Privacy Policy

Last updated September 24, 2026

Kouzr Inc., a Delaware corporation ("Kouzr", "we", "us"), operates kouzr.com, including the Kouzr application at app.kouzr.com and the Kouzr app for iPhone and Android. The phone app is the same product as the web app: the same account, the same data, the same servers, and everything in this policy applies to it. This policy describes what we collect, why, and the choices you have. The short version: we collect what's needed to run your account and nothing more, we don't run ads, and we don't sell your data.

What we collect

• Account information. Your email address, display name, and, if you sign in with Google or Apple, the verified email and name those providers share. Passwords, when you use one, are stored only as salted hashes.
• Your phone number, if you give us one. Only when you choose to sign in by text or add a number to your account. It is used to send you a one-time sign-in code and for nothing else: no marketing texts, no reminders, no promotions. We store the number and the fact that it was verified. Your mobile number and any consent you gave to receive texts are never shared with third parties or affiliates for their own marketing purposes. Remove it any time in Settings, which deletes it.
• Your activity in the app. Saved filters, shortlists, listing reviews (likes and passes), and preferences, so they follow you between devices.
• What you write to your partner. If you link accounts with someone, the messages and photos you post in the per-home threads, and your ratings and notes from viewings. If you invite someone who has no account yet, we keep the email address you typed until they join, they decline, or you cancel the invite.
• Push notification tokens. If you turn notifications on, the phone's push service (Apple's on an iPhone, Google's on an Android phone) or your browser gives Kouzr a token that reaches that one device. We store the token with the device's browser identifier (its user agent) so you can see which devices are on in Settings. It is used to deliver the notifications you asked for and for nothing else, and it is deleted when you turn notifications off on that device, remove the device in Settings, the push service tells us the device is gone, or you delete your account.
• Payments. If you pay for something in Kouzr (a listing boost, a Pro subscription, a rental application fee, or rent), the payment runs on Stripe, our payment processor. Stripe collects your card or bank details on its own page and holds them; they never pass through Kouzr. What Stripe tells us is that a payment happened, its amount, the email address on it, and Stripe's reference numbers for it, which we keep as the record of the purchase. If you collect rent through Kouzr as a landlord, Stripe also runs the identity and bank verification that payouts legally require (your name, address, date of birth, tax identifier, bank account, and any documents Stripe asks for). Those go to Stripe and stay there: we receive only the account's reference number and whether it is cleared to be paid. Stripe's own privacy policy covers what it does with that information.
• Session data. A session cookie to keep you signed in, and standard server logs (IP address, request time, user agent) kept for security and debugging.
• Product analytics. Which screens you open and which features you use, so we can tell what is worth building and what nobody wants. It is measured on our own servers, records no free text you type and no device identifier, and is never linked to your activity on any other app or site. Kept for 120 days.
• Page analytics. On kouzr.com and in the app, signed in or not: which pages and screens are visited, the site that linked you here and any campaign tags on that link, how long a page was open and how far it was scrolled, and how fast it loaded. It is measured on our own server against a key that is a one-way hash of your address and browser, rotated every day, and a random visit number kept in the browser tab's (or the app's) session storage, which is gone when the tab or the app is closed. No cookie is used for it. It records that a visit signed in, but not which account. The one link to an account: when you create one, we keep a record of the visit you signed up in (the page you arrived on, the site that referred you, any campaign tags, and that visit's number), so we can tell which pages bring people to Kouzr. Kept for 180 days; daily totals are kept after that.
• Error reports. When the app or kouzr.com hits an error, it sends us a short report: the error message (with anything that looks like an email address, a long number, or a web address's query string removed), the name of the file and the line where it happened, and the screen it happened on. In the phone app the report also carries the version of the app and of its interface, and each time the app opens it records which versions it is running, so we can tell whether an update caused a problem. When you are signed in, those phone reports are linked to your account, so we can count how many people an update affected and a bad one can be withdrawn automatically. Error reports are kept with the page analytics above, under the same visit number, and for the same 180 days. They are used only to find and fix bugs, and no outside crash-reporting service is involved.
• Renting through Kouzr. If you use the rental features, the renter profile you fill in: when you want to move and for how long, how many people, vehicles and pets would live there, your employment (employer, job title, start date, and monthly income), your current and previous addresses with the rent, the landlord's name and contact details, and why you are leaving, the references you list and their contact details, and any notes. The profile is private until you apply for a home. When you apply, a copy of it as it stands that day goes to the landlord of that one home, with your first name, and the landlord keeps that copy even if you later change your profile. Messages you exchange with a landlord are kept like your other messages.

