Effective date: July 26, 2026
Last updated: July 31, 2026
This Privacy Policy explains how Exotec Inc. ("Koodos," "we," "us," or "our") collects, uses, discloses, and protects personal information through the Koodos website, Parent App, child-device applications, browser extension, and related services (collectively, the "Services").
This Privacy Policy should be read with the Koodos Terms of Service. If you use Koodos to manage another person's device, you are responsible for having the authority and any consent required by law to do so.
Koodos handles three main groups of information:
The parent controls which profiles, devices, and features are enabled. Koodos is not designed to collect private messages, photos or other personal files, precise GPS location, or a general server-side history of every URL visited from a managed device. A person may still intentionally submit information through a profile, task, or support field. Koodos does not sell personal information or use child information for behavioral advertising. The sections below explain the details, exceptions, retention, and choices.
Koodos is a family screen-time, task, reward, and learning service. A parent or legal guardian creates and controls the family account, adds child profiles, pairs devices, and chooses settings such as screen-time limits, schedules, blocked apps or content categories, tasks, and rewards.
The Services are provided by:
Exotec Inc.
1606 N. Hale Ave, Fullerton, CA 92831, United States
Telephone: +1 714-947-3059
Privacy: [email protected]
Support: [email protected]
The information we collect depends on the features you use, the devices you pair, and the settings you choose.
We may collect:
We do not receive your account password in readable form.
A parent may provide:
Koodos does not require a child's full legal name. Parents may use a nickname. Koodos does not ask for or store a child's exact age, date of birth, or grade level.
When a device is paired or prepared for pairing, we may collect:
The exact information varies by Android, iOS, Windows, and Chromebook because each platform provides different parental-control capabilities.
To provide screen-time controls and activity reports, Koodos may collect screen-time usage, device activity needed to apply parent-selected controls, and records of time requests and parent responses.
Koodos does not maintain a general history of every URL a child visits or the content of each page. Website and application blocking is generally enforced on the device.
Parents may configure website categories, subcategories, domains, keywords, and exceptions. Koodos stores those rules so they can be synchronized across the family's devices.
For supported YouTube filtering, Koodos may receive a YouTube video identifier so that it can obtain or cache the video's title, channel, and category using the YouTube Data API. This classification cache is used to decide whether the video matches the parent's rules; it is not designed as a per-child viewing history.
For application classification, Koodos may use an app's package identifier to look up public store information, such as its Google Play category.
We may collect:
Parents control what they enter in free-text task descriptions. Please avoid including sensitive information that is not needed to use the Services.
When a child uses released Lessons or Drills, Koodos may collect:
Koodos uses this information to provide the activity, show progress to the family, adapt future practice, and verify completion of an assigned learning task.
Stripe processes payment-card information for subscriptions and for the temporary authorization used as one method of adult verification. Koodos does not directly store complete card numbers or card security codes.
Koodos receives limited billing and transaction information from Stripe, such as customer and subscription identifiers, plan, trial and subscription status, billing period, payment result, and limited card details that Stripe makes available, such as card brand and last four digits.
The adult-verification authorization is not a purchase. A temporary hold may appear on the card and is canceled or released according to the verification flow and the card issuer's processing time.
If a parent or child asks for help or reports a problem, we may collect:
Koodos performs redaction intended to remove common secrets and sensitive values from diagnostic logs. Koodos personnel will never ask for your password, full payment-card number, or sensitive information unrelated to resolving the issue, and you should not include those details in a support request.
Koodos may use artificial-intelligence service providers to help an authorized team member troubleshoot a reported problem, summarize relevant device behavior, or draft internal support and product-improvement notes. Koodos limits submissions to diagnostic excerpts reasonably needed for that work and does not submit customer information for the purpose of training a generalized artificial-intelligence model. These tools do not make decisions about a child, change parental controls, or communicate directly with a child. The providers process submitted excerpts under their applicable terms and account settings.
When you visit koodos.app, Koodos and its website hosting and security providers may receive standard request information such as IP address, browser, operating system, requested page, referring page, and date and time. We use cookies, local storage, or similar technologies that are necessary for website operation, security, preferences, and checkout.
The Koodos marketing website uses Google Analytics to understand aggregate visitor traffic so we can improve the site. This concerns website visitors only — it is separate from the Koodos apps. Google Analytics may receive online identifiers and browsing information such as IP-derived location, device and browser information, referring page, pages viewed, and interaction timing. Google handles information under its own privacy terms.
The website does not currently respond separately to browser "Do Not Track" or Global Privacy Control signals. Koodos does not sell or share personal information for cross-context behavioral advertising. You may also control cookies through your browser settings.
