Kocoon - Privacy Policy

Last updated: March 18, 2026

1. Information We Collect

1.1 Information Provided by Parents/Guardians

• Child profile names — First names or nicknames only, used to personalize the experience. We do not collect full names.
• Age range — Used to filter age-appropriate content. We do not collect exact birth dates.
• Parental control settings — Time limits, content filters, and calm mode preferences configured by parents.

1.2 Information Collected Automatically

• Watch history — Stored locally on the device only. Not transmitted to our servers.
• Usage statistics — Daily/weekly watch time stored locally to enforce parental time limits.
• Search queries — Used to fetch YouTube results. Not stored on our servers.

1.3 Information We Do NOT Collect

• Email addresses of children
• Phone numbers
• Precise location data
• Photos or videos of children (camera is used only for optional profile pictures, stored locally)
• Contact lists
• Persistent identifiers for behavioral advertising

2. How We Use Information

• Content delivery — We use the YouTube Data API to search for and display kid-safe video content.
• Parental controls — Settings are stored locally to enforce time limits, content filters, and break reminders.
• Calm Mode & Binaural Beats — Preferences stored locally. Audio features require headphones and do not collect any data.
• App improvement — Anonymous crash reports may be collected via Firebase Crashlytics to fix bugs. No personal information is included.

3. Third-Party Services

3.1 YouTube Data API

Kocoon uses the YouTube Data API v3 to search for and display videos. Your use of YouTube content within this app is subject to Google's Privacy Policy. We do not control how Google processes data from YouTube API requests.

3.2 Firebase (Google)

We use Firebase for:

• Authentication — Parent/guardian sign-in only (Google Sign-In). Children do not have accounts.
• Analytics — Configured in COPPA-compliant mode. We do not collect advertising identifiers from children. Analytics data is anonymized and aggregated.
• Crashlytics — Anonymous crash reports to help us fix bugs.

Firebase's COPPA-compliant data practices are described in Firebase Privacy Documentation.

3.3 No Advertising

Kocoon does not display advertisements. We do not use advertising SDKs or share data with advertisers.

4. Data Storage & Security

• All user data (profiles, settings, watch history, playlists) is stored locally on the device using encrypted local storage.
• Parental control passwords are hashed using SHA-256 before storage.
• We do not maintain external databases of children's personal information.
• API communications use HTTPS encryption.

5. Parental Rights (COPPA Compliance)

As a parent or guardian, you have the right to:

• Review your child's information — All data is visible in the app's parental settings.
• Delete your child's information — Delete child profiles from the app, or uninstall the app to remove all data.
• Refuse further collection — You can disable analytics in the app settings.
• Control usage — Set time limits, content filters, break reminders, and password-protect settings.

6. Data Retention

All data is stored locally on your device. When you:

• Delete a child profile — All associated data (history, preferences) is immediately removed.
• Uninstall the app — All local data is permanently deleted.
• Sign out — Local authentication tokens are cleared.

7. International Users

Kocoon complies with:

• COPPA (United States) — Children's Online Privacy Protection Act
• GDPR-K (European Union) — General Data Protection Regulation, Article 8 (children's consent)
• AADC (United Kingdom) — Age Appropriate Design Code

8. Changes to This Policy

We may update this privacy policy from time to time. We will notify users of any material changes by updating the "Last updated" date and, where possible, through an in-app notification.

9. Contact Us

If you have questions about this privacy policy or our data practices, or if you wish to exercise your parental rights, please contact us at:

Email: hello@lawboticlabs.com
Subject line: "Kocoon Privacy Inquiry"