Privacy Policy

This Privacy Policy applies to personal information we process in connection with the Service. By using KOROOK, you agree to the practices described here. If you do not agree, please do not use the Service.

KOROOK is a community discovery platform that helps people find Persian businesses, services, events, and local experiences.

This policy describes practices based on the Service as it currently operates. Some features may be labeled preview, beta, or coming soon; those labels indicate limited or evolving functionality.

We collect information you choose to provide when you create an account, sign in, manage a profile, create or edit business or event content, contact us, or otherwise interact with the Service.

Depending on how you use KOROOK, this may include a username, email address, password, optional profile details, business or event information, messages you send us, and content you upload.

On the public website, contact requests are handled through email links rather than an on-site contact form. If you email us, we receive the information you include in your message.

When you register for a KOROOK account, we collect account credentials and related information needed to authenticate you and maintain your account, including your username, email address, and password.

We may also process email verification status and authentication tokens needed to keep you signed in. On the website, session information may be stored in your browser's local storage under the key "korook_auth". In the mobile app, access and refresh tokens are stored using secure device storage, with a fallback to local app storage when secure storage is unavailable.

You are responsible for keeping your login information secure and for activity that occurs under your account, except where prohibited by law.

Your KOROOK account profile includes information associated with your account on our servers, such as your username, email address, and email verification status.

In the mobile app, you may also choose to add optional profile details such as a display name, bio, city, phone number, Instagram handle, or profile photo. As of the last update of this policy, many of these optional profile fields are stored on your device for display in the app and are not uploaded to our servers through a profile update API.

The mobile app also includes local privacy settings such as profile visibility and location visibility toggles. Those settings are stored on your device.

Business owners and authorized users may create or manage business listings in the mobile app. Information associated with a business may include the business name, description, category, city, state, phone number, address or map coordinates, and other listing details you provide.

When a business listing is synced to our servers, the current app sends fields such as title, city, state, description, contact phone information, category, latitude, and longitude. Additional business details you enter in the app—such as email, website, Instagram, business hours, menu items, logos, or updates—may be stored on your device even if they are not yet synced to our servers.

Business listing information intended for discovery may be displayed to other users so they can find and contact a business.

You may upload or attach images and other content in connection with your account, profile, business listings, or events.

Profile photos selected in the mobile app are currently stored on your device for display in the app and are not uploaded to our servers through a dedicated profile photo upload endpoint.

Business cover images and gallery images may be uploaded to our servers through the business listing image upload functionality so they can be displayed with a listing.

Business logos, event flyers, and other media you attach in the app may be stored locally on your device unless and until a server upload feature is used for that content.

You should only upload or share content you have the right to use.

KOROOK uses location-related information to help you explore businesses, events, and map-based content.

In the mobile app, if you grant location permission, the app may use your device's foreground location to center the map, show nearby listings, and derive a city or general area label through on-device reverse geocoding. The app may store your active location context on your device—such as coordinates, region label, map viewport, or search area—so the map and discovery experience can persist between sessions. Based on the current app implementation, this active location context is stored on your device and is not sent to our account API as part of routine profile requests.

Business and event listings may include addresses, map coordinates, or location descriptions that you or other users submit for display on the map.

The website does not request device GPS location for public browsing. Website visitors may interact with map-related preview content without granting location access to the website.

You can control location permissions through your device settings. Some map and nearby-discovery features may not work without location access.

KOROOK uses map and location-related third-party services to display maps, place listings, provide directions links, and support address lookup features.

The mobile app uses Google Maps map rendering on supported devices through the platform map SDK. When you open directions or place links, your device may open Google Maps, Apple Maps, or another maps app outside KOROOK.

Address autocomplete and geocoding in the mobile app may use OpenStreetMap Nominatim. Queries you enter for address lookup may be sent to that service to suggest or resolve locations.

These third-party services may process information according to their own privacy policies and terms. We do not control their data practices.

The mobile app lets signed-in users save favorite businesses, mark interest in events, and create business reviews in the current app experience.

As of the last update of this policy, favorites, interested-event selections, event snapshots, and business reviews are stored on your device and are not synced to our servers through dedicated favorites, saved-event, or review APIs.

Because this information is stored locally on your device, deleting the app or clearing app storage may remove it from your device even if your account remains active.

We and our service providers may automatically collect technical information when you use the Service, such as device type, operating system, app or browser version, language settings, IP address, and general diagnostic or security logs.

This information helps us operate, secure, troubleshoot, and improve the Service.

We may collect information about how you interact with the Service, such as pages viewed, features used, searches performed, listing views, and general performance or error data needed to operate the Service.

The public KOROOK website does not load third-party analytics scripts unless corresponding measurement IDs are configured at build time. When configured, the website may use Google Analytics 4 and/or Microsoft Clarity. If those IDs are not configured, those analytics scripts are not included on the website.

Based on the current mobile app codebase, the app does not integrate third-party analytics SDKs such as Google Analytics, Firebase Analytics, Amplitude, Mixpanel, or similar advertising or analytics SDKs.

