Privacy policy

1. Who we are

Kito is operated by Kobas Labs LLC. Kito consists of a parent experience for account management, uploads and review, and a child experience available only after a parent pairs the device.

2. Information we collect

Parent account information

We collect the information needed to create and secure a parent account, such as an email address, authentication data, subscription status and customer-support correspondence.

Child profile information

A parent may add a child’s first name or nickname, age-appropriate settings, selected learning buddy and progress. A child does not need an email address and cannot create an account independently.

Uploaded school material

Parents may upload PDFs and images. We process these files to extract text, create grounded questions and provide source references for review. Original files are scheduled for deletion after the stated retention period in the app; generated learning content may remain until the parent deletes it.

Learning and technical data

We record answers, first-attempt results, corrections, mastered concepts, streaks, rewards and basic device or error information needed to operate and protect the service.

3. Why we use information

• Provide, secure and personalise Kito for the family.
• Transform parent-provided material into questions and practice rounds.
• Show trustworthy learning progress to the authorised parent.
• Manage subscriptions, page allowances, support and fraud prevention.
• Meet legal and safety obligations.

4. Children’s privacy and parental control

Kito is designed so the adult creates the family account, provides any child information and pairs the child device. We do not knowingly allow a child to register independently. See our Child privacy notice for more detail.

5. Service providers

We use specialised providers to host data, process documents, generate questions, deliver app services and manage purchases. They may process only the data required for their role under contractual safeguards. Our current categories and providers are listed on the Subprocessors page.

6. Retention

We keep personal data only for as long as needed to provide the service, meet legal obligations and resolve disputes. The app identifies the intended deletion period for original uploaded files. Parents can delete individual learning material or request deletion of the family account and associated data.

7. Security

We use access controls, encrypted connections and restricted service credentials. No system can guarantee absolute security; we continuously review the protections appropriate to the data Kito handles.

8. Your choices and rights

Depending on your location, you may have rights to access, correct, export, object to processing or delete personal data. Kito Parent includes export and account-deletion controls. Instructions are also available on our account deletion page.

9. International processing

Our providers may process data in countries other than your own. Where required, we use recognised transfer mechanisms and contractual safeguards.

10. Advertising and cookies

Kito is not supported by advertising and does not build child advertising profiles. This website uses only technology necessary to deliver the site unless we clearly ask for consent before introducing optional analytics or marketing cookies.

11. Changes and contact

We may update this policy as Kito develops. Material changes will be communicated through the service. A verified privacy contact address will be published here before public launch.