Legal

Privacy policy

Last updated: 1 October 2026

1. Who we are

Knoo is made by Ardo Solutions L.L.C-FZ (United Arab Emirates), the data controller for the Knoo app and for this website. For anything in this policy, write to knooteam@gmail.com.

2. This website

The website you are reading collects personal data in exactly one place: the waitlist form. If you submit it, we store your email address, which of our sites you signed up on, and when. We use it to send you launch news about Knoo and nothing else, and you can be removed at any time by writing to knooteam@gmail.com.

We also count page views, using Vercel Web Analytics. It is cookieless: it stores nothing on your device and cannot follow you to any other website. To tell one visit apart from another it derives a temporary hash from the request, which expires after 24 hours and is never reused across days or across sites, so it cannot recognise you when you come back tomorrow. It tells us that a page was viewed, roughly from where and on what kind of device — never who you are. There are no advertising tags on this site and no data about you is sold or shared with advertisers.

3. What the app collects

From you (the parent):your account email and password, a PIN for the parent zone (stored only as a cryptographic hash — we cannot read it), your subscription status, and the screen-time rules you set.

About your child:a first name or nickname, their age in years — never a date of birth — which we use as an age band (3–5, 6–8, 9–12 or 13–15) to pick what is suitable, chosen interests, and what they do in the app: conversations with Knoo, voice call transcripts, pictures they ask for, lessons and stories they finish, and stars they earn. Knooalso keeps a short list of things worth remembering about your child — a pet’s name, a favourite dinosaur, a sibling — at most ten lines of a few words each, written by the same AI that is answering and used to make later answers feel like they know your child. The parent zone shows you that list in full and lets you delete any line, or all of it, whenever you want.

Automatically:crash and error reports, and on Android only, anonymous usage measurement (screens viewed, features used, a purchase’s value). The iPhone app contains no third-party analytics at all, and its error reports carry no device details or identifiers. Advertising identifiers (IDFA, Android advertising ID) are disabled — on iOS the code that could read one is not even compiled into the app — and ad personalisation signals are switched off. What your child says or types is never part of any measurement. Neither app contains any advertising or ad-measurement kit.

4. AI processing

When your child talks or types to Knoo, that message is sent to Google (the Gemini API) to produce the answer, and through our own safety check, which classifies it before and after. Voice calls stream through our server to Google’s live voice model; our relay is built never to write what was said into its logs. A photo your child sends with a question is first checked for safety by OpenAI’s moderation service, under OpenAI’s API terms, before it is answered. We do not use your child’s conversations to train AI models, and we do not permit our providers to use them for advertising.

5. Where things live, and for how long

Chats and voice transcripts are stored on your device and kept for 30 days, which is also what the parent zone shows you. They are not copied to our servers: a message passes through to be answered and safety-checked, and nothing of what was said is written down there, with three exceptions. If our safety check flags a message, a short excerpt of it (at most 200 characters) is kept so that the parent zone can show it to you, as section 6 describes. And the short list of things Knooremembers about your child (section 3) is stored with their profile, so it survives between conversations; it holds at most ten lines and you can clear it from the parent zone. Thirdly, if you or your child tap “Report” on something Knoosaid, drew or wrote, we keep that one item (at most 500 characters of it, or the picture or story it refers to), the reason chosen and the date, so that a person on our team can review it. A report is deleted with your account. What our database does hold is your account, your children’s profiles and settings, the pictures and stories they make, and their lessons and stars. It runs, with authentication, on Supabase in the EU (Frankfurt). Account data is deleted when your account is; subscription records are kept as long as tax and accounting law requires.

6. Safety alerts

If a conversation is flagged as serious, the parent zone shows it, sorted by how serious it was. For urgent flags we also email you. That email contains the flagged excerpt of what your child said — we would rather you saw it than missed it — and is delivered by Resend, our email provider.

7. Who we share data with

We do not sell personal data. We share it only with the services that run the product:

• Supabase — database and sign-in (EU, Frankfurt)
• Google — Gemini AI answers, voice and pictures, on a paid API plan under which conversations are not used to train Google’s models; on Android only, Firebase for usage measurement, with advertising identifiers and every ad signal switched off, so Google may not use it for advertising
• OpenAI — safety check of photos sent with a question
• RevenueCat, Apple, Google Play — subscriptions and purchases
• Resend — the safety-alert and waitlist emails described above
• Sentry — crash and error reports (on iPhone, without device details)
• Railway and Vercel — hosting for our server and websites, and Vercel’s cookieless page-view counting on the websites

Each processes data only to provide its service to us, under its own privacy policy.

8. Children’s privacy

Knoo is designed for children, which is why the account belongs to the parent: you create it, you consent during setup, and everything your child does in the app is visible to you in the parent zone. Before every voice call the app tells your child, in their words, that Knoois an AI and that a grown-up can read the conversation. We collect the minimum we can (an age in years instead of a date of birth, a nickname instead of a full name) and none of it is used for advertising or sold. To exercise any right over your child’s data — to see it, correct it or delete it — use the parent zone or write to us.

9. Your rights

You can ask for a copy of your data, correct it, delete it, or object to how it is used, whatever country you are in — write to knooteam@gmail.com and we will act on it.Deleting your accountremoves your family’s data from our systems, minus what payment law requires us to keep.

10. Security

Everything travels over HTTPS/TLS. The database enforces row-level security, the parent PIN is stored as a salted scrypt hash, and the parent zone locks after repeated wrong attempts. No system is perfectly secure, but each layer here is built so that a failure in one does not open the rest.

11. Changes

If we change how data is handled, this page changes in the same release and the date above moves. For material changes affecting a child’s data we will also tell you in the app.

12. Contact

knooteam@gmail.com— a person reads it. This policy covers aiforkids.live and the Knoo apps for iOS and Android.