We do not sell your personal information.

We and our service providers may use cookies, local storage, session storage, and similar technologies to operate the Service, remember preferences, maintain sessions, and understand website usage where analytics are enabled.

On the website, theme preference may be stored in local storage under the key "theme". Authentication session data may be stored in local storage under the key "korook_auth".

For more information, see our Cookie Policy at https://korook.com/cookies.

We use information we collect to provide, maintain, and improve the Service; create and manage accounts; display listings and community content; enable map and discovery features; communicate with you about verification, security, or support matters; respond to requests; protect users and the platform; enforce our terms; and comply with law.

• Provide account registration, login, password reset, email verification, and profile features
• Display businesses, events, and related discovery content on maps and in search experiences
• Enable business owners to create, edit, and upload listing content
• Store authentication sessions and remember website theme preferences
• Send service-related communications such as verification or security notices
• Detect, prevent, and address fraud, abuse, or technical issues
• Measure and improve website performance when optional analytics are enabled

We do not sell your personal information.

We may share information with service providers that help us operate and improve the Service, when required by law, to protect rights and safety, in connection with a business transaction such as a merger or acquisition, or with your direction or consent.

Public business listing information and other content you choose to make public may be visible to other users and may be indexed by search engines.

If you use device features that open phone, messaging, email, maps, or external websites, those actions are handled by your device or the third-party service you choose, not by KOROOK.

We use third-party service providers for functions such as hosting, infrastructure, email delivery, authentication, content delivery, map rendering, geocoding, and—on the website only when configured—analytics.

Service providers we use or integrate with may include:

• Korook API and hosting infrastructure used to operate accounts and listings
• Email delivery providers used to send verification, password reset, and service messages
• Google Maps platform services used for map rendering in the mobile app on supported devices
• OpenStreetMap Nominatim used for address lookup and geocoding in the mobile app
• Korook CDN used to deliver approved home and content assets
• Google Analytics 4 and Microsoft Clarity on the public website only when enabled through site configuration

Business listings may include publicly visible information such as business name, category, description, photos, hours, phone number, website, address, map location, and other details you submit for discovery.

Business owners and authorized users are responsible for the accuracy of the information they submit and for ensuring they have authority to publish it.

The Service may allow users to submit business listings, event information, reviews, photos, and other content.

Reviews created in the current mobile app are stored on your device unless and until a server review feature is introduced. Business and event content you submit for discovery may be displayed to other users and may be moderated or removed if it violates our policies or applicable law.

We retain information for as long as reasonably necessary to provide the Service, comply with legal obligations, resolve disputes, enforce agreements, and maintain security.

Retention periods may vary depending on the type of information, whether it is stored on our servers or only on your device, and how it is used.

Information stored locally on your device remains there until you delete it, remove the app, clear app storage, or otherwise reset your device, unless the app removes it sooner.

We use reasonable administrative, technical, and organizational measures designed to protect information.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on where you live, you may have rights to access, correct, delete, or restrict certain processing of your personal information.

You may update some account information through your profile or account settings where available. You may also contact us to request assistance with privacy-related requests.

You can control website theme storage and website authentication data through your browser settings. You can control mobile app permissions, local profile fields, and on-device saved favorites, reviews, and location context through the app and your device settings, subject to the limits described in this policy.

You may delete your KOROOK account from the website profile page or from account settings in the mobile app, where available.

When you delete your account, we process a server-side account deletion request through our account deletion API. This is intended to delete or deactivate your account and associated server-side account data we control, subject to legal retention requirements and information that must remain for security, fraud prevention, dispute resolution, or compliance with law.

Deleting your account clears website authentication data stored in your browser. In the mobile app, deleting your account clears authentication tokens and certain saved favorites on the device, but other information stored locally on your device—such as profile details, business drafts, reviews, interested events, or location context—may remain on your device until you remove the app or clear app storage.

Public business listings or other content associated with your account may be handled according to our data retention practices and applicable law.

To request account deletion assistance or help with other privacy requests, contact admin@korook.com.

If you are a California resident, you may have additional rights under applicable California privacy laws, including the right to know, delete, and correct personal information, and the right to opt out of certain sharing that may be considered a "sale" or "sharing" under California law.

KOROOK does not sell personal information as that term is commonly understood.

California residents may contact admin@korook.com to submit a privacy request. We may need to verify your identity before fulfilling certain requests.

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

If you believe a child has provided personal information to us, please contact admin@korook.com so we can take appropriate action.

KOROOK may be accessed from different countries. If you use the Service from outside the United States, your information may be processed in the United States or other locations where we or our service providers operate.

By using the Service, you understand that your information may be transferred to jurisdictions that may have different data protection laws than your home country.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, provide additional notice.

Your continued use of the Service after an update means you accept the revised policy.

If you have questions about this Privacy Policy or our privacy practices, contact:

KOROOK LLC Email: admin@korook.com Website: https://korook.com