Welcome to Ekoko. Ekoko is a family connection platform designed for parents and children aged 5–12. This Privacy Policy explains how Ekoko collects, uses, stores, protects, and processes personal information when you use the Ekoko application and related services.
Ekoko is committed to protecting the privacy and safety of all users, especially children. If you have any questions about this policy please contact Ekoko at hello@ekoko.app before using the app.
The data controller responsible for personal data processed through the Ekoko Services is:
Ekoko L.L.C-FZFor privacy-related questions please contact Ekoko at hello@ekoko.app.
Ekoko is designed for parents or legal guardians and children aged 5–12 using the app under verified parental supervision. Children cannot independently create public accounts.
Children join Ekoko only by redeeming a 6-digit pairing PIN created by their verified parent. There is no public sign-up path for children. If you believe a child under 5 is using Ekoko please contact Ekoko immediately at hello@ekoko.app.
Ekoko is designed with consideration for the Children's Online Privacy Protection Act (COPPA, United States), the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR), the UK Age Appropriate Design Code, and related child privacy and data protection frameworks.
Before a child profile can be created, parents must complete a verifiable parental consent process using the COPPA "email-plus" method:
Parents may withdraw consent at any time by contacting Ekoko at hello@ekoko.app.
Ekoko collects personal information necessary to operate the Services and protect child users.
Ekoko does not collect a child's email address, password, surname, date of birth, photo, precise location, or advertising identifier.
Ekoko may collect and store short child voice recordings when a child sends a voice reply to a parent message. These recordings are used only for private family messaging inside Ekoko, are visible only to the parent/guardian and the child account, and are not used for advertising, profiling, AI training, or voice cloning. Parents may request access to or deletion of these recordings at any time.
Ekoko does not collect:
No advertising SDKs are integrated in the app.
Ekoko uses personal information to:
Safeguarding feature: If a child records five consecutive negative moods (Sad or Poorly), the app automatically sends an alert notification to the parent. This is a child safety feature. No data is shared with third parties as a result of this alert. Parents are solely responsible for any follow-up action.
Where applicable under UK GDPR and EU GDPR, Ekoko processes data on the following lawful bases:
For children's data, the legal basis is verifiable parental consent under COPPA (US) and Article 8 UK GDPR / EU GDPR.
Parents must complete a verifiable parental consent process before activating child profiles. Parents may review, update, or request deletion of child data at any time.
To exercise any of these rights, parents may contact Ekoko at hello@ekoko.app. Ekoko aims to respond within 5 business days and will fulfil deletion requests within 24 hours of confirmation.
Ekoko uses carefully selected subprocessors to operate the Services. All subprocessors process data solely on Ekoko's behalf and are not permitted to use it for their own purposes.
Current subprocessors:
No data is sold to third parties. No advertising SDKs are used.
Primary operational data is stored in EU infrastructure (Google Cloud Europe multi-region for the database, and europe-west1 for file storage). Server-side processing runs in europe-west2 (London, United Kingdom).
Google Authentication, Firebase Cloud Messaging and Crashlytics metadata follow Google's global infrastructure under their UK International Data Transfer Agreements and EU Standard Contractual Clauses. Microsoft Clarity operates under Microsoft's Data Processing Agreement. Postmark operates under its Data Processing Addendum aligned with UK GDPR and EU GDPR transfer mechanisms.
Ekoko retains personal information only for as long as necessary to operate the Services or comply with legal obligations.
Retention periods:
Ekoko uses industry-standard security measures including:
Ekoko uses a small set of analytics and diagnostics tools to improve stability and user experience. No advertising SDKs are used.
On first launch, parents are presented with a consent screen. If the parent declines, both Firebase Analytics and Microsoft Clarity remain off and only Crashlytics runs (for crash reporting required to maintain app stability).
Ekoko does not sell personal data and does not use user data for advertising or independent AI or machine learning model training.
No AI-generated content is stored in the app. All messages and challenges are delivered from human-authored static templates. No AI language models are integrated in version 1.0.
Parents and guardians may request access, correction, deletion, restriction, or portability of personal information where applicable under law.
To exercise any of these rights, please contact Ekoko at hello@ekoko.app with the subject line Privacy Request. Ekoko will respond within 30 days.
Parents and guardians also have the right to lodge a complaint with the supervisory authority in their country. In the United Kingdom this is the Information Commissioner's Office (ICO) at ico.org.uk.
As Ekoko evolves, certain features may change or expand. This Privacy Policy will be updated before any material changes affecting personal data take effect. The "Effective Date" at the top of this document indicates when this policy most recently took effect.
Where possible, Ekoko will also notify parents by email of any material changes.
For questions regarding this Privacy Policy or privacy-related requests, please contact:
Ekoko L.L.C-FZEkoko aims to respond to all privacy enquiries within 5 business days.