Privacy

English original — this is the version that applies (ދިވެހި)

1.What we collect

• Your email address — used to sign you in (with a 6-digit code) and to send receipts. Required.
• Your child's first name and age group (3–5 or 6–8) — optional; they personalise the greeting and the content level.
• What your child does inside Kokaa — the videos watched, the last page of a story, stickers and stars earned, and the phone models signed in (up to 3). This runs the app and the rewards.
• Payment information — the card payment itself is handled by Bank of Maldives on their own secure page; we never see or store card numbers. For bank transfers we store the photo of the slip you upload, the amount, and the date.
• Settings you choose — language, daily screen-time limit, downloads-on-Wi-Fi.

2.What we never collect

• No advertising identifiers, no third-party analytics, no tracking pixels, no ad networks.
• No location, contacts, photos, camera, microphone or files on the phone.
• No names or photos of your child beyond the optional first name above.
• No chat, comments or user-generated content.

3.Children's privacy

We treat everything in Kokaa as child-directed. We do not use children's data for advertising or profiling, and we do not sell or share it. The account is created and paid for by an adult. If you are a parent or guardian and want to see, correct or delete your child's information, email [email protected] and we will act within 7 days.

4.This website

kokaa.app is a plain static website. It sets no cookies, uses no analytics or tracking scripts, and loads every font, image and script from our own domain. It stores only one preference in your browser (the language you picked) and your sign-in token if you sign in. It contacts our payment API only when you press a payment button.

5.Payments

Card payments go through Bank of Maldives' payment gateway; their privacy policy applies to the card data you type on their page. Bank-transfer slip photos are stored in private storage that only Kokaa's owner can open, are used only to check your payment, and are deleted after 24 months (the period our accountant needs).

6.Where your data lives

On Cloudflare's network (database and file storage), chosen because it is fast and close to the Maldives and because it gives us no third-party analytics. Data is encrypted in transit (HTTPS).

7.How long we keep it

• Account, settings and rewards: while the account exists.
• Payment records: kept in an anonymised form (amount and date only) after the account is deleted, because the law requires us to keep accounting records.
• Transfer slips: 24 months.
• Login codes: 10 minutes.

8.Deleting your account

Sign in and choose Delete my account on your account page. We delete your email, your child's name and age group, the rewards, saved progress and all logged-in phones immediately. Payment records stay in anonymised form as explained above. You can also email [email protected] and we will delete it for you.

9.Your choices and rights

You can change the language, screen-time limit and downloads setting at any time; export a copy of your data or ask us to correct it by emailing us. You can withdraw consent and close the account at any time.

10.Maldives and international law

Kokaa is operated in the Republic of Maldives and follows Maldivian law, including the Personal Data Protection Act, together with the children's-privacy principles of COPPA (US) and the GDPR (EU) for users in those places.

11.Contact

Kokaa · Malé, Maldives · [email protected]