Skip to content
Sign in

Safety & privacy

Safety & privacy

A parental control app asks for a lot of trust. This page lists what Koby handles, why, for how long, and what it never touches.

Last updated: November 14, 2026EnglishTürkçeDeutschFrançaisEspañolItalianoPortuguês (Brasil)日本語

Our promise

What Koby will never do

Koby is built without these abilities, so no setting or plan can turn them on.

  • Read messagesNo access to texts, chats, emails or what your child types.
  • Track in secretNo hidden mode. Koby is always visible on your child's device, with who can see what.
  • Use the camera or microphoneNever switched on remotely, never recorded.
  • Record the screenNo screenshots, no screen recording.
  • Sell data or show adsNo advertising SDKs, no ad identifiers, no data sales.
  • Score or diagnose your childNo risk scores, no guesses about mood or health.

  1. 1Our principles

    • Visible, never hidden. Koby is always shown on your child's device, together with which grown-ups can see what.
    • Only what a rule needs. We collect the minimum needed to apply your family's rules and show whether they work.
    • Honest about limits. If a control can't be checked on a device, Koby shows “can't verify” rather than a guess.
    • No ads, ever. No advertising SDKs, no ad identifiers, no data sales, no profiling of children.

  2. 2What Koby never collects

    Messages, chats and emails · what your child types · photos and files · camera or microphone · screen recordings or screenshots · browsing history · contacts · a location history.

    Koby also never gives your child a risk score and never guesses about mood or health. No setting or plan changes any of this.

  3. 3Data by type

    These are the periods the service applies today. The privacy policy lists every type of data and its retention in full.

    • Parent account: name, email, sign-in method, language

      Why
      To run your account and contact you about it
      Kept for
      Until you delete the account

    • Child profile: first name or nickname, age

      Why
      To show the right profile and age-appropriate starting rules. No email or password for children
      Kept for
      Until you delete the profile

    • Devices: device name, type, system version, notification token

      Why
      To pair devices, deliver rules and send notifications
      Kept for
      Until the device is removed

    • Rules and their change history (who changed what, when)

      Why
      To apply rules and show which version each device has
      Kept for
      Rules and their history: until the child's profile is deleted

    • Extra-time requests: minutes, optional short reason, decision

      Why
      So your child can ask and you can answer
      Kept for
      Shown for 7 days, deleted after 90 days

    • Protection status: which controls are active, partial or off, setup self-test

      Why
      To show whether protection really works
      Kept for
      Latest status only, until the device is removed

    • Screen time per day and per app (app detail comes from computers; iPhone reports totals only)

      Why
      To show time used and time left
      Kept for
      90 days. On iPhone, per-app detail stays on the device

    • Last known location (iPhone): coordinates, accuracy, time

      Why
      So you can see where the device last reported from
      Kept for
      Only the latest one; deleted after 7 days. No history

    • Website contact messages

      Why
      To answer you
      Kept for
      Up to 24 months

  4. 4Who can see what

    • Parents linked to a child can see that child's rules, requests, screen time totals, protection status and last known location.
    • Your child sees their own rules, time left, requests, and the list of grown-ups who can see their data.
    • Koby staff access data only to provide support you ask for or to keep the service secure.
    • Service providers (hosting, email, notifications) process data only on our instructions. The full list is in the privacy policy.

  5. 5Export and deletion

    • Remove a device at any time: it stops receiving rules and its data is deleted.
    • Delete a child profile, or your whole account, from Settings. Your family's data is deleted from our live systems.
    • Export your family's data from the web panel, or ask us for a copy.
    • Backups are encrypted and cleared on a fixed cycle; the period is stated in the privacy policy.

  6. 6COPPA, GDPR and children's privacy

    In the United States, the Children's Online Privacy Protection Act (COPPA) requires verifiable parental consent before collecting personal information from children under 13. In the EU, the GDPR (Article 8) sets an age of digital consent between 13 and 16 depending on the country, with parental consent below it.

    Koby is built for parents to set up and manage: a parent creates the child's profile and gives consent before a child's device is connected, and parents can review, export and delete their child's data at any time.

    Koby has not launched yet. We do not hold, and do not claim, any third-party privacy certification.

  7. 7Security basics

    • Encrypted connections (TLS) between the apps, the web panel and our servers.
    • Each parent has their own sign-in; sessions can be signed out and access removed.
    • Every request is checked on the server, so one family can never see another family's data.
    • Found a security issue? Please write to .

  8. 8Questions

    Write to . The privacy policy has the formal details.