Privacy Policy

Last updated: 2026-08-19

This document is available in English only. The English text is the version that applies.

DRAFT — not lawyer-reviewed. This is an honest, plain-language placeholder describing what we actually store and do today. It is not final legal advice. It will be reviewed by a lawyer before we treat it as complete, and we'll ask you to re-consent if anything material changes.

Who we are

KokoWorlds (operated by Caffinix) is the data controller for the information described below. Contact: TODO — add data protection / privacy contact email.

What we store

Account data: email, name (optional), password (hashed, never stored in plain text) or Google account link, locale, and account status.
Photos you upload and the cartoon-style character artwork generated from them.
Generated assets: storybooks, chapters, and pages you create, including text and images.
Consent records: which version of these terms/policies you accepted and when, so we can prove consent and ask you to re-consent if the policy changes.

Who processes your data

Cloud AI services we use to analyze photos and generate character artwork and story text.
An email delivery provider, used to send account verification and password-reset emails.
A payment provider, used to process purchases (payment details are handled by the provider, not stored by us).

Photos of children

If a photo shows a child, we require the uploader to confirm they are that child's parent/legal guardian, or have the guardian's explicit permission, before the photo is processed. We only process photos for the purpose of generating storybook characters and never use them for any other purpose without asking again.

How long we keep data

We keep your data for as long as your account exists. If you delete your account, we delete your photos, generated artwork, books, and consent records, and remove your uploaded files from storage. Financial records (payments) are retained separately as required by law, disconnected from your deleted profile.

Your rights

You can access the personal data associated with your account by contacting us, and you can delete your account and associated data at any time from the Account page. You have the right to request a copy of your data, correction of inaccurate data, and deletion, in line with applicable data protection law (e.g. GDPR).

Changes to this policy

If we make a material change to how we handle photos or personal data, we will ask you to re-accept this policy before continuing to use the service.