept, Tapuitstraat 54C, 3083 WS Rotterdam, the Netherlands, Chamber of Commerce (KvK) number 75199955. Intercept is responsible for the personal data described here. Contact: [email protected].
This policy covers getkorys.com, korysapp.com and korysjunior.com, including exercises, reflections, AI coach conversations, voice interactions, support and WhatsApp interactions where offered. KORYS App is for adults aged 18 or older. KORYS Junior is intended for people aged 13 or older, particularly ages 13–17. This does not mean every feature is available to every age group or in every country. See section 3.
Personal data means information that identifies you or could be linked to you. A random device code, a phone number, a voice recording and a conversation can be personal data even without your name.
KORYS Junior is not offered to children under 13. KORYS App is not offered to people under 18. If we learn that personal data has been collected contrary to these age rules or without required parental authorisation, we will investigate, restrict the affected processing and arrange deletion where appropriate, subject to lawful retention obligations.
The minimum age for using Junior, the age for independently consenting to data processing, and the age for entering a paid contract are different questions. Local law determines which permissions are necessary. In the Netherlands, a parent or legal guardian must give or authorise consent-based processing for a child under 16. For online services in the EU, national digital-consent thresholds vary between 13 and 16. Rules outside the EU may differ. A school subscription or an adult payment is not, by itself, valid parental consent for every purpose.
Where parental consent is required, the relevant feature or optional processing may be used only after that authorisation has been obtained and appropriately verified. Consent must be specific and can be withdrawn. It must not be bundled into acceptance of these terms or made a condition of unrelated features.
Third-party requirements also apply. ElevenLabs requires written approval for apps or experiences directed at people under 18. An ElevenLabs-powered Junior interaction must not be used by a person under 18 unless that approval covers the use and all applicable parental-consent and other requirements have been satisfied. Junior's general 13+ age does not override this restriction. WhatsApp has its own eligibility rules, which may vary by country and account type.
The information depends on the features you actually use:
Your voice is personal data. Using audio for speech recognition does not, by itself, mean it is being used as a biometric identifier. KORYS does not offer identity verification through voice cloning.
Where the GDPR applies, we distinguish the following purposes:
A relevant collection screen must explain required information and what happens if you do not provide it. Without microphone access a voice call cannot work; you can choose not to start a call. Consent for optional analytics is separate from microphone access and any consent required for the conversation itself.
KORYS supports reflection and personal learning. Its AI responses are not decisions determining eligibility for education, employment, credit, healthcare or other similarly significant matters. We do not use private conversations for advertising, marketing testimonials or model training without a separate applicable legal basis and the required specific permission. Permission to have a conversation is not permission to publish it.
The apps use browser storage or similar technologies for choices such as language, theme and privacy preferences, and for features you request. Infrastructure may also process data necessary for delivery and security.
Where you permit optional usage measurement, we use Mixpanel to understand which screens, buttons and functions are used and improve the apps. We use a random device code, which is a pseudonymous personal identifier, not anonymous data. We do not include your name, email address, conversation text, audio or reflection answers in Mixpanel events. This measurement does not include session replay or recording what you type into conversations.
You can refuse optional measurement and change your choice in Settings, under privacy settings. Required parental consent also applies to this optional choice. Withdrawing consent stops future optional measurement on that device; it does not automatically erase previously collected events. Contact us to request deletion and, where available, provide the random identifier so we can locate the relevant data without asking for unnecessary identity details. Choices may need to be made separately on different devices or after clearing browser storage.
Our apps are configured to avoid IP-based location enrichment in their Mixpanel events. Hosting and network providers still need to handle network information to deliver requests. Refusing analytics does not prevent that necessary technical processing.
Access is limited to what is necessary for the stated purpose. Providers include:
A provider's general privacy policy does not replace this policy or describe every setting in our business account. Providers acting on our instructions are subject to the applicable processing arrangements; some providers also act independently for their own platform or legal purposes.
Parents, schools, employers and other payers do not automatically gain access to private conversation content merely by paying. A legally valid request from a guardian, a safeguarding obligation or a lawful authority request is considered separately, taking account of the young person's rights and the applicable law. Do not treat KORYS as a service guaranteeing absolute secrecy.
We may disclose necessary information to professional advisers or authorities for a legal obligation, a substantiated safety issue or legal claims. A business transfer must respect applicable data-protection requirements; it is not permission to repurpose private conversations for unrelated advertising. Public use of a conversation, voice message, testimonial or podcast contribution requires a separate clear arrangement and the necessary permissions, including for minors. Ordinary coach calls are not consent to broadcast.
Providers and their subprocessors may process information outside your country, including in the United States and outside the EEA or UK. An EU analytics endpoint does not mean all processing stays in Europe.
Where required, transfers must use an applicable adequacy decision or contractual safeguards, such as the EU Standard Contractual Clauses and the applicable UK arrangements, with supplementary safeguards where necessary. You can contact us for information about the safeguards relevant to your data and a copy where available, with confidential information redacted. Accepting this policy is not blanket consent to an otherwise unlawful transfer.
We retain personal data only while it is needed for the stated purpose or a legal obligation. The criteria differ:
After deletion, residual copies may remain temporarily in providers' backups until their normal deletion cycle completes, or where retention is legally required. We do not promise immediate erasure from every backup. Request-specific information about retention is available at [email protected].
Where applicable, you may request access and a copy, correction, deletion, restriction, portability, or object to processing based on legitimate interests. You may object to direct marketing and withdraw consent at any time. Withdrawal does not make earlier lawful processing unlawful. Some information may still need to be kept for a legal obligation or legal claim.
Send requests to [email protected], including which app and information your request concerns. We may ask for proportionate information to locate the data and verify your identity or parental authority. Do not email passwords, full identity documents or payment card details without an agreed secure and necessary process. Where the GDPR applies, we normally respond within one month; a lawful extension of up to two further months may apply, and we will explain it.
You can use Settings for the privacy choices available in the app, or contact us if you cannot find them. An account deletion request and cancellation of a subscription are separate matters; you may request both together. Information held by WhatsApp or another independently operated platform may also require a request to that provider.
You may complain to the Dutch Autoriteit Persoonsgegevens or the competent authority where you live or work. In the UK, this is the Information Commissioner's Office. Applicable local rights remain available; this policy does not claim that every country has identical rules.
We use appropriate measures proportionate to the processing and restrict access to the relevant operational purpose. No internet service can guarantee absolute security. Only share information you are comfortable including in an AI interaction, and use a trusted adult or appropriate professional for sensitive situations.
If you visit a KORYS social-media page, the platform's privacy practices also apply. For our Facebook page, Meta processes interactions and Page Insights under its applicable platform arrangements; this is separate from optional measurement inside the KORYS apps. A link to another service does not mean the service is operated by KORYS.
We update this policy when the service or relevant processing changes and show the revision date above. Material changes requiring new permission must not be treated as accepted merely because this page was updated. Where required, we provide an appropriate notice before the change applies.
For privacy questions, rights requests or concerns about a young user's data, contact [email protected], or write to Intercept, Tapuitstraat 54C, 3083 WS Rotterdam, the Netherlands.