Privacy policy

Last updated October 13, 2026

Kureo is a personal app operated by Jonathan Cady. It brings together relevant opportunities, tasks, reminders, calendars and a personal collection. Access is currently limited to invited accounts.

Information Kureo uses

• Account sign-in information and identifiers used by Firebase Authentication.
• Interests, followed sources, tasks, reminders, collection records, product links and images you provide or save.
• With your authorization, Gmail message identifiers, sender information, subjects, snippets and readable message text needed to discover relevant opportunities. Kureo uses read-only Gmail access; it does not send, modify or delete email.
• With your authorization, calendar lists and event details to display your plans. Calendar write access is used to add or update events you choose in the connected primary account.
• Device notification tokens, delivery status and operational records needed to deliver notifications and maintain the service.

How information is used

Kureo uses this information to match opportunities to your interests, prepare digests and summaries, show your calendar, store your collection and tasks, and deliver requested notifications and reminders. It does not sell your personal information, use connected-account data for advertising, or use Google user data to train general-purpose AI models.

AI processing and service providers

When AI assessment is enabled, selected cleaned email excerpts, opportunity text and interest names are sent to Cloudflare Workers AI for relevance assessment and short summaries. Excerpts can contain personal information present in the message. Email attachments are not sent for AI assessment. This processing provides Kureo's user-facing features.

AWS hosts the backend, stored records, credentials and this website. Google Firebase provides authentication, push notifications and pilot app distribution. Google provides the connected Gmail and Calendar APIs. Cloudflare provides AI inference. Information is shared with these providers only as needed to operate the applicable features; processing may occur outside your country.

Kureo's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements, and the applicable Google Workspace API user-data policy.

Storage and retention

Connected-account credentials and cached email-derived and calendar records are stored to support synchronization. Tasks, collection records and configuration remain until removed or deletion is requested. Digest snapshots and assessment caches have retention settings, but records carried into newer processing caches may remain longer. Removing a suggestion does not necessarily remove every related cache record. Backups and operational logs may remain until their retention periods end.

Your choices and deletion

You can manage interests and sources and remove supported records in the app. You can revoke Google access through your Google Account connections; revoking access stops future authorized access but does not automatically erase information already stored by Kureo. Contact jonrcady@gmail.com to request removal of connected-account credentials or deletion of your stored app data. There is currently no automatic account-deletion flow.

Website and security

This public website has no advertising, analytics scripts, sign-in forms or tracking cookies. Hosting providers process network requests and related technical information to serve and secure it. The app uses authenticated access and HTTPS for hosted connections. Public product images may load from their original providers, which receive the image request. No system can guarantee absolute security.

Contact and changes

Questions, support and deletion requests: jonrcady@gmail.com. Material changes will be reflected in this policy and its update date. Additional consent will be requested when required for new connected-data uses.