Koodos does not use third-party advertising networks to build profiles of families across unrelated websites. If that practice changes, we will update this policy and provide any choice required by law before using such technology.
Koodos is not designed to collect:
Koodos may receive information a parent or child intentionally submits through support, tasks, or other input fields. The limited video-classification process described in Section 2.5 also applies.
We collect information:
We use personal information to:
We do not use child information for targeted advertising. We do not sell or rent personal information.
Some features rely on automated processing. Koodos classifies websites, videos, and applications automatically against the rules a parent sets, and Lessons and Drills adapt to a child's recent answers. These processes support the controls and learning features a parent has enabled; they are not used for advertising and are not used to train generalized artificial-intelligence models. Koodos does not make decisions producing legal or similarly significant effects about a person through solely automated means without a lawful basis and any required safeguards.
We disclose personal information only as described below.
Parents and authorized co-parents may see child profiles, paired devices, settings, tasks, rewards, requests, activity, screen-time information, and learning progress for the family. A managed child device receives the settings and information needed for that child and device.
We use companies that process information on our behalf to operate the Services. Depending on the feature, these include:
These providers may use information only to provide their contracted services to us or as otherwise permitted by their terms and applicable law. Where required, our written agreements require appropriate confidentiality and security, limit processing to documented purposes or instructions, require incident notice and help with privacy requests, control the use of subcontractors, and require deletion or return of information when the service ends. Koodos remains responsible for selecting and overseeing providers as required by law. You may request information about current material providers by contacting [email protected].
We may disclose information if we reasonably believe it is necessary to comply with law, legal process, or a valid government request; enforce our agreements; investigate fraud or abuse; or protect the rights, property, or safety of Koodos, our users, children, or others. Where legally permitted and appropriate, we will notify the affected account holder.
If Koodos is involved in a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets, personal information may be transferred as part of that transaction. We will require the recipient to handle personal information consistently with applicable law and provide notice where required.
We may disclose information when the parent account holder requests or authorizes us to do so.
Koodos does not publicly display family information. Koodos does not sell or rent personal information and does not disclose child information for behavioral advertising.
Some Koodos features use Google API Services. When website filtering evaluates a YouTube link, Koodos sends the public YouTube video identifier to the YouTube Data API using an API key assigned to Koodos. Google may return the video's public title, channel title, and category identifier. Koodos may temporarily cache those fields so the same public video does not require a new lookup for every family. When Koodos categorizes an installed Android application, it may also use public Google Play information about that application.
This YouTube lookup does not use a parent's or child's Google account, OAuth authorization token, YouTube history, subscriptions, playlists, private videos, or Google login credentials. Because Koodos does not receive Authorized Data from a user's Google account in this flow, there is no Google OAuth permission for the user to revoke for this feature.
Koodos uses the public metadata to provide the video-classification and filtering features selected by the parent. Koodos:
Koodos's use of the YouTube Data API is also subject to the YouTube Terms of Service and the Google Privacy Policy.
Koodos is designed for use by parents and legal guardians. A child may use a managed-device experience, tasks, requests, rewards, Lessons, and Drills only under the direction of the adult controlling the family account.
Where verifiable parental consent is required, Koodos asks the parent or legal guardian to complete an approved verification method before Koodos retains personal information about the child's use of a managed device. Koodos currently offers card-based verification through Stripe using a temporary authorization.
Where this consent is required, Koodos gives the parent a direct notice that identifies the operator and its contact information, the child information to be collected, how it will be used and disclosed, how long it will be retained, and the parent's review, withdrawal, and deletion rights. The direct notice is separate from, and links to, this full policy.
For United States children under 13, Koodos applies its COPPA parental-consent process. In Canada, Koodos obtains consent from a parent or guardian when the child cannot provide meaningful consent; the federal regulator generally takes the position that this includes children under 13 except in exceptional circumstances. For Québec children under 14, parental or guardian consent is required unless a narrow legal exception applies.
Before verification is complete, Koodos may process limited account, security, pairing, and device-setup metadata needed to establish and protect the service. Koodos is designed not to retain the child's real name or behavioral screen-time usage before verification.
The child information Koodos may collect is described in Section 2. It principally consists of a parent-provided profile, device and app information, screen-time activity, task and reward activity, learning progress, requests, and information intentionally submitted for support.
We use child information to provide, secure, support, and improve the family Services. We do not sell it, use it for targeted advertising, or allow a child to make it publicly available through Koodos.
Subject to applicable law, a verified parent or legal guardian may:
Withdrawing consent or deleting required information may prevent Koodos from continuing to provide some or all of the Services for that child.
To make a request, contact [email protected]. We will verify the requester's identity and authority before disclosing or deleting child information.
