Privacy Policy

The short version

Komora has no account and no sign-in, no analytics and no ads, and there is no server run by the developer. Everything you save is kept on your device and - if iCloud is on - synced only to your own private iCloud. One optional feature uses an outside service: AI recognition, which you turn on yourself, sends the photo you added and the text read from it to a Google AI model so it can write a name and description. Nothing is sent before you agree, and you can turn it off at any time.

Who is responsible for your data

The data controller for Komora is Maksym Melnychuk, the app’s independent developer.

You can reach the developer at support@maxfromzero.com.

What data exists, and where it lives

Everything you create in Komora is stored on your device. The data involved is:

• Your catalog - the items you add, their photos, names, descriptions, and the details you enter yourself (place, quantity, price, expiry date, link), plus the collections you sort them into.
• Recognized text - text and barcodes read from your photos. This reading happens on your device and is used so you can find an item by any word.
• Settings and counters - your preferences and a record of how many AI recognitions you have used, which the free and paid limits rely on.
• Widget and sharing data - a small summary (collection names and thumbnails) shared between the app, its widgets and its Share extension through a container on your device.

If iCloud is on for Komora, this data also syncs to your own private iCloud database through Apple’s CloudKit (container iCloud.com.maxfromzero.komora). That is your iCloud, tied to your Apple Account - the developer has no access to it.

AI recognition - the only time your content is sent to a third party

AI recognition is optional and off until you agree to it in the app. While it is on, adding an item (or asking to recognize it again) sends the following to a Google Gemini model, which returns a name and a short description:

• The photo you added - a reduced-size copy of the item’s main photo. If enough text was already read from the photo on your device, only that text is sent and the photo is not.
• The text read from the photo on your device.
• The language you want the result in.

The request goes through Google’s Firebase AI Logic service to Google Cloud (Gemini Enterprise Agent Platform, formerly Vertex AI), where Google processes it on the developer’s behalf under its cloud data processing terms. From version 1.0.2 of Komora the processing takes place in Google’s European Union multi-region; earlier versions may be processed in any Google Cloud region. Google does not use this content to train its models, and Komora’s developer does not store, log or see it - the answer comes straight back to your device. Each request also carries a Firebase App Check token, based on Apple’s App Attest, which proves it comes from a genuine copy of Komora; it contains no personal data. As with any internet connection, Google can see technical details such as your IP address. See Google Cloud’s Privacy Notice.

The legal basis is your consent. You can withdraw it at any time by turning off automatic recognition in Komora’s Settings; after that, nothing is sent to the AI service unless you yourself ask Komora to recognize a particular item. Komora’s “What is sent” screen in Settings shows the same information inside the app.

Other network connections

• iCloud sync - between your devices and your own iCloud, handled by Apple.
• Link previews - when you save a link, your device contacts that website to fetch its title and preview image, as a browser would. The website can see the technical details of the request (such as your IP address).
• App Store - purchases and subscription status are handled by Apple.
• Other apps - the Settings screen loads the list of the developer’s other apps from Apple’s App Store. The request carries only your App Store country.

Device features Komora uses

• Camera - only when you choose to photograph an item.
• Photos - items are added with Apple’s system photo picker, so Komora only receives the photos you pick, never your whole library.
• Text recognition - performed on your device by Apple’s Vision framework.
• Spotlight, Siri, Shortcuts and Visual Intelligence - Komora makes your items searchable through these system features on your device.
• Widgets and the Share extension - they read and write a small container on your device.

Exports and sharing

The “Copy for AI” text, shared items and catalog exports are created on your device only when you ask, and go only where you send them - the clipboard or the iOS share sheet. If you paste or share them into another app or an AI chat, that service’s own privacy policy applies.

Purchases and subscriptions

Komora Premium is sold through Apple’s in-app purchase system (StoreKit) under Apple’s Privacy Policy. Apple is the seller and handles all payment information; the developer never sees your card or Apple Account details and receives only Apple’s aggregated, anonymous sales reports.

No tracking, no ads, no analytics

Komora shows no advertising, includes no analytics or tracking SDK, and does not track you across other apps or websites. It does not ask for App Tracking Transparency permission, because it has nothing to track. Your data is never sold. Performance and crash diagnostics that iOS provides to the app stay on your device. If you have chosen in iOS Settings to share analytics with app developers, Apple may provide anonymous crash reports; these contain none of your catalog.

Your rights and your control

Under the GDPR and similar laws you have the rights to access, rectification, erasure, restriction of and objection to processing, data portability, and to withdraw consent. Because your data lives on your device and in your own iCloud - not with the developer - you can exercise them directly, at any time:

• Access and portability - export your whole catalog from Settings at any time.
• Rectification - edit or correct any item directly in the app.
• Erasure - delete any item; it stays in “Recently Deleted” for 30 days and is then removed for good. “Delete All Data” in Settings removes everything from the device and from your iCloud at once.
• Withdrawing consent - turn off automatic recognition in Settings.

The developer holds none of your data, so there is nothing to hand over or delete on your behalf. If you still have a question or a formal data-protection request, email support@maxfromzero.com and you will get a reply. You also have the right to lodge a complaint with your local data protection authority.

Children

Komora is not directed at children, and the developer collects no personal data from anyone - including children.

Changes to this policy

This policy may be updated as the app changes. Any material change is reflected here, with a new “Last updated” date at the top.

Contact

Questions about this policy or your data? Email support@maxfromzero.com. Data controller: Maksym Melnychuk.