Privacy Policy

1. Who we are

KoraScape is a symbolic reflection tool operated by Korascape Private Ltd, a company incorporated in India (CIN U86900KA2026PTC218799). We are not a clinical, diagnostic, or psychometric service. All interpretations are symbolic and exploratory in nature.

Korascape processes personal data in accordance with applicable Indian data protection laws, including the Digital Personal Data Protection Act, 2023 (DPDP Act).

2. What we collect

When you use KoraScape, we may collect:

• Your image — the drawing, sketch, or inkblot you upload. It is stored securely and never shared publicly.
• Your written responses — your perception text and any optional reflection answers (why you saw what you did, attention focus, felt atmosphere, etc.).
• Optional demographics — age range, gender, country, and occupation role, if you choose to provide them.
• Optional email address — only if you choose to save your reading. We will not send marketing without your explicit consent.
• Technical data — a randomly generated anonymous ID stored in your browser (localStorage), form timing, and submission source. No login is required.

3. How we use your data

• To generate your reading — we use third-party AI infrastructure providers, including Anthropic, solely to generate symbolic interpretations. Data shared with these providers is processed only for this purpose and is not used to train their models.
• For research (with your consent) — only if you explicitly provide consent, your de-identified submission (image, responses, demographics) may be used to develop KoraScape's symbolic encoding research. Consent is entirely optional and your reading is generated regardless.
• To improve the service — de-identified and aggregated patterns where reasonably possible (e.g. common motifs, thematic distributions) may inform product development. No individual is identified in this analysis.

4. Storage and security

Data is stored on Supabase infrastructure (hosted on AWS, Mumbai region). Images are stored in a private bucket with signed URLs. All data in transit is encrypted via TLS.

We do not sell, rent, or trade your personal data to advertisers or third parties.

5. Automated decision-making

KoraScape does not make automated decisions that produce legal, clinical, educational, employment, or similarly significant effects. All interpretations are symbolic, exploratory, and non-binding.

6. Minors

If you are under 18, you should use KoraScape only with the involvement or consent of a parent, guardian, or institution where applicable. We do not knowingly collect personal data from children under 13 without verified parental consent.

7. Data retention

Submissions with research consent are retained for research purposes. If you did not consent to research use, your data is retained for 90 days to allow for support queries and then deleted. You may request deletion at any time.

8. Your rights

You have the right to:

• Access a copy of the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Withdraw research consent at any time

To exercise any of these rights, please contact us at privacy@korascape.com.

9. Cookies and tracking

KoraScape does not use advertising cookies or third-party tracking pixels. We use browser localStorage to store an anonymous session ID for longitudinal research purposes only. No cross-site tracking occurs.

10. Changes to this policy

We may update this policy as the service evolves. Material changes will be noted with an updated date at the top of this page.

11. Contact

For privacy-related enquiries, write to us at privacy@korascape.com or visit our Contact page.