Privacy

Privacy policy

Last updated: October 17, 2026 · This is a translation provided for convenience; if there is any difference, the Spanish version prevails.

01Data controller

The controller of your data is soykoru (KORU Live brand), an individual based in Colombia. Contact: [email protected], which is also the privacy contact for Brazil (encarregado), the European Union and the United Kingdom. This policy follows Colombia's Law 1581 of 2012 and its decrees and, for people who live there, the EU General Data Protection Regulation and the UK GDPR, Brazil's LGPD and Mexico's personal data protection law. It applies to the soykoru.stream store and to the KORU Live program.

02What data I use

• When you buy: your email; what you bought, when and for how much; the payment reference; the discount code if you used one; and your IP address, to stop abuse.
• If you activate a free-day code: your email, the code and the date are recorded as a $0 purchase. Also, so that each person and each connection uses only one code, I keep two fingerprints encrypted with a secret key (hashes): one of your email and another of your network (it comes from your IP address, which I don't keep). Those fingerprints don't carry your name.
• If you buy with an affiliate code: your purchase is linked to that code to give you its offer and pay a commission to whoever gave it to you. That person only sees numbers, never your name or email.
• If you're an affiliate (by invitation only): your email, your code, when you accepted the affiliate program terms, your commissions and payments, how you want to get paid (stored encrypted) and an encrypted fingerprint of the networks you use your panel from, to review purchases made from your own connection.
• When you sign in with Google (in the shop or in KORU Live): your email, your name and your Google profile picture.
• If you bought a Roblox map separately (before they came with Pro): the username and ID of the Roblox account that will use it.
• Your KORU Live license: the plan, its dates, the program version and a fingerprint of your computer's Windows identifier: an irreversible code (a hash) from which the identifier cannot be recovered. With that fingerprint the license works on only one machine. It doesn't include your name or your files. If you use the free plan, KORU sends that same fingerprint to give you the free plan.
• Support: what you tell me when you write to me and, if you send them, the program's logs.
• If you leave a review: the stars, the text and the name you choose are published on soykoru.stream, with the date and the “Verified Pro” seal if you paid for KORU Live. Your email is stored with the review so there's only one per account and you can change or delete it, but it's never shown. When you publish or change it, I get a Telegram notice, with a copy in my private notices channel on Discord, with the stars, the name and the text, without your email. Those notices stay in my private Telegram chat and my private Discord channel until I delete them, and on my notices server for up to 30 days. If I hid a review of yours for spam, insults or personal data and you delete it, I keep only your email with that mark for one year, so it isn't published again on its own.
• What I don't collect: I don't ask for your real name, address, phone number or ID; I don't collect sensitive data (health, beliefs, origin or biometric data); and your audience's data doesn't leave your computer, except what the features in section 04 that you turn on need.

03What happens on your computer

KORU Live connects to your TikTok LIVE with your username. What comes in from the LIVE (your audience's comments, gifts, likes, follows, names, photos and roles) is used on your computer for your rules, alerts and games. Your rules, your settings and the program's logs also stay there. Since version 1.23, from each LIVE only the program's warnings and errors are kept: KORU doesn't save the chat or your audience's comments, and whatever earlier versions saved is deleted automatically when you open it. None of it is uploaded to my servers on its own. Apart from checking the license, the error reports, the usage statistics and the features in section 04, KORU doesn't send anything else.

If you uninstall KORU Live and delete its data folder, all of that disappears from your computer.

What you show or read out loud from your audience during the LIVE is up to you. Do it respectfully and following TikTok's rules.

Error reports

They're on by default and you can turn them off in KORU Live's “TikTok y salud” (TikTok and health) window, under the option to send error reports automatically. When something fails, KORU sends me what failed and where (for example “couldn't connect to the LIVE”), the program version and your Windows version. Before sending, it removes your Windows username, emails, @usernames, IP addresses and keys from the text. It does not send your TikTok username (it masks it even if it appears inside an error message), your audience's names or messages, or your files. The report includes your license to stop abuse: it's checked and not stored. To know how many computers have the same problem, only an irreversible code (a hash) made from your computer, or on the free plan from the general part of your network (not your full IP address), is kept; it's deleted after 14 days. Reports reach me as alerts through Telegram and Discord, I keep them for 90 days at most and, to review them, I use artificial intelligence tools from Anthropic.

