Privacy Policy
KGenius AI - Protecting children's privacy
1. Introduction
Welcome to KGenius AI! We are an educational artificial intelligence platform specially designed for young learners. The privacy and security of our users is our highest priority.
- Service: KGenius AI - Educational AI Assistant
- Age Range: Young learners aged 3-17
- Platforms: Mobile app (Android and iOS)
2. Data We Collect
We collect only the essential data to provide a safe and personalized educational experience.
2.1 Account and Authentication Data
- Unique User ID: Automatically generated unique identifier
- Email (optional): Via Google Sign-In or Sign in with Apple, for authentication
- Name (optional): Via Google Sign-In or Sign in with Apple, for personalization
- Age: The child's age, selected when the app is first opened, used to adapt the AI's answers to the child's age
2.1.1 Sign in with Apple
Signing in is optional. If you choose Sign in with Apple (available where Apple supports it, such as on iOS), Apple shares with us a unique Apple user identifier and, only if you allow it, the name and email address you choose to share. If you use Apple's "Hide My Email" option, we receive a private relay address (ending in @privaterelay.appleid.com) instead of your real email, and Apple forwards messages sent to that address. We use this data only to create and sign in to your account and to personalize the app. Apple's handling of your data is described in Apple's Privacy Policy.
2.2 Conversation and Usage Data
- Chat Messages: Conversations with educational AI
- Conversation History: For experience continuity
- Usage Data: Number of messages, chats created
- Preferences: Theme and language settings
2.3 Subscription Data
- Subscription Status: Plan type (free/premium)
- Payment Data: Processed via Google Play/App Store
- Purchase History: For subscription management
2.4 Photos and Images
- Photos attached by the user (Android app): In the Android version (1.1.8 and later), the user can take a photo with the camera (Android CAMERA permission) or pick up to 3 images from the gallery and attach them to a chat message. The iOS version may not offer this feature yet.
- What happens to these photos: Each attached photo is uploaded to Google Firebase Storage in a folder linked to the user's account ID, and its link is sent through our server (a Firebase Cloud Function) to OpenAI, which analyzes the image so the AI can answer questions about it.
- Generated images (Android and iOS): When the user asks the app to create a picture, the text of the request is sent to OpenAI's image generation service (DALL-E), and the resulting image is saved to Firebase Storage in the same user folder so it remains visible in the chat.
- Purpose: Only to answer the user's question about the photo or create the requested picture, and to show images in the conversation history.
- Retention: Images stored in Firebase Storage are kept until they are deleted. There is currently no automatic deletion period, and deleting a chat in the app does not automatically delete its image files. Parents and users can request deletion of all images (and other data) at any time by emailing contact@vklapps.com. Images sent to OpenAI are subject to OpenAI's API retention (see section 4.1).
- Advice for parents: We recommend that children do not photograph people, faces, documents, or anything that shows personal information such as an address or school name.
3. How We Use Data
- Service Operation: Educational AI responses, conversation history
- Security: Filter inappropriate content, detect abuse
- Improvements: Analyze usage patterns (anonymized data)
- Communication: Important update notifications
4. Data Sharing
When We Share:
- Google Firebase: Secure data storage (including Firebase Storage for photos and generated images) and user authentication
- Google and Apple sign-in: Authentication, only if the user chooses Google Sign-In or Sign in with Apple
- Firebase Crashlytics: Automated crash reporting for app stability
- Google AdMob: Child-appropriate advertising (COPPA compliant)
- OpenAI: AI processing for educational responses (see details below)
- Legal Situations: When required by law or to protect children
4.1 AI Processing by OpenAI
- Data Sent: Chat messages and age-appropriate context (the user's age and language); photos the user chooses to attach (Android app); and the text of image-generation requests
- Data Processing: OpenAI processes messages and images to generate educational responses, and generates images on request (DALL-E)
- Data Retention: OpenAI may retain data for 30 days for abuse monitoring, then deletes it
- No Training: Your data is NOT used to train or improve OpenAI's models
- Privacy Protection: Personal identifiers are removed before sending to OpenAI
4.2 Crash Reporting by Firebase Crashlytics
- Data Sent: Technical crash logs, device information, and error details
- Purpose: Fix bugs and improve app stability for all users
- Data Type: No personal information - only technical diagnostic data
- Processing: Automated analysis by Google Firebase services
- Retention: Crash data retained for up to 90 days for debugging purposes
- Child Safety: No user content or chat messages are included in crash reports
5. Security
- Encryption: All data encrypted in transit and at rest
- Access Control: Only authorized personnel
- 24/7 Monitoring: Intrusion detection systems
- Secure Backups: Encrypted backup copies
6. Advertising
- Appropriate Content: Only educational and child-appropriate ads
- Personalization: Personalized ads only with parental consent (GDPR)
- Control: Settings available in the app
7. For Parents and Guardians
Parent Rights:
- Review: All data collected about your child
- Delete: Personal data at any time
- Change: Privacy settings
- Export: Data in readable format
8. COPPA Compliance
- Age at First Launch: The app asks for the child's age the first time it is opened and uses it to adapt answers. The app does not currently perform verifiable parental consent, so we recommend that a parent or guardian installs and sets up the app and supervises its use, especially for children under 13
- Deletion Requests: Parents and guardians can request access to or deletion of their child's data at any time by emailing contact@vklapps.com
- Minimal Collection: Only essential data for the service
- Restricted Use: Data used only for stated purposes
- No Sale: Children's data is never sold
9. Your Rights
- Access: Know what data we have about you
- Rectification: Correct incorrect data
- Deletion: Delete your personal data
- Portability: Export your data
- Opposition: Object to processing
10. Contact
- General Email: contact@vklapps.com
- Support: contact@vklapps.com
- Emergencies: contact@vklapps.com
- Parental Questions: contact@vklapps.com