Privacy policy

Karov: Shared Moments is operated by Tal Shukrun (Tor Digital). Contact tor.digitali@gmail.com. This policy covers the Karov iOS and Android apps, their widgets and the Karov service.

Your private space

Karov starts with a random device identity and access key. You may connect your email using a one-time code or sign-in link to restore access on another phone. Connecting an email associates the current device’s boards with that account. New boards start private. People you invite and approve can see and edit the selected board. Older shared-space invitation links grant access to that space and its memories to anyone holding the complete link. Keep invitation links private. Participants can save or export content; exported copies cannot be recalled.

Data we process

• Your random device identifier, optional display name, board membership and invitations; your email address if you connect an account, and temporary sign-in challenges.
• Drawings, handwriting, typed notes, checklist items, saved memories, changes used for synchronization and AI results. Private boards are synchronized to our server as well as saved on the device; private means access-restricted, not local-only or end-to-end encrypted.
• If you enable notifications, your APNs or FCM token, platform, notification preference and notification delivery information. Notification previews may include a participant’s display name.
• Short-lived drawing presence so participants can see live strokes. This expires after approximately 12 seconds on active boards.
• Content reports, the relevant page or AI result and the details you submit to support.
• Network and technical information needed to serve requests, prevent abuse, deliver updates and diagnose failures, such as IP addresses in hosting logs and app/runtime information. We do not request location, address book, advertising identifiers, microphone access or your photo library to draw.

AI is optional

Only when you confirm Send drawing to OpenAI do we send an image of the artwork to OpenAI for image generation. Typed captions and checklist text are excluded from the generated image input, but handwriting inside the drawing is part of the image. Avoid sensitive information and only use content you have permission to send. The original and generated image are kept with the board. OpenAI processes requests under its API data handling policies. AI can produce unexpected or inappropriate results; you can report a result in the app before using it.

Service providers

Resend delivers sign-in emails and processes your email address and email delivery information. Vercel hosts the API and website; Neon provides the database. Apple APNs and Google Firebase Cloud Messaging deliver optional notifications. Expo EAS Update delivers compatible app updates and receives technical installation/runtime information needed for delivery and diagnostics. OpenAI processes artwork only for the optional AI feature. These providers may process data in countries other than yours. Network connections use HTTPS. We do not sell your data, use advertising trackers or create advertising profiles.

Retention and deletion

Boards and their history remain until deleted. In Privacy & safety you can delete a board for everyone if you own it, leave another person’s board, or use Delete my Karov data. After signing in, Your account also provides Delete my account with an explicit confirmation. Deleting your Karov data removes the email account and all its connected device identities, along with your owned boards, memories, AI assets, memberships, invitations, notifications, display name, push token and your reports from the active service. Local board data, image caches and widget content are cleared. Contributions to boards owned by others remain part of their shared content; ask their owner or contact support if you need help removing specific content. Copies already exported by participants are outside our control.

Content reports and one-way records preventing deleted credentials from being reactivated are retained for up to 90 days. Limited provider backups, security logs and data that must be retained by law may remain under the providers’ retention schedules and are not used to restore a deleted active account. Removing the app alone does not request server deletion. See data deletion without the app.

Your choices

Use a nickname, keep boards private, decline invitations, close unused invitation links, block a participant, leave a shared board, delete boards and memories, disable notifications in the app or device settings, and decline AI processing. Blocking prevents sharing with that account and its connected devices (or the guest device identity); it cannot recall exports or prevent a person from creating a different device identity.

Audience and requests

Karov is intended for adults, including parents saving children’s drawings. It is not designed as an independent service for children. Adults should avoid uploading identifying or sensitive information about children. Contact support to request access, correction, deletion, or help with privacy rights that apply where you live. We may ask for proof that you control the affected device or board; never email an API key, password or invitation access key.