Usage statistics

Starting with the KORU Live version that includes them, before sending anything KORU tells you and lets you turn them off right there; in the European Union, the rest of the European Economic Area, the United Kingdom and Switzerland they come off and it asks you whether to turn them on. After that you can change it any time in the settings, under “Send usage statistics”. Every hour and when it closes, KORU sends me a summary of your day in numbers: how long it was open and live, with which games, how many gifts (and their value in coins), likes, comments, follows, shares and commands reached your LIVEs, how many of your rules' actions arrived or failed, how many rules you have active, which features you used (voices, overlays, Spotify…), the program's reconnections, drops and crashes, how long it took to open and how much memory it used, plus the version, your plan (free or Pro), whether your Windows is 10 or 11 and the program's language. It does not send your TikTok username, nor your audience's names, photos or messages, nor texts, files or keys. Your computer is stored as a code (a hash) without your name or email, made with a secret key that was generated at random and that nobody sees, not even me: it can't be matched with your license or with the error reports. Even so, it's pseudonymous data, not anonymous, and I look after it as personal data. The country comes from the connection and your IP address isn't stored; to stop abuse, a code of your network is kept for 2 days. I use this data only as totals, to know how KORU is working and decide what to improve; I don't sell it or use it for advertising. Each computer's numbers are deleted after 90 days; the daily totals and the first and last time each computer was seen, after 400 days. I get a daily summary on Telegram, with a copy on Discord, and to read the totals I rely on artificial intelligence from Anthropic.

04What leaves your computer, and only if you use that feature

• TikTok connection: to join your LIVE, KORU uses the TikTokLive library, which requests the connection signature from the Eulerstream service. That service receives your username or your TikTok room number.
• Overlays (alerts, tops, queues, goals): what they show, such as names, photos, comments and gifts, travels in real time through a Cloudflare server to your overlay in OBS or TikTok Studio. It isn't stored, except your overlays' settings and their latest state, so an overlay you open in OBS shows what's current. In the kiss queue, the gift and like tops, the MVP (the biggest donation), the gift streak, the poll, the music queue and the challenge, that state includes the names and photos they show. It is replaced with every change, with no history, and is deleted automatically after 30 days without updates. You can empty the kiss queue sooner whenever you want.
• Emote list: to show your emotes, KORU sends your TikTok username to KORU's servers, which ask TikTok for the list of your emotes and keep it for up to 7 days so they don't have to ask again. Nothing about your audience is sent.
• Shared gift gallery: KORU contributes data about TikTok gifts (number, name, price, image and region) to KORU's servers. It doesn't send who sent them. It goes with your license to verify it, and I keep a fingerprint of it (a hash) to count contributions.
• Roblox maps: what the map needs to show, such as the username and photo of whoever sends a gift or types a command (and their comment when they join), goes through KORU's servers to your game, without being stored.
• Voices: the text that is read out loud, such as comments and names, is sent to the chosen voice service. On the Pro plan, TikTok voices go through KORU's voice server, which keeps the audio for up to 7 days so it doesn't have to generate it again; on the free plan they go through an external public service. Microsoft voices go to Microsoft and Google voices to Google. ElevenLabs voices go straight from your computer to ElevenLabs, with your own key.
• Webhooks: if you set one up in your rules, KORU sends whatever you choose (for example, the username, photo and comment of whoever takes part) to the address you enter. You choose and control that address.
• Artificial intelligence (Groq, Google Gemini, OpenAI or Anthropic): only if you connect it with your own key. The text it's asked, for example a question from someone in your audience, is sent to that provider. More in section 08.
• Spotify: only if you connect your account. The searches and songs your audience requests are used.
• Updates and mods: KORU downloads updates from GitHub and mods from their sites (GitHub, Thunderstore, Modrinth or Steam). Those sites see your IP address, as with any download.

05What I use them for

• Delivering what you bought (license, maps in KORU Live and files) and keeping it working.
• Making the KORU Live features you turn on work.
• Giving you support and letting you know about bugs, compensations or important changes.
• Finding and fixing the program's bugs.
• Knowing, as totals, how KORU Live is used and how it works for everyone, to decide what to improve.
• Keep the affiliate program's accounts and pay each affiliate what they earned.
• Preventing fraud, false chargebacks, shared licenses and abuse.
• Meeting legal and accounting obligations.

I don't sell your data, I don't rent it out and I don't use it for third-party advertising.

06Legal bases

In the European Union, the United Kingdom, Brazil and other countries, the law asks me to state the basis on which I use each piece of data:

• To give you what you bought or asked for (contract): your account, your license, your purchases, support and the features you turn on.
• Based on a legitimate interest, without overriding your rights: stopping fraud and abuse, security, and error reports to fix the program. You can object, and you can turn the reports off yourself.
• With your consent: usage statistics in the European Union, the United Kingdom and Switzerland (in other countries, based on legitimate interest, and you can turn them off whenever you want) and your review. You can withdraw it whenever you want; that doesn't change what was already done before.
• Legal obligation: accounting and tax records.

