Skip to content
Get startedSign in

Safety & privacy

Safety & privacy

A parental control app asks for a lot of trust. Here is exactly what Koby handles, why, for how long, and what it never touches, in plain words.

Last updated: November 14, 2026EnglishTürkçe

Our promise

What Koby will never do

Trust is the product. These are design decisions, not settings, and they apply on every plan.

  • Read messagesNo access to texts, chats, emails or what your child types.
  • Track in secretNo hidden mode. Koby is always visible on your child's device, with who can see what.
  • Use the camera or microphoneNever switched on remotely, never recorded.
  • Record the screenNo screenshots, no screen recording.
  • Sell data or show adsNo advertising SDKs, no ad identifiers, no data sales.
  • Score or diagnose your childNo risk scores, no guesses about mood or health.

  1. 1Our principles

    • Visible, never hidden. Koby is always shown on your child's device, together with which grown-ups can see what.
    • Only what a rule needs. We collect the minimum needed to apply your family's rules and show whether they work.
    • Honest about limits. If a control can't be checked on a device, Koby says “can't verify” instead of pretending.
    • No ads, ever. No advertising SDKs, no ad identifiers, no data sales, no profiling of children.

  2. 2What Koby never collects

    Messages, chats and emails · what your child types · photos and files · camera or microphone · screen recordings or screenshots · browsing history · contacts · a location history.

    Koby also never gives your child a risk score and never guesses about mood or health. These are design decisions and apply on every plan.

  3. 3Data by type

    Retention periods marked proposed are our design targets and will be confirmed in the final privacy policy before launch.

    • Parent account: name, email, sign-in method, language

      Why
      To run your account and contact you about it
      Kept for
      Until you delete the account

    • Child profile: first name or nickname, age

      Why
      To show the right profile and age-appropriate starting rules. No email or password for children
      Kept for
      Until you delete the profile

    • Devices: device name, type, system version, notification token

      Why
      To pair devices, deliver rules and send notifications
      Kept for
      Until the device is removed

    • Rules and their change history (who changed what, when)

      Why
      To apply rules and show which version each device has
      Kept for
      Rules: until deleted. History: 90 days (proposed)

    • Extra-time requests: minutes, optional short reason, decision

      Why
      So your child can ask and you can answer
      Kept for
      Shown for 7 days, then deleted (proposed)

    • Protection status: which controls are active, partial or off, setup self-test

      Why
      To show whether protection really works
      Kept for
      Latest status; history 30 days (proposed)

    • Screen time totals per day, per app or category, where the system shares them

      Why
      To show time used and time left
      Kept for
      30 days (proposed). On some devices this stays on the device

    • Last known location: coordinates, accuracy, time

      Why
      So you can see where the device last reported from
      Kept for
      Only the latest one; deleted after 7 days. No history

    • Website contact messages

      Why
      To answer you
      Kept for
      Up to 24 months

  4. 4Who can see what

    • Parents linked to a child can see that child's rules, requests, screen time totals, protection status and last known location.
    • Your child sees their own rules, time left, requests, and the list of grown-ups who can see their data.
    • Koby staff access data only to provide support you ask for or to keep the service secure.
    • Service providers (hosting, email, notifications) process data only on our instructions. The full list will be published with the final privacy policy.

  5. 5Export and deletion

    • Remove a device at any time: it stops receiving rules and its data is deleted.
    • Delete a child profile, or your whole account, from Settings. Your family's data is deleted from our live systems.
    • Export your family's data from the web panel, or ask us for a copy.
    • Backups are encrypted and cleared on a fixed cycle; the period will be stated in the final privacy policy.

  6. 6COPPA, GDPR and children's privacy

    In the United States, the Children's Online Privacy Protection Act (COPPA) requires verifiable parental consent before collecting personal information from children under 13. In the EU, the GDPR (Article 8) sets an age of digital consent between 13 and 16 depending on the country, with parental consent below it.

    Koby is built for parents to set up and manage: a parent creates the child's profile and gives consent before a child's device is connected, and parents can review, export and delete their child's data at any time.

    Honest status: Koby has not launched yet. Our privacy policy and terms are drafts and will be reviewed by legal counsel. We do not hold, and do not claim, any third-party privacy certification.

  7. 7Security basics

    • Encrypted connections (TLS) between the apps, the web panel and our servers.
    • Each parent has their own sign-in; sessions can be signed out and access removed.
    • Every request is checked on the server, so one family can never see another family's data.
    • Found a security issue? Please write to .

  8. 8Questions

    Write to . The draft privacy policy has the formal details.