Kuur

Privacy policy

Updated 5 October 2026. The French version prevails.

Controller

Benoît Morin, sole trader (French micro-entrepreneur), trading as Kuur, 200 rue de la Croix Nivert, 75015 Paris, France. Contact: privacy@kuur.app.

What we collect, and why

  • Account: email, user id, sign-up date, invite link used. Basis: performance of the contract.
  • Your films: songs, lyrics, ideas, Suno style, generated films, history. Basis: contract.
  • Credits and payments: purchases, plan, invoices (handled by our reseller Creem; we never see your card). Basis: contract and accounting duties.
  • Affiliate programme: who invited you, your commissions, your payout details (PayPal email or IBAN). Basis: contract.
  • Security: a hashed fingerprint of your IP address (never the address itself) to limit abuse, kept 48 hours; the Cloudflare Turnstile bot check at sign-in. Basis: legitimate interest.
  • Anonymous page statistics, without cookies. Basis: legitimate interest.

What we do not do

No ads, no selling of data, no tracking cookies, no training of AI models on your songs or lyrics. Anthropic's model is used through its API: this data is not used to train its models.

Processors

  • Supabase: accounts, database and file storage (European Union (Frankfurt region))
  • Cloudflare (R2): storage of the songs, films and pictures, with its CDN (European Union (EU jurisdiction))
  • Vercel: hosting of the website (servers in Frankfurt) and cookieless visit statistics (United States company, edge network worldwide)
  • Modal Labs: computing the films (audio analysis, rendering checks) (United States)
  • Anthropic: the AI model that writes the films (API: data not used for training) (United States)
  • Creem (Armitage Labs OÜ): payments, invoices and VAT, as reseller (Estonia, European Union)
  • Resend: transactional emails (sign-in links, film ready) (United States)
  • Cloudflare (Turnstile): bot protection on the sign-in page (United States)
  • Transfers outside the EU rely on the European Commission's standard contractual clauses or the Data Privacy Framework.

How long we keep data

  • Account, films and songs: as long as your account exists, or until you delete them. Accounts inactive for 3 years are deleted after a reminder email.
  • Accounting records: 10 years (legal duty).
  • Technical logs: 12 months at most.

Your rights

You can access, correct, delete or export your data, object to or restrict its processing, by writing to privacy@kuur.app. We answer within a month. You can also complain to the French data authority, the CNIL (cnil.fr), or to the authority of your country.