Privacy policy

Who we are

Kizupi is a free math tutor for children in Grades 1 to 6, used through a web app at this website. In this policy “Kizupi”, “we” and “us” mean the team that runs it, and “you” means the parent or guardian who holds the account. Questions go to hello@kizupi.com.

Children’s privacy

Kizupi is made for children, so it is built to follow the U.S. Children’s Online Privacy Protection Act (COPPA) and similar laws elsewhere.

• A parent sets everything up. Only an adult can create an account. Before any child profile exists, the parent confirms they are the child’s parent or legal guardian and gives consent to the collection described here. We keep a record of that consent.
• Children don’t have accounts. No child email, password or real name. A child picks their own profile from pictures on a device the parent has set up.
• We collect only what teaching needs. We don’t make a child share more than the lesson requires, and there is nothing in the app for a child to post publicly or send to other people.
• Parents stay in control. You can review your child’s information in the parent area, export it, change it, or delete it, and you can withdraw consent by deleting the child’s profile or your account. Deleting stops any further collection.

What we collect

About your child

• Profile: a nickname (up to 20 characters), an optional sound-alike spelling so Kizupi says it right, school grade, learning track, chosen world and animal, and the settings you pick.
• Learning record: which skills are practised and mastered, lesson, homework, quiz and unit results, hints used, time spent, and notebook pages written in your child’s own words.
• Answers and explanations: what your child answers or explains in a lesson is used to decide Kizupi’s next move. We keep the answers and the notebook words your child saves, not a transcript of everything said.
• Feelings check-ins: when Kizupi asks how your child is feeling, they tap a face. That choice shapes what Kizupi says next and appears in your summary. Kizupi never guesses emotions from a face or a voice.

Voice

• The microphone is on only while your child presses the talk button. There is no always-on listening.
• The recording is turned into text to understand the answer, then discarded. We don’t store audio of your child.
• If our speech service can’t be reached, the app may fall back to the speech recognition built into the browser or tablet. That recognizer is run by the browser or device maker (for example Google or Apple), which may process the clip on its own servers under its own privacy terms.
• Names, addresses, phone numbers and similar details a child says are removed before the words reach any AI service or our logs.

About you

• Your email address, to send sign-in codes, weekly reports and important notices.
• Your consent record, the passkeys you add, your parent PIN (stored in hashed form), and the devices and browsers signed in to your family.
• Sign-in codes and session identifiers are stored only as one-way hashes.
• If you invite a co-parent, their email address, so we can send the invitation. It is kept until they accept, and deleted 30 days after the invitation is accepted, cancelled or expires. A co-parent who joins signs in with their own email, gives their own consent and sees the same children and progress you do; the account owner can remove them at any time.

Technical information

• Like any website, our servers see your IP address and browser type. We use them to keep the service running, to limit abuse (for example, too many sign-in attempts) and to fix errors. We don’t use them to build profiles.

How we use it

• To teach: choose the next problem, the next hint and the next lesson, and plan review before a skill fades.
• To report to you: the dashboard, gradebook and the weekly email.
• To keep children safe (see Safety) and the service secure.
• To improve Kizupi, using aggregated or de-identified information only.

We never use a child’s information for advertising, we never sell it, and we never use it to train AI models.

Who helps us run Kizupi

We use a small number of service providers, under contracts that limit them to providing their service to us.

We ask our AI providers for zero data retention and no training on the data we send. Translations of Kizupi’s own sentences (never containing your child’s name) are cached so they can be reused. Your child’s own words are translated for that moment only, except notebook pages, which keep your child’s words alongside the English version for you.

We may disclose information if the law requires it, or to protect a child’s safety.

How Kizupi uses AI

Kizupi is not a chatbot. A math engine decides whether an answer is right, a fixed set of teaching rules decides what happens next, and Kizupi speaks from lines written and reviewed by people. AI services are used for speech (understanding your child’s voice and giving Kizupi a voice) and for translation. If we ever let an AI model reword Kizupi’s lines, it never receives your child’s name and never decides whether an answer is right.

Safety

Everything a child says or types is screened. If it suggests they may be unsafe, Kizupi replies with a reviewed message encouraging them to talk to a trusted grown-up and, where the situation calls for it, emails the account owner to check in. That email doesn’t repeat what was said. Kizupi never asks a child where they live, how old they are, or to keep a secret.

Cookies and storage

We use only the cookies Kizupi needs to work: one that keeps a parent signed in and one that remembers a device set up for a child. Both are first-party and HttpOnly. The app also keeps small preferences on the device (for example, whether today’s feelings check-in is done). There are no advertising cookies, analytics trackers or third-party pixels.

How long we keep it

• Your family’s data stays while your account is active.
• When you delete a child’s profile or your account, it is removed from our database right away. Copies in backups and logs expire within 30 days.
• Weekly reports are kept so you can read past weeks, and are deleted with the account.

Your choices and rights

• See it: the parent area shows your child’s progress, notebook and reports.
• Export it: download all of your family’s data from Settings at any time.
• Change it: edit a nickname, grade and settings, or turn off voice, sounds, languages and jokes.
• Delete it: delete a child’s data or your whole account from Settings.
• Ask us: email hello@kizupi.com for anything the app doesn’t cover. Depending on where you live (for example under the GDPR, UK GDPR or California law) you may have further rights, including to object or to complain to a data protection authority. We honour these requests for every family, wherever they live.

Security

Data is encrypted in transit. Sign-in uses one-time email codes or passkeys, never stored passwords. Sensitive actions like exporting or deleting ask you to confirm it’s you again, and grown-up settings on a child’s device sit behind a PIN or passkey. No system is perfectly secure; if a breach ever affects your family, we will tell you promptly.

International use

Kizupi runs on a global network, so information may be processed in countries other than yours, including the United States. We apply the protections in this policy wherever it is processed.

Changes

If we change this policy in a way that matters, we will email account holders before the change takes effect, and ask for fresh consent where the law requires it. Notable changes are also listed in the changelog.

Contact

Email hello@kizupi.com. We read every message.