Privacy Policy

We collect information you provide and information generated through your use of the Service.

Account and profile information. When you register or sign in, we may collect your email address, username or display name, password (stored in hashed form where applicable), and information from supported authentication providers if you choose to link an account. We may require email verification before full access.

Conversation and workspace data. This includes chat messages you send and receive, session titles, projects, file attachments you upload, and feedback you submit on responses.

Subscription and payment information. If you subscribe to a paid plan, we process billing metadata such as plan selection, billing interval, amount in MVR, and transaction references. Full payment card numbers, CVV, and related Cardholder Data are collected only on the Bank of Maldives Connect / MPGS hosted payment pages. We do not store full PANs on our systems; where tokenization is used we may store a token reference, last four digits, brand, and expiry metadata needed to recognize a saved card.

Usage information. We collect information about how you use the Service, such as feature usage, subscription status, usage limits, and approximate timestamps of activity.

Technical information. We may automatically collect device and log information such as browser type, general location derived from IP address, pages visited, and error or performance logs needed to operate and secure the Service.

We use personal information to:

• Provide, maintain, and improve Kuraa AI;
• Authenticate you and manage your account;
• Process subscriptions, payments, and renewals;
• Enforce usage limits and plan entitlements;
• Generate and deliver AI-assisted responses to your requests;
• Monitor for abuse, fraud, and security incidents;
• Respond to support requests and communicate about the Service; and
• Comply with legal obligations and protect our rights.

We may use aggregated or de-identified information that cannot reasonably identify you for analytics and service improvement.

We do not sell your personal information. We share information only as described below:

• Service providers — including authentication providers, payment gateway providers, and infrastructure and hosting providers that process data on our behalf under contractual safeguards;
• Legal and safety — when required by law, court order, or government request, or when we believe disclosure is necessary to protect rights, safety, or security; and
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to appropriate confidentiality commitments.

Providers may process data according to their own privacy policies. We require them to handle information only as needed to perform services for Kuraa AI.

We use cookies and similar technologies (such as local storage) to keep you signed in, remember preferences (for example theme settings), and support security on sign-up and sign-in. You can control cookies through your browser settings; disabling certain cookies may limit your ability to use parts of the Service.

We retain personal information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Conversation data may be retained according to your use of the app (for example, until you delete sessions or your account, subject to technical backups and legal holds).

When information is no longer required, we take reasonable steps to delete or anonymize it.

We implement reasonable technical and organizational measures designed to protect personal information, including HTTPS/TLS for data in transit to our applications, access controls for systems that hold account and subscription data, and monitoring for abuse. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

You are responsible for safeguarding your account credentials and for not sharing highly sensitive personal data in chats unless you accept the associated risk.

Card payments for Kuraa AI are processed by Bank of Maldives via hosted checkout (MPGS). During checkout you are redirected to a secure payment page operated by the bank/gateway. We do not embed a card-entry form on our own pages for primary checkout, and we do not receive or store full Cardholder Data (PAN/CVV) on our application servers.

To reduce unauthorized access to Cardholder information, we rely on: (a) TLS encryption for our site and APIs; (b) bank-hosted transmission of card details; (c) tokenized references where cards are saved for renewals; and (d) signed server-to-server webhooks and authenticated confirmation flows to update subscription status. Access to payment metadata in our systems is limited to operational need.

If you believe there has been unauthorized access related to a payment, contact us immediately using the details in Section 12 and also contact your card issuer if appropriate.

What you are buying. A paid checkout for Kuraa AI is for a digital subscription to the selected plan and billing period, including plan credits and access to paid features after payment is confirmed. No physical goods are shipped. Charges are in Maldivian Rufiyaa (MVR). The merchant outlet country is the Republic of Maldives.

Delivery. Access typically starts soon after successful payment confirmation (digital delivery only). There is no product exchange for digital subscriptions.

Refunds & cancellation. Paid fees are generally non-refundable once payment is confirmed and access or credits are granted, except where required by law or we agree in writing. You may cancel renewals from your account or by contacting support. Full refund, cancellation, and delivery terms are set out in our Terms & Conditions.

Customs. This is a digital service; no import/export customs duties apply to the subscription itself.

Retain your records. Please retain a copy of your transaction confirmation and a copy of this Privacy Policy and our Terms & Conditions for your records.

Depending on applicable law, you may have the right to:

• Access personal information we hold about you;
• Request correction of inaccurate information;
• Request deletion of your account or certain data;
• Object to or restrict certain processing; and
• Withdraw consent where processing is based on consent.

You can manage some information directly in the app (for example, by deleting chats or updating account settings). For other requests, contact us using the details below. We may need to verify your identity before responding.

Kuraa AI is not directed to children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will take appropriate steps to delete it.

We may update this Privacy Policy from time to time. We will post the revised version on the Platform with an updated “Last updated” date. Material changes may be communicated through the Service or by other reasonable means where required by law.

See also our Terms & Conditions.

For privacy questions, data requests, Cardholder concerns, or customer service:

Kuraa AI
Operated by Loopcraft
G. Makhmaage, 9th Floor
Faashanaa Kilege Magu
Malé 20141, Republic of Maldives
Email: [email protected]
Phone: +960 3009001