Privacy Policy
Last updated: September 13, 2026
1. Information We Collect
We collect information you provide directly to us, including:
- Account Information: Email address, display name, and password when you register for an account.
- Profile Information: Any additional information you choose to provide, such as profile preferences.
- Communication Data: Messages and interactions you have with AI characters through our platform.
- Payment Information: Payment method details processed through our PCI-DSS compliant payment provider Waffo Pancake. We do not store full credit card numbers.
- Usage Data: Information about how you access and use our services, including conversation patterns and feature usage.
2. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our services
- Process transactions and send related information
- Send you technical notices, updates, and support messages
- Respond to your comments, questions, and customer service requests
- Personalize your experience with AI characters
- Monitor and analyze trends, usage, and activities in connection with our services
- Detect, investigate, and prevent fraudulent or unauthorized transactions
3. Information Sharing
We do not sell your personal information, including as defined under applicable laws such as CCPA. We only share your information in the following circumstances:
- Service Providers: We may share information with trusted service providers who assist us in operating our platform (e.g., payment processing, data analytics). Payment card data is processed exclusively by our PCI-DSS compliant payment processor Waffo Pancake and is not stored on our servers.
- Legal Requirements: We may disclose information if required by law or when we believe disclosure is necessary to protect our rights or comply with a judicial proceeding.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
4. Data Retention
We retain your personal information for as long as your account is active or as needed to provide services. You may request deletion of your account and data at any time. Upon account deletion, we will delete or anonymize your data within 30 days, except where retention is required by law.
5. Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.
In the event of a security breach affecting your rights, we will notify you and relevant authorities within 72 hours of discovery.
6. Your Rights
Depending on your location, you may have certain rights regarding your personal information:
| Right | Description |
|---|---|
| Right of Access | Obtain a copy of your personal data |
| Right to Rectification | Correct inaccurate or incomplete information |
| Right to Erasure | Request deletion of your personal data |
| Right to Restrict Processing | Pause processing in certain circumstances |
| Right to Data Portability | Receive data in a machine-readable format |
| Right to Object | Object to processing based on legitimate interests |
| Right to Withdraw Consent | Withdraw consent at any time where processing is based on consent |
To exercise these rights, please contact us at support@kokoro.ai. We will respond within 30 calendar days.
7. Cookies and Tracking
We use cookies and similar tracking technologies. You can control cookies through your browser settings.
| Type | Purpose | Can be disabled |
|---|---|---|
| Essential | Required for login and core functionality | No |
| Functional | Language preferences, personalized settings | Yes |
| Analytics | Anonymous usage statistics and product optimization | Yes |
8. Children's Privacy
Our services are intended for users who are at least 18 years old. We do not knowingly collect personal information from individuals under 18. If you believe we have inadvertently collected such information, please contact us immediately at support@kokoro.ai, and we will promptly delete it.
9. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence, including servers in Singapore and the United States. We ensure appropriate safeguards are in place for such transfers, including:
- Data Processing Agreements incorporating Standard Contractual Clauses (SCCs)
- Transfers only to recipients with equivalent data protection levels
10. Data Security
We implement appropriate technical and organizational measures to protect your personal information:
- Transmission Security: TLS/HTTPS encryption for all data in transit
- Storage Security: Passwords and sensitive data are encrypted or hashed
- Access Control: Principle of least privilege; employees sign confidentiality agreements
- Regular Audits: Periodic security audits and vulnerability scanning
In the event of a security breach affecting your rights, we will notify you and relevant authorities within 72 hours of discovery.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes at least 15 days in advance by posting the new policy on this page and updating the "Last updated" date. Your continued use of our services after any modifications indicates your acceptance of the updated policy.
12. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
Privacy Inquiries: privacy@kokoro.ai
General Support: support@kokoro.ai
Response Time: We aim to respond within 48 hours