What we don't do

• We don't sell or rent your personal information to anyone.
• We don't run third-party advertising or ad trackers, and we use no third-party analytics service.
• We never see or store your card or bank details. When you pay, you enter them on Stripe's page, and Stripe keeps them.
• We don't send marketing text messages. The only SMS Kouzr ever sends is a sign-in code you asked for by entering your number.

The phone app

The Kouzr app for iPhone and Android is the web app in a native shell, so it collects nothing the web app does not. A few things happen on the phone itself and are worth spelling out:

• Update checks. When the app opens or comes back to the foreground, it asks api.kouzr.com whether a newer version of its interface is available. That request carries the version the app is running, the platform, and a random identifier the update library generates on the device. We read the version to answer, and store nothing from the request; it appears in the server logs described above like any other request.
• On-device AI. On phones with a built-in language model (Apple Intelligence on a recent iPhone, Gemini Nano on a recent Android phone), the app can turn a sentence you type or say into search filters, or describe a listing, using that model. It runs on the phone. Nothing you type or say for it is sent to Kouzr. On phones without a built-in model the feature is simply absent.
• Speech. Listening uses the phone's own speech recognizer and reading aloud uses its own voices, under Apple's or Google's terms for those services. Kouzr never receives the audio or a transcript of it.
• Location. The map can show where you are. If you allow it, your position is read on the device to place a dot on the map and centre it, is kept only in the app's memory for that session, and is never sent to us. The one exception is when you choose your current location as the starting point of a viewing day: those coordinates are saved with that day so we can plan the route, and they go when the day or your account is deleted.
• Maps. The street map's tiles, lettering, and icons are served from our own servers, on the web and in the app, so drawing a map sends nothing to a map vendor. Two optional map layers are the exception: when you switch on aerial photos or flood zones, those pictures come to your device straight from the U.S. Geological Survey (aerial photos) and FEMA (flood zones), which, as with any web request, see your IP address and the part of the map being shown.
• Listing photos. Many listing photos are loaded by your device directly from the image servers of the listing sites they come from (Redfin and Zillow). Those servers see your IP address and which photo was asked for, as with any web request; the app tells them nothing about you or which page you were on.
• Address lookup. When you type an address that has to be placed on the map (the start of a viewing day, or the address of a home you list), the device asks the U.S. Census Bureau's public geocoder for its coordinates. That request goes from your device to the Census Bureau and carries the address you typed and, as any web request does, your IP address. Nothing about your account goes with it.

Property data

The listings, ownership, sales, and foreclosure information shown in Kouzr comes from real-estate listing feeds and public records (such as the Clark County Assessor and Recorder). It describes properties, not our users, and is presented for research purposes as-is.

Cookies

kouzr.com uses a single first-party session cookie to keep you signed in to the app. The marketing and listing pages set no tracking cookies, and we don't use cross-site tracking cookies anywhere.

House-hunting with a partner

Linking accounts is strictly mutual: one person invites, the other accepts, and nothing is shared until they do. Once linked, your partner sees your saved homes and passes, your notes, your viewing plans and ratings, your saved search filters (never your mortgage or down-payment figures), the messages and photos you exchange in each home's thread, and a feed of this activity as it happens. Your name and email are visible to them, as theirs are to you. Someone who joins your household through another member sees your name but not your email. A message stays with the household it was written in: someone who links with you later sees only messages written after they linked, never what you wrote to an earlier partner. Either of you can unlink at any time in Settings: sharing stops immediately and the activity feed is deleted on both sides. Messages you wrote remain yours and are deleted with your account. If a partner's message is abusive, report it from the thread and a person will look at it.

Sharing

We share data only with the providers we need to run Kouzr, and only as much as each one needs: the servers and storage that host it, the email service that delivers our mail, the messaging carrier that delivers a sign-in code to your phone, Apple's and Google's push services that deliver a notification to your device, Stripe, which processes payments and verifies landlords as described above, and the services listed below. Beyond those, we share data if the law requires it. Mobile numbers and SMS consent are never shared with third parties or affiliates for marketing purposes.

