Privacy Policy

1. Who this policy applies to

Robiko is an educational app for practicing reading aloud, designed for primary-school students, their teachers, and their parents. Students join the app using a class code issued by their teacher — meaning a child's use of the app happens under school supervision, not as an independent, self-registered internet user.

If you are under 16, please only use the app together with a teacher or parent.

Robiko is intended for reading practice and personal progress. Its feedback is not intended for formal school grades, certification, admissions, or decisions about a student's educational placement. Teachers can view practice progress to support students; these indicators should not be treated as formal grades.

2. What information we collect

2.1. Account information

• Teachers and parents: name, email address, password (stored hashed — we never see or store your password in plain text).
• Students: name or nickname, a chosen avatar, and class membership — no email address or other direct contact information, unless required for the parent-linking feature.
• Audio-programme age and country information: for participants, company staff record the child's birth year and country of residence from verified enrolment documents to check the applicable participation requirements. These fields are not requested during ordinary app registration or edited by children in the app. We record the year rather than a full date of birth in these fields.

2.2. Reading and progress data

Books a student reads, pages read, reading session duration, points earned (XP), badges/achievements, and weekly challenge results — used exclusively to show progress to the student, their teacher, and their parents within the app.

2.3. Voice recordings

While a student practices reading aloud, the app records their voice only for the duration of a single analysis session. This recording:

• is sent to our server and immediately forwarded to a speech-recognition service to produce a transcript and a reading/pronunciation score;
• is not retained after processing by default — temporary files are deleted after processing, whether or not it succeeds;
• in the default mode, is not listened to by a human and is used to provide automated reading feedback;
• is only held temporarily on the device itself, in a system cache/temporary directory during recording and upload, not in permanent device storage.

Separately agreed audio processing

We do not retain audio recordings after processing unless separate, valid written consent has been given for their retention and use in accordance with the purposes and terms defined in the applicable agreement. Participation is optional and is not required to use ordinary reading features. Accepting this Privacy Policy alone does not authorize this additional processing.

Before consent is given, the participant or their legal representative receives the specific processing information, including permitted uses, recipients and any human access, retention periods, and withdrawal and deletion arrangements. Agreements may differ: permission to test a model, for example, does not by itself permit training it. Additional collection requires a verified agreement, company activation, and the acknowledgment of the in-app information by the signing parent or guardian. This acknowledgment confirms that the information was reviewed; it does not replace the written consent.

Participants can pause the retention of new recordings in their account settings. Pausing does not withdraw the existing consent or delete earlier recordings; those recordings may continue to be used only within the agreement's permitted purposes and retention periods. Only the parent or guardian linked as the agreement's signer can resume collection, while the relevant consent remains valid. Children can pause collection but cannot enable it. The settings explain the current status and the separate withdrawal channel.

2.4. Technical data

Basic technical information used for diagnosing app errors (device type, OS version, error message) — used solely to fix technical issues.

2.5. Stories created by parents and teachers

When an adult chooses to create a story, Robiko receives only the photographs they select, their description, language, style and edited story. The selected photographs and description are sent to OpenAI to generate and check age-appropriate content. The adult reviews the AI result before publishing. A parent publishes to their linked child; a teacher publishes to one explicitly selected class. Photographs also appear inside the book. There are no public story links or public catalogue.

Drafts are private to their author. Saved photos and drafts remain until the author deletes them or the relevant account is erased. Unlinking a parent revokes the child's access while retaining the author's private draft. Deletion blocks access immediately; removal from active storage and processing services is retried with a target of 24 hours. Offline copies are removed at the next connection; copies exported outside the app cannot be remotely recalled. Temporary generator files are erased after Robiko receives the result. Encrypted backups expire under the published backup retention policy.

2.6. Payment data (in-app purchases)

If in-app purchases are available in the app, they are processed directly by Google Play / the App Store, not by us — we never see or store your payment card details. We only receive confirmation that a purchase was completed.

3. How we use information

• Showing reading progress to the student, their teacher (for their own class), and their parents (for their own child);
• Automatically scoring pronunciation and reading aloud;
• Separately agreed audio retention and use only for the specific purposes covered by the participant's valid written consent, as described in section 2.3;
• Sending a one-time email verification code to a teacher's or parent's email address;
• Gamification (badges, in-class leaderboards, weekly challenges);
• Technical support and bug fixing;
• Fulfilling in-app purchases, where applicable.

We do not use children's data for advertising, do not show personalized/targeted ads to children, and do not sell user data to third parties.

4. Who we share data with

Our own systems process book files to extract text and analyze reading, and process voice recordings for speech recognition and pronunciation feedback. The external providers used for this processing are described below.

• Teachers — progress data for the students in their own class.
• Parents — progress data for their own child (once a verified parent-child link exists).
• Our processing providers — Microsoft Azure Speech processes voice audio for speech recognition and pronunciation feedback. Depending on the configured analysis provider, we may send book text and voice recordings to OpenAI for text and pronunciation analysis, and PDF files to Unstructured for text extraction. These providers are subject to our processor review and must have an approved DPA, region, retention, and deletion arrangement before production child data is enabled.
• Mailjet sends transactional email verification messages to teachers and parents. It receives the recipient's email address, name, and one-time code for that delivery only; Mailjet is subject to the same processor review before production use, including contract, region, retention, and deletion checks.
• Error diagnostics (Sentry) are disabled by default. If enabled for a specifically approved support window, we send technical error context only and do not enable PII collection.

We do not sell and do not share data with advertisers or any third party for marketing purposes.

5. Data security

All data transmitted between the app and our servers is sent over a secure connection (HTTPS/TLS). Passwords are stored hashed and are never stored in plain text.

6. Data retention and deletion

Student and parent account and reading-progress data is retained for up to 730 days after the last authenticated use, followed by a 30-day deletion-candidate period. Teachers or parents may request deletion of a student's data at any time by contacting oleh.kostashchuk@kostcode.com — we will delete it within 30 days.

Class-owned books are not deleted when one student leaves. Student-owned books are deleted from our systems as part of the student's permanent deletion. Without separate valid written consent, voice recordings are not retained after processing. Separately agreed recordings have their own specified retention periods and deletion rules, which are provided before consent. The account-data retention period above does not automatically apply to these recordings. Access and use stop when the relevant permission expires or is withdrawn, and deletion is handled under the applicable data-protection requirements, including the arrangements for copies and backups.

7. Parent and teacher rights

Parents and teachers may:

• request a summary of what data has been collected about a student;
• request correction of inaccurate data;
• request full deletion of a student's account and associated data.

A participant or their authorized representative can withdraw consent for separately agreed audio processing by sending a written request, including email, to oleh.kostashchuk@kostcode.com. Withdrawal takes effect independently of any separate procedure to terminate the agreement. It stops future processing based on that consent without affecting the lawfulness of processing already carried out. Pausing new collection is a separate control and does not replace this right.

8. Changes to this policy

We may update this policy from time to time. We will notify teachers/parents of material changes through the app or by email.

9. Contact

For privacy-related questions, contact us at: oleh.kostashchuk@kostcode.com