← Back to Home

Privacy Policy

Last updated: February 10, 2026

1. What We Collect

KoKo is designed to collect as little data as possible. Here is what we handle:

• Child Profile (Name and Age): This information is stored locally on your device. Your child's first name and age are also sent to OpenRouter, our third-party AI service, alongside each message to personalize responses and provide age-appropriate answers.
• Conversation Content: What your child says or types to KoKo is processed by our AI service to generate a response. Conversations are not stored on our servers. A local history is kept on your device so you can review it in the Parent Dashboard.
• Voice Data: When your child uses voice mode, audio is processed for speech recognition to convert speech to text. Voice recordings are not retained after processing is complete.
• Basic App Data: If you opt in through the Parent Dashboard, we collect anonymous usage statistics such as session length and feature usage. This helps us improve KoKo. No personal information is included in these statistics.

2. How We Use It

We use the information described above for the following purposes:

• To provide age-appropriate, personalized responses to your child's questions.
• To convert your child's speech into text so KoKo can understand and respond.
• To let you review your child's conversations and flagged topics in the Parent Dashboard.
• To improve the quality and safety of KoKo's responses over time (using anonymous, aggregated data only if you opt in).

3. AI Processing and Service Providers

KoKo uses OpenRouter, a third-party AI service, to generate responses to your child's questions and to process voice input.

When your child interacts with KoKo:

• Your child's first name, age, and the current message are sent to OpenRouter via a secure proxy we control. This allows KoKo to personalize responses and provide age-appropriate answers.
• No conversation history, device information, or other identifiers are included in the request.
• All requests are routed through a secure proxy we control.
• No conversation history is retained on our servers or OpenRouter's side beyond the single request/response cycle.
• Voice audio is sent to a speech recognition service to convert it to text. The audio is processed and then discarded.
• We carefully select service providers that meet our privacy and security standards, and we have agreements in place to protect your child's data.

4. Data Retention

Because children's data is stored on your device, you are in full control of how long it is kept. Conversation history, child profiles, and settings remain on your device until you choose to delete them.

Data sent to our AI and speech recognition services for processing is handled in real time and is not retained after the response is delivered.

If you opt in to anonymous usage statistics, aggregated data is retained for up to 12 months to help us improve KoKo, and then it is deleted.

5. Parental Controls and Consent

KoKo is designed for children ages 5 to 10, and we take parental involvement seriously:

• A parent or guardian must set up the app and create the child's profile.
• The Parent Dashboard is protected by a PIN that only you control.
• You can review all conversations, flagged topics, and safety alerts from the dashboard.
• You can enable or disable voice mode, set daily time limits, and control whether anonymous usage data is shared.
• You can delete your child's profile and all associated data at any time from within the app.

6. Sharing

We do not sell your child's personal information. We do not rent it. We do not share it with advertisers or data brokers.

The only third party that processes data is OpenRouter, our AI service provider, along with speech recognition services. They do so solely to deliver KoKo's functionality as described in Section 3 above.

7. Security

We take the security of your family's data seriously:

• All data transmitted between the app and our services is encrypted using industry-standard TLS encryption.
• The Parent Dashboard is protected by a PIN to prevent children from accessing parent-only features.
• Since personal data is stored locally on your device, it benefits from your device's built-in security features such as passcodes, biometrics, and encryption.
• We regularly review our security practices and update them as needed.

8. Your Choices

As a parent, you have the following choices:

• Delete Data: You can delete your child's profile and all conversation history from the app at any time.
• Opt Out of Analytics: You can disable anonymous usage statistics from the Parent Dashboard.
• Control Features: You can enable or disable voice mode and set daily time limits.
• Uninstall: If you uninstall KoKo, all locally stored data is removed from your device.

9. Contact

If you have any questions about this Privacy Policy or how we handle your child's data, please reach out to us:

• Privacy inquiries: privacy@heykoko.app
• General support: support@heykoko.app

We are happy to answer any questions and will respond as quickly as we can.