If we learn that we collected a child's personal information without required consent, we will take reasonable steps to delete it.
The parent account holder chooses the devices, profiles, applications, websites, schedules, and activities managed by Koodos. By pairing a device or adding another person, you confirm that you are the device owner, the child's parent or legal guardian, or otherwise legally authorized to configure and manage that device and information.
You are responsible for using Koodos openly and lawfully, informing affected family members, protecting your account and Parent PIN, and limiting co-parent access to trusted adults. Before monitoring a device used by another person, provide a clear, age-appropriate explanation of what Koodos does and obtain that person's authorization where local law requires it. Do not use Koodos for secret or unlawful monitoring.
We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including providing the Services, protecting their security, resolving disputes, and meeting legal, tax, and accounting obligations.
When setting a retention period, Koodos considers the amount, nature, and sensitivity of the information; the risk of harm from unauthorized use or disclosure; the purpose for retaining it; whether that purpose can be achieved another way; and applicable legal requirements.
Retention depends on the information and why it is needed. In general:
Unpairing a device removes the active device record and its installed-app inventory through the device cleanup process. It does not automatically erase historical screen-time, task, reward, or learning records associated with the child profile. Delete the child profile or family account, or submit a privacy request, if you also want those records deleted.
Deleting an app from a device does not by itself delete the Koodos account or server records.
When we complete a verified deletion request, we delete or de-identify covered information from active systems unless retaining it is required or permitted by law. Residual copies may remain temporarily in protected backups until they are overwritten under the backup schedule.
Koodos may retain information that has been de-identified so it no longer reasonably identifies a person or family. Koodos will maintain safeguards against re-identification and will not attempt to re-identify it except to test those safeguards or as required by law.
We use administrative, technical, and organizational safeguards designed to protect personal information. These include encrypted network connections, access controls, authentication, row-level database controls, private storage, device credentials, logging, and restrictions intended to limit access to people and systems that need the information for their work.
No service can guarantee perfect security. Parents should use a unique password, protect the Parent PIN, keep devices updated, and notify [email protected] promptly if they believe an account or device credential has been compromised.
If we discover a personal-information breach, we will investigate and, without undue delay, provide notice to affected people and to regulators when and as required by applicable law. Where notice is required, we may provide it electronically.
Koodos and its service providers may process personal information in the United States and other countries in which they operate. Those countries may have privacy laws that differ from the laws where you live.
Koodos uses contractual, consent, notification, and other transfer measures where required by applicable law. You may request information about material providers and relevant processing locations by contacting [email protected].
Depending on where you live, you or an authorized representative may have the right to:
Parents may also exercise applicable rights for their children. We may request information needed to verify identity, authority, and account ownership. We will use verification information only for verification, security, and fraud-prevention purposes, and will respond within the period required by applicable law.
Koodos ordinarily does not charge for a privacy request. Where applicable law permits a fee for a request that is manifestly unfounded, excessive, or repetitive, Koodos will explain the basis and any fee before proceeding. If we deny or limit a request, we will explain the reason and available appeal or complaint path unless law restricts that explanation. We will provide a copy in the requested format where required or reasonably practical.
You may update some information in the Parent App. To make any privacy request, email [email protected] from the parent account email and describe the request. An authorized representative may also contact us, but we may need evidence of their authority and may verify the request directly with the account holder.
You may disable nonessential communications using the unsubscribe link where provided. Koodos may still send account, security, billing, and service messages.
The following provisions supplement the rest of this policy. If they conflict with a mandatory right under local law, the local law controls.
Where the Australian Privacy Act 1988 and Australian Privacy Principles apply, Koodos handles personal information in accordance with their requirements for open and transparent management, notice, collection, use and disclosure, security, access, correction, overseas disclosure, and eligible data breaches. If a particular obligation does not legally apply, Koodos will still use this policy as its stated standard unless it expressly says otherwise.
Australian users may ask for access or correction or submit a privacy complaint at [email protected]. We will acknowledge and investigate complaints using a documented process and ordinarily ask that you allow us a reasonable opportunity to respond before escalating. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner.
Koodos may disclose personal information to providers in the United States and other countries where those providers operate. Koodos takes the steps required by applicable Australian law before making an overseas disclosure and may remain accountable for how an overseas recipient handles the information. You may request current information about likely overseas processing locations by contacting [email protected].
Koodos obtains meaningful consent where required and limits collection, use, and disclosure to purposes that a reasonable person would consider appropriate. Consent requests must make the nature, purposes, and reasonably foreseeable consequences understandable, with express consent used where the information is sensitive, the practice is outside reasonable expectations, or there is a meaningful residual risk of significant harm. You may request access or correction, ask questions about our practices, or withdraw consent subject to legal and contