Privacy
For kokaa.app and the Kokaa app · last updated 9 November 2026
The short version. Kokaa is for children aged 3–8, so we collect as little as possible. A grown-up pays and creates the account; the child only watches, plays and collects stickers. We show no ads, use no advertising identifiers and run no third-party analytics.
What we collect
- Your email address — used to sign you in (with a 6-digit code) and to send receipts. Required.
- Your child's first name and age group (3–5 or 6–8) — optional; they personalise the greeting and the content level.
- What your child does inside Kokaa — the videos watched, the last page of a story, stickers and stars earned, and the phone models signed in (up to 3). This runs the app and the rewards.
- Payment information — the card payment itself is handled by Bank of Maldives on their own secure page; we never see or store card numbers. For bank transfers we store the photo of the slip you upload, the amount, and the date.
- Settings you choose — language, daily screen-time limit, downloads-on-Wi-Fi.
What we never collect
- No advertising identifiers, no third-party analytics, no tracking pixels, no ad networks.
- No location, contacts, photos, camera, microphone or files on the phone.
- No names or photos of your child beyond the optional first name above.
- No chat, comments or user-generated content.
Children's privacy
We treat everything in Kokaa as child-directed. We do not use children's data for advertising or profiling, and we do not sell or share it. The account is created and paid for by an adult. If you are a parent or guardian and want to see, correct or delete your child's information, email support@kokaa.app and we will act within 7 days.
Payments
Card payments go through Bank of Maldives' payment gateway; their privacy policy applies to the card data you type on their page. Bank-transfer slip photos are stored in private storage that only Kokaa's owner can open, are used only to check your payment, and are deleted after 24 months (the period our accountant needs).
Where your data lives
On Cloudflare's network (database and file storage), chosen because it is fast and close to the Maldives and because it gives us no third-party analytics. Data is encrypted in transit (HTTPS).
How long we keep it
- Account, settings and rewards: while the account exists.
- Payment records: kept in an anonymised form (amount and date only) after the account is deleted, because the law requires us to keep accounting records.
- Transfer slips: 24 months.
- Login codes: 10 minutes.
Deleting your account
Sign in and choose Delete my account on your account page. We delete your email, your child's name and age group, the rewards, saved progress and all logged-in phones immediately. Payment records stay in anonymised form as explained above. You can also email support@kokaa.app and we will delete it for you.
Your choices and rights
You can change the language, screen-time limit and downloads setting at any time; export a copy of your data or ask us to correct it by emailing us. You can withdraw consent and close the account at any time.
Maldives and international law
Kokaa is operated in the Republic of Maldives and follows Maldivian law, including the Personal Data Protection Act, together with the children's-privacy principles of COPPA (US) and the GDPR (EU) for users in those places.
Contact
Kokaa · Malé, Maldives · support@kokaa.app