Privacy policy
Who this covers
Schooka is a tool for teachers: you chat with Kooka to build classroom activities, then share them with your class. This policy explains what we collect from teachers (our account holders) and what happens when students play activities (they stay anonymous).
What we collect from teachers
- Your account — name, email, password (stored hashed, never readable by us), and the school name, grade levels, and subjects you choose to share.
- Your conversations with Kooka — the messages you send, files you attach, and the activities Kooka builds for you. We keep these so your chat history works, and so we can debug problems and improve the product.
- Payment details — handled entirely by Stripe. Card numbers never touch our servers.
- Basic product usage — things like how many activities you've built this month (that's how plans are metered).
What we collect from students
As close to nothing as we can manage. Students play activities through a share link, a touchboard, or a downloaded file — no accounts, no names, no sign-in. Play pages have no advertising and no third-party trackers. When a student finishes an activity, we count an anonymous completion (a number, not a person) so teachers can see that their class played.
How AI is involved
When you chat with Kooka, your messages and attachments are sent to large language model providers through OpenRouter to generate replies, images, and narration. We configure that routing so requests only go to providers that do not train on your data and do not retain it. Our current providers are listed on the subprocessor page.
We never sell your data, never use it for advertising, and never use your content to train AI models.
Your files, your call
Every file you've ever attached to a Kooka chat is listed on your attachments page, where you can permanently delete any of them. One ask: please don't upload documents that contain student personal information (like rosters, grades, or IEPs) — Kooka doesn't need them to build great activities.
Keeping and deleting data
- You can delete any activity, chat, or attachment yourself, any time. Deleted means deleted.
- Activities you've shared or listed on the marketplace stay available to the people you shared them with until you unshare or delete them.
- Want your whole account gone? Email [email protected] and we'll erase it, promptly and completely.
Security
Everything travels over encrypted connections (TLS) and is stored encrypted at rest. Passwords are hashed with bcrypt; mobile app tokens are stored only as digests. If we ever learn of a breach affecting your data, we'll notify you without undue delay.
For schools and districts
We're built to be easy to say yes to: no student accounts, no student PII, no ads, no selling data, no training AI on your content. If your district needs a signed data privacy agreement (including the SDPC National DPA or a state-specific agreement), email [email protected] — happy to help.
Changes
If we change this policy in a way that matters, we'll email account holders and note the new date at the top. Questions? We're at [email protected].