Privacy Policy - Koke Lab

At Koke Lab, protecting your family's privacy — especially your children's — is our top priority. This Privacy Policy explains what information we collect, how we use it, and the rights you have over your data.

1. What Data We Collect

We collect the minimum data necessary to provide our educational service:

Parent account information: Email address, name, and password (hashed)
Child profile information: First name and age (no email or last name required for children)
Learning progress data: Completed lessons, scores, XP earned, badges, streaks, and time spent per session
Technical data: Device type, browser version, and session cookies for authentication

2. How We Use Your Data

We use your data solely to:

Provide and maintain the Koke Lab educational service
Track learning progress and display it on the parent dashboard
Personalize the learning experience based on age and progress
Award XP, badges, and streak rewards accurately
Improve our educational content and platform quality
Send important account and service notifications

3. Children's Privacy (COPPA Compliance)

We take children's privacy extremely seriously and comply with the Children's Online Privacy Protection Act (COPPA):

Parental consent required: Only parents or legal guardians can create accounts and child profiles
Minimal data collection: We collect only first name and age for child profiles — no email, photos, or social information
No advertising to children:We do not show ads to children or target advertising based on children's data
No data sharing:Children's data is never shared with third parties for marketing purposes
Parental control:Parents can review, modify, or delete their children's data at any time

4. Data Storage & Security

We take data security seriously:

All data is stored on encrypted, secure servers
Passwords are securely hashed and never stored in plain text
All data transmission uses HTTPS/TLS encryption
We conduct regular security audits and vulnerability assessments
Access to personal data is strictly limited to authorized personnel

5. Third Parties

We do not sell, rent, or trade your personal data to third parties. We only share data with essential service providers necessary to operate the platform:

Cloud hosting providers (for data storage and delivery)
Payment processors (for subscription billing — we do not store credit card numbers)
Email service providers (for account notifications only)

All third-party providers are contractually obligated to protect your data and use it only for the purposes we specify.

6. Data Retention

We retain your data as follows:

Active accounts: Data is kept for as long as your account remains active
Account deletion: Upon request, we delete all personal data within 30 days
Inactive accounts: Accounts inactive for more than 24 months may be flagged for deletion with advance notice

7. Your Rights as a Parent

As a parent or guardian, you have the right to:

Access: View all data we hold about you and your children
Modify: Update or correct any personal information
Delete:Request deletion of your children's data or your entire account
Export: Request a copy of your data in a portable format
Withdraw consent: Revoke permission for data processing at any time

To exercise any of these rights, contact us at privacy@kokelab.com.

8. Cookies

We use only essential session cookies required for the service to function:

Authentication cookies: To keep you logged in during your session
Session cookies: To maintain your preferences and progress during a visit

We do not use tracking cookies, advertising cookies, or any third-party analytics cookies that track your children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes via email. The "Last updated" date at the top of this page indicates when the policy was last revised.

10. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at privacy@kokelab.com.