Privacy policy

Kizupi collects the least data a tutor can work with, and a parent can see, export and delete all of it.

The short version. For a child we keep a nickname, a grade, a pixel buddy and their learning progress. No birthdays, photos, location or real names are asked for. The microphone listens only while your child presses it, and the audio isn’t kept. There are no ads and no trackers, and we never sell or share data for marketing. You can export or delete everything at any time.

Who we are

Kizupi is a math tutor for children in Grades 1 to 6, used through a web app at this website, or the Kizupi app for Fire tablets, by subscription (Kizupi Family), after a free trial. In this policy “Kizupi”, “we” and “us” mean the team that runs it, and “you” means the parent or guardian who holds the account. Questions go to hello@kizupi.com.

Children’s privacy

Kizupi is made for children, so it is built to follow the U.S. Children’s Online Privacy Protection Act (COPPA) and similar laws elsewhere.

A parent sets everything up. Only an adult can create an account. Before any child profile exists, the parent confirms they are the child’s parent or legal guardian and gives consent to the collection described here. We keep a record of that consent.
The purchase verifies it. Lessons, the only part of Kizupi that collects anything from a child, need a Kizupi Family plan. Starting it (a card checkout on our website, or an Amazon purchase in the Fire tablet app, which the account holder is notified of) verifies that an adult account holder gave the consent. We record when and how. Before that, a parent can set up profiles, but no lesson starts and nothing is collected from a child.
Children don’t have accounts. No child email, password or real name. A child picks their own profile from pictures on a device the parent has set up.
We collect only what teaching needs. We don’t make a child share more than the lesson requires, and there is nothing in the app for a child to post publicly or send to other people.
Parents stay in control. You can review your child’s information in the parent area, export it, change it, or delete it, and you can withdraw consent by deleting the child’s profile or your account. Deleting stops any further collection.

What we collect

About your child

Profile: a nickname (up to 20 characters), an optional sound-alike spelling so Kizupi says it right, school grade, learning track, chosen world and buddy, and the settings you pick.
Learning record: which skills are practiced and mastered, lesson, homework, quiz and unit results, hints used, time spent, and notebook pages written in your child’s own words.
Answers and explanations: what your child answers or explains in a lesson is used to decide Kizupi’s next move. We keep the answers and the notebook words your child saves, not a transcript of everything said.
Feelings check-ins: when Kizupi asks how your child is feeling, they tap a face. That choice shapes what Kizupi says next and appears in your summary. Kizupi never guesses emotions from a face or a voice.

Voice

The microphone is on only while your child holds down the talk button. There is no always-on listening.
Your child’s words are turned into text by the speech recognition built into the browser or tablet, which is run by the browser or device maker (for example Apple or Google) and may process the audio on its own servers under its own privacy terms. In the Kizupi app for Fire tablets, speech is recognized offline on the tablet itself and never leaves it. No audio of your child is ever sent to us or stored by us; only the text of the answer reaches Kizupi.
Where a device can’t recognize speech itself, your child taps or types instead. Kizupi never records audio to send anywhere.
Names, addresses, phone numbers and similar details a child says are removed from their words before they reach any AI service or our logs.

About you

Your email address, to send sign-in codes, weekly reports and important notices.
Your consent record, the passkeys you add, your parent PIN (stored in hashed form), and the devices and browsers signed in to your family.
Sign-in codes and session identifiers are stored only as one-way hashes.
If you subscribe to Kizupi Family: your plan, its status and renewal date, and the reference numbers our reseller gives the subscription and your billing account. Your card details go straight to our reseller’s secure payment page; we never see or store them.
If you invite a co-parent, their email address, so we can send the invitation. It is kept until they accept, and deleted 30 days after the invitation is accepted, canceled or expires. A co-parent who joins signs in with their own email, gives their own consent and sees the same children and progress you do; the account owner can remove them at any time.

Technical information

Like any website, our servers see your IP address and browser type. We use them to keep the service running, to limit abuse (for example, too many sign-in attempts) and to fix errors. We don’t use them to build profiles.

How we use it

To teach: choose the next problem, the next hint and the next lesson, and plan review before a skill fades.
To report to you: the dashboard, gradebook and the weekly email.
To run your plan: know whether your family has Kizupi Family, and email you before a free trial ends.
To keep children safe (see Safety) and the service secure.
To improve Kizupi, using aggregated or de-identified information only.

We never use a child’s information for advertising, we never sell it, and we never use it to train AI models.

Who helps us run Kizupi

We use a small number of service providers, under contracts that limit them to providing their service to us.

Provider	What they do	What they receive
Cloudflare	Hosting, database and file storage, email delivery, bot protection, and the AI models below	The data described in this policy, stored on our behalf.
Our authorized reseller (payment partner)	Sells Kizupi Family as merchant of record: takes the payment, handles tax, sends receipts and lets you manage the subscription	Only if you subscribe: your email address, an internal family reference so the payment reaches the right account, and the payment and billing details you enter on its checkout page (which it handles under its own privacy policy). Never anything about your children.
Amazon (Amazon Appstore)	Sells Kizupi Family in the Kizupi app for Fire tablets: takes the payment and lets you manage the subscription in your Amazon account	Only if you subscribe there: Amazon already knows your purchase; we receive the purchase receipt and an Amazon user id made for Kizupi alone (not your name or email), and check them with Amazon to unlock your plan. Never anything about your children.
Cloudflare Workers AI (Deepgram voice models, Google’s Gemma language model, run by Cloudflare)	Kizupi’s spoken voice, and translation when you turn on Spanish	Kizupi’s own sentences, which may include your child’s nickname when Kizupi greets or cheers them. With Spanish on: Kizupi’s sentences with the name replaced by a placeholder, and your child’s words in Spanish after personal details are removed. Never any audio of your child. Cloudflare doesn’t use this to train AI models.

Our AI provider doesn’t train on the data we send, and we ask for it not to be kept. Translations of Kizupi’s own sentences (never containing your child’s name) are cached so they can be reused. Your child’s own words are translated for that moment only, except notebook pages, which keep your child’s words alongside the English version for you.

We may disclose information if the law requires it, or to protect a child’s safety.

How Kizupi uses AI

Kizupi is not a chatbot. A math engine decides whether an answer is right, a fixed set of teaching rules decides what happens next, and Kizupi speaks from lines prepared ahead of time and checked automatically. AI writes the lessons before release, to give Kizupi a voice, and for translation; your child’s words are understood only by the speech recognition built into their browser or tablet. If we ever let an AI model reword Kizupi’s lines, it never receives your child’s name and never decides whether an answer is right.

Safety

Everything a child says or types is screened. If it suggests they may be unsafe, Kizupi replies with a reviewed message encouraging them to talk to a trusted grown-up and, where the situation calls for it, emails the account owner to check in. That email doesn’t repeat what was said. Kizupi never asks a child where they live, how old they are, or to keep a secret.

Cookies and storage

We use only the cookies Kizupi needs to work: one that keeps a parent signed in and one that remembers a device set up for a child. Both are first-party and HttpOnly. Buying Kizupi Family on our website takes you to our reseller’s own checkout page, which is outside Kizupi; nothing of theirs runs inside Kizupi. In the Fire tablet app, Amazon’s own purchase screen handles it. The app also keeps small preferences on the device (for example, whether today’s feelings check-in is done). There are no advertising cookies or third-party pixels. To know how many people visit our public website pages, we use Cloudflare Web Analytics, which counts page views without cookies, without storing your IP address and without following you across sites. It never runs in the app your child uses.

Kizupi’s Chrome extension only opens Kizupi in a new tab. It asks for no permissions, reads no pages and stores nothing.

How long we keep it

Your family’s data stays while your account is active.
When you delete a child’s profile or your account, it is removed from our database right away. Copies in backups and logs expire within 30 days.
Weekly reports are kept so you can read past weeks, and are deleted with the account.
Subscription records are deleted with the account. Our reseller, or Amazon for a plan bought there, keeps its own payment and tax records for as long as the law requires.

Your choices and rights

See it: the parent area shows your child’s progress, notebook and reports.
Export it: download all of your family’s data from Settings at any time.
Change it: edit a nickname, grade and settings, or turn off voice, sounds, languages and jokes.
Delete it: delete a child’s data or your whole account from Settings.
Ask us: email hello@kizupi.com for anything the app doesn’t cover. Depending on where you live (for example under the GDPR, UK GDPR or California law) you may have further rights, including to object or to complain to a data protection authority. We honor these requests for every family, wherever they live.

Security

Data is encrypted in transit. Sign-in uses one-time email codes or passkeys, never stored passwords. Sensitive actions like exporting or deleting ask you to confirm it’s you again, and grown-up settings on a child’s device sit behind a PIN or passkey. No system is perfectly secure; if a breach ever affects your family, we will tell you promptly.

International use

Kizupi runs on a global network, so information may be processed in countries other than yours, including the United States. We apply the protections in this policy wherever it is processed.

Changes

If we change this policy in a way that matters, we will email account holders before the change takes effect, and ask for fresh consent where the law requires it. Notable changes are also listed in the changelog.

Contact

Email hello@kizupi.com.