• Cloudflare Turnstile. When you create an account, or ask for a sign-in code by text, a Cloudflare Turnstile check runs on the page to tell people from automated sign-ups. Cloudflare receives your IP address and technical details of your browser or device for it, under Cloudflare's own privacy policy.
• Address and place search. When you type into a search or form that suggests addresses or places (the map's search, the address of a home you list, a commute or a destination), what you have typed is sent from our server to Photon, a public address search run by Komoot on OpenStreetMap data. Only the text goes; nothing about you or your account goes with it.
• Photo screening. Photos you add to a listing may be checked by Amazon Web Services' image moderation service (Amazon Rekognition) for adult, violent, or hateful content before they are stored. Only the photo is sent for that check.
• Alerts to our team. When you request a tour, or when a message, comment, photo, or application is reported or held for review, a short notice reaches our team's phones through ntfy.sh, a push notification service, so someone can act on it quickly. For a tour request it carries your name (or your email address, if you have not given a name) and the home and time you asked for; for a report, the account numbers involved and the words reported.

Otherwise, data leaves your account only when you send it somewhere yourself: a partner you link with sees the activity described above; when you ask to view a home, request a tour, or write to an agent from their profile page, your message and your email address go to the person on the other end so they can answer you directly; and when you apply to rent a home, your application goes to that home's landlord as described above. There are no other recipients.

Deleting your account

You can delete your account yourself, in the web app or the phone app: open Settings, choose Delete my account, and confirm. If you have not signed in within the last few minutes, we first ask you to prove it is you (your password, a passkey, or a fresh code). It takes effect immediately and cannot be undone. A paid plan you bought through Kouzr is set to end when the period you have already paid for runs out, so you are not charged again. If you cannot sign in, email support@kouzr.com from the address on the account and we will delete it for you. Either way the same thing is erased.

What is deleted: your profile (name, email, password), your phone number, every sign-in method (Google, Apple, passkeys) and every open session, your saved searches and filters, likes and passes, and preferences, your viewing days with their ratings, notes, and photos, any home you listed and its photos, your partner link and any invite you sent, the messages and photos you posted in threads and the reactions on them, the household activity feed, your renter profile and rental applications, requests you sent to sellers and tour requests, reports you filed, your push notification tokens, and your product-analytics events. If you were a tenant on a lease kept in Kouzr, your membership in that lease is removed too.

What stays, and why: records of payments (boosts, subscriptions, application fees, rent, and a landlord's payout account reference) are kept, because a refund or a chargeback can arrive long after an account closes and has to be matched to the original charge. They carry your former account number, which is never reused, and Stripe's reference numbers; the name and email that went with them are gone with the profile. A landlord's own record of a lease stays with the landlord. If you owned an agency profile, the profile stays and becomes unclaimed, with your account removed from it. Referral clicks are kept with the account number blanked out. Three measurement records keep your former account number, because the periods they measure outlast some of the accounts in them: which homes you marked as interesting, asked a lender or a seller about, requested a tour of, saw, or reported buying through Kouzr; the record of the visit you signed up in (described under page analytics); and a log of what the data lookups made for you cost us. Page analytics and error reports are not removed early; they are deleted on their normal 180-day schedule, and the daily totals kept after that were never tied to you. Server logs age out on their normal schedule. Nightly backups made before the deletion still contain your data; they exist only to recover from an outage and are used for nothing else. Stripe keeps its own records under its own policy.

Retention

Your account data is kept while your account exists. A rental application that was declined or withdrawn keeps the renter profile, message and household names it carried for 90 days after that decision, and then they are erased. The record that you applied, when, and how it ended stays with the landlord. Product-analytics events are deleted after 120 days regardless, and page analytics and error reports after 180 days. Push tokens go when you turn notifications off. To request a copy of your data, email hello@kouzr.com.

Security

All traffic is encrypted in transit (HTTPS). Sign-in supports Google and Apple, passwords are hashed, and sessions can be revoked by signing out.

Changes

If this policy changes materially, we'll update the date above and note the change on this page. Questions? hello@kouzr.com.