Privacy & Safety
How Koda handles your family's information
This notice covers the Koda iOS app and the Koda website. Koda has no child accounts, no ads, no tracking, and no third-party analytics. Learning progress stays on the device.
Effective September 28, 2026.
In simple words:
- Progress, drawings, and saved creations stay on your device.
- In the app, nothing a child types or draws leaves the device until a grown-up unlocks live AI.
- Live AI is off until a grown-up signs in with Apple and says yes.
- Live AI messages go to OpenAI, which does not keep them after answering.
- Koda does not store what children type or draw on its server.
- Do not enter a child's name, school, address, contact details, or other private information.
What stays on the device
The app stores learning progress, XP, streaks, badges, age group, profile settings and an optional profile photo, an optional certificate nickname, saved drawings and creations, and sound preferences on the device. The website stores the same kinds of information in the browser. Koda does not copy this data to its server.
An unfinished drawing and the latest unsaved game are cleared after 24 hours without changes. A signed-in grown-up can erase all of Koda's saved data on a device from For grown-ups (on the website, For grown-ups works without sign-in). Erasing does not cancel anything with Apple or remove photos from the Photos app.
Before live AI is unlocked
In the iOS app, nothing a child types or draws leaves the device until a grown-up unlocks live AI. Messages about upsetting topics get safety guidance on the device instead.
On the website, which has no live AI, a message typed into Ask Koda, Studio, or a game is sent to Koda's server, which replies that live AI is not available there. These messages are not sent to an AI company and are not stored.
Live AI in the Koda iOS app
Live AI is available only in the iOS app, and only after a grown-up signs in with Apple and gives permission. Permission lasts at most 15 minutes at a time and ends when the grown-up signs out. Koda checks the Apple sign-in without asking Apple for the grown-up's name or email. Signing in with Apple does not create a Koda account.
Koda's server runs on Cloudflare. It checks each message for private details and unsafe topics, then sends it to OpenAI with a random identifier instead of the child's name or Apple account. OpenAI also checks the message and the answer for safety. Koda uses OpenAI with Zero Data Retention: OpenAI does not keep prompts or answers after replying, except content its safety systems flag as illegal. Koda does not store prompts or answers on its server, and its Cloudflare logs do not keep request contents.
Koda's server keeps only short-lived counters for rate limits and daily usage caps (with IP addresses stored as one-way hashes), a list of signed-out grown-up sessions, and, for each family, a count of this month's live AI turns. The family count is filed under a code made with a one-way keyed hash of the grown-up's Apple sign-in, not the Apple account itself, and expires after the month ends.
Drawings, photos, camera, and voice
Camera photos are never sent to live AI; photo activities run on the device. The first time an on-device guessing activity is used, the app downloads a free image-recognition model from Google; no photos or drawings are sent with that download. In Drawing Studio, after a grown-up unlocks live AI, a drawing the child chooses to send goes to OpenAI to guess what it shows or turn it into stickers. The drawing and every generated sticker are checked by OpenAI image moderation, under the same Zero Data Retention terms. Do not draw or send anything with a real person's face, name, or other identifying details.
Voice input is off in this version, and Koda does not use the microphone for prompts.
Purchases
Koda is free to use. Every family gets 20 live AI turns a month after a grown-up unlocks live AI, and one free try of AI stickers. Koda Plus Family is an optional subscription that raises this to 300 turns and 30 AI stickers a month (up to 5 a day), shared by the family. Only a grown-up can buy it, from For grown-ups behind the grown-up check. After the free sticker try, a child sees a note to ask a grown-up; children never see prices and cannot buy anything.
Apple handles payment, and Koda never sees payment details. To confirm a subscription, Koda asks Apple about the purchase and keeps only its transaction ID, product, and renewal date, filed under the same one-way family code. Cancel anytime in your Apple ID subscription settings.
Questions, deletion, and parent requests
A parent or guardian can contact us about privacy, deletion, or safety at asamassekou10@gmail.com. Because Koda keeps children's content on the device and not on its server, most deletion happens with the in-app erase option; we will help with anything else you ask about.
For app help, visit the Koda support page. If this notice changes, we will update the date above.