In Colombia, by using the store or KORU Live you give me your authorization to process your data as this policy describes. You can revoke it whenever you want (section 09).

07Who they're shared with

Only with the services needed for this to work, each with its own policies:

• Cloudflare: servers and database for the store, licenses, overlays, the emote list, Pro voices, the gift gallery and the Roblox maps.
• Paddle (Paddle.com, reseller of KORU Live): charges and invoices the app purchases and applies your country's taxes.
• PayPal and Wompi: process your payments.
• Google: sign-in.
• GitHub: program downloads and updates.
• Telegram, Discord and Anthropic: internal notices and their analysis (error reports and usage totals, without personal data, and new reviews, without your email).
• And, only if you use those features: Eulerstream and TikTok (LIVE connection and emote list), the voice services (Microsoft, Google, ElevenLabs and the TikTok voice service), the AI provider you choose, Spotify and the mod sites.

Several of these services are outside Colombia, mainly in the United States, the European Union and the United Kingdom. I only pass your data to them because they are needed to give you the service you asked for. The main providers (Cloudflare, Google, Paddle, Anthropic and GitHub) protect it with safeguards recognized by law, such as the EU Standard Contractual Clauses or the EU-U.S. Data Privacy Framework. If you want to know which one each uses, write to me.

08Artificial intelligence

• In KORU Live: AI features, such as the chat AI, use the provider you connect with your own key. What it's asked goes to that provider and is governed by its policy. The AI only replies to your audience when someone types the !ia command: the command itself makes it clear that an artificial intelligence is answering. Fortunes, tarot and the other commands use texts written in advance, not AI. AI can make mistakes: you decide what is shown on your LIVE.
• To maintain KORU: I use Anthropic (Claude) to read error reports and usage totals, which contain no personal data, and review notifications. Under its business service, Anthropic does not train its models on what I send it.
• I don't use your data to train artificial intelligence, and KORU doesn't make automated decisions that have legal effects on you.

09Your rights

Whenever you want and at no cost, you can:

• Download your data and delete your account yourself, in My account, under “Your data”. Deleting it cancels auto-renewal and erases everything linked to your email, except the payments the law requires me to keep and the free-day code fingerprints (so no one gets another code by deleting their account and signing back in).
• Ask me to see, correct, update or delete your data, object to a use or ask me to restrict it, and revoke your authorization or consent. Write to me at [email protected] from the email of your purchase or account.

I answer questions within 10 business days at most and complaints (correcting or deleting) within 15 business days at most. If you live in the European Union or the United Kingdom, within one month at most; in Brazil, within 15 days at most.

If you're not satisfied, you can go to the data protection authority: in Colombia, the Superintendence of Industry and Commerce; in Brazil, the ANPD; in Mexico, the Secretariat of Anti-Corruption and Good Governance; in the European Union, the one in your country (in Spain, the AEPD); in the United Kingdom, the ICO; and in other countries, the relevant one.

10How long I keep them

For as long as you have an active license, access or purchases, and afterwards for as long as the law requires (for example, for accounting records). Error reports, 90 days at most. Usage statistics, 90 days for each computer and 400 days for the totals. Pro voice audio, up to 7 days. The last state of the overlays, up to 30 days without updates. Reviews, until you delete them from My account or ask me to delete them (the mark of a hidden and deleted review, one year). Free-day code fingerprints, even if you delete your account, for as long as I run those promotions; when I stop running them, I delete them. Affiliate program data, for as long as you're an affiliate: if you delete your account, your code is closed and your payout details are deleted, and commissions and payments are kept as payment records. If you delete your account, everything linked to your email is erased, except payment and refund records, which are kept for as long as accounting and tax law requires. What isn't linked to your email (voice audio, the emote list, overlay state and nameless fingerprints) is deleted on its own within its time limits. Everything else I delete when it's no longer needed or when you ask me to. What's on your computer is under your control.

11Cookies

I only use the cookies needed for sign-in, the shop and the language to work (a cookie remembers whether you view the site in Spanish, English or Portuguese). I don't use advertising cookies or third-party tracking cookies. In the shop, your browser stores your recent purchases so it can show you their status.

12Security

I use encrypted connections (HTTPS), restricted access and good practices to protect your data. KORU Live updates are signed, and the program won't install any update that doesn't carry my signature. No system is perfect: if something happens that affects your data, I'll let you know.

13Age

KORU Live and its store are only for people 18 and older, the age TikTok requires to go LIVE. They are not aimed at minors: if I learn that a minor gave me their data, I delete it. Roblox has its own age rules for its games.

14Changes

If I change this policy, I update the date above. If the change is important, I'll let you know before applying it, on the website, in KORU Live or by email.