Privacy Policy

Introduction

Koru Voice Quests is an educational voice app for children ages 4 to 12, operated by Koruverse. Through interactive conversations where kids teach an alien about Earth, we help develop curious thinking and clear articulation. We respect your child's privacy, and we built Koru to collect as little as possible: your child's voice is never recorded or stored, and their conversations are never kept as transcripts.

Information We Collect

From you, the parent:

• Your email address, used for account access, parental consent, and important updates
• If you sign in with Google or Apple, we receive your name and email address from that account, used only to create and secure your account
• Your child's first name, age, and interests, entered by you and used to personalize their experience
• If you report something Koru said, the reason you choose and anything you type in the note, used only to review that conversation and improve Koru's safety

From your child's use of the app:

• Your child's voice, processed in real time so Koru can hear and reply. Audio is never recorded or stored, and conversations are never kept as transcripts.
• Short conversation summaries: the topic discussed, a brief summary, key facts your child shared, and the recap we prepare for you. These power Koru's memory of past chats and your parent recaps.
• Session details such as conversation length, time, and which activity was played

Technical data:

• Device type and operating system
• Crash reports and error data, so we can fix problems

What we never collect: precise location, contacts, photos or videos, voiceprints or any biometric identifiers, or advertising identifiers.

How We Use This Information

• Run your child's conversations with Koru and let Koru remember past chats
• Personalize learning based on your child's age and interests
• Prepare conversation recaps for you
• Keep the service safe, secure, and working reliably
• Communicate important updates to parents

We never sell your child's information, never use it for advertising, never use it to train AI models, and never make it public.

Who Processes This Information

Koru runs on a small set of service providers that process your family's information only on our behalf and only to run the app:

• LiveKit carries the live voice call between your child's device and Koru
• Cartesia turns your child's speech into text and Koru's replies into speech, in real time
• Google and Anthropic provide the AI that generates Koru's side of the conversation
• Supabase stores account data securely and handles sign-in
• Resend delivers our emails to parents
• Sentry collects crash and error reports
• GrowthBook decides which version of a feature the app shows
• Vercel and Railway host the software that runs Koru

Each provider processes this information solely to deliver its service to us. We do not share your child's information with advertising networks, data brokers, social media platforms, or any other party for their own purposes.

How Long We Keep Information

We never keep your child's information indefinitely. Our retention schedule:

• Your child's voice audio: never stored
• Conversation transcripts: never stored
• Internal conversation context used to run a session: deleted within 30 days
• Conversation summaries and parent recaps: deleted within 12 months of the conversation, or sooner if you ask
• Consent records: kept while your account is open, as the record of the permission Koru is running on. When you delete your account, your email address and every other identifying detail are stripped from that record, leaving only the date and the version of this notice you agreed to, and that remainder is deleted after 3 years
• Account details (your email, your child's first name, age, and interests): kept until you delete the account. Withdrawing consent stops all further collection immediately and pauses Koru, and you can delete everything at the same time or at any point afterwards
• Reports you send us about something Koru said: kept until you delete the account, so we have the safety record while your child is using Koru
• Security backups: deleted on a rolling basis within 7 days

Parental Consent

When you set up an account, we send a verification email to you that describes what Koru collects and how it is used. Your child's profile is not saved, and your child cannot start conversations, until you confirm. If you never confirm, the details you entered are deleted and we will not contact you again.

You can withdraw your consent at any time by emailing divij@koruverse.com. Withdrawing consent stops all further collection, and you can ask us to delete your child's information at the same time.

Your Rights as a Parent

You can:

• Review the information we have collected about your child, in Parent Settings inside the app
• Request deletion of your child's account and all associated data
• Withdraw consent for further data collection

Email divij@koruverse.com for any of these, or start a deletion request at koruverse.com/delete-account. We acknowledge requests within 48 hours and complete deletion within 30 days, including the summaries and recaps derived from your child's conversations. We will verify that you are the parent on the account before acting on a request.

Data Security

• All personal information is encrypted in transit and at rest
• Access to user data is strictly limited to essential personnel
• We use industry-standard security practices to protect your information
• We will notify you in the event of a data breach affecting your family's information

Children's Privacy (COPPA)

Koru Voice Quests is designed to comply with the U.S. Children's Online Privacy Protection Act (COPPA):

• We obtain verified parental consent before collecting personal information from children under 13
• You can consent to Koru collecting your child's information without consenting to any third-party sharing. Koru does not share your child's information with third parties for their own use, so there is nothing extra to opt out of.
• Parents can review and delete their child's information and withdraw consent at any time
• We collect only the minimum information necessary to provide the service
• Children cannot interact with other users. All conversations are with our AI character only, and nothing your child says is ever made public.
• Account and session identifiers are used only to keep your child signed in to their own account, keep the service secure, and run conversations. They are never used to build advertising profiles or to track your child across other apps or websites.

Changes to This Policy

We will notify you by email at least 30 days before making any material changes to this Privacy Policy. If a change materially expands how we collect or use your child's information, we will ask for your consent again before it applies to your child.

Change history: first published 13 July 2026; rewritten 24 July 2026 to describe our practices in more detail, name our service providers, and publish our retention schedule; updated 27 July 2026 to name three further service providers, describe what withdrawing consent does and how long consent records are kept, and cover the in-app way to report something Koru said.

Contact Us

Operator: Koruverse
Privacy questions, parent requests, and general support: divij@koruverse.com
Response time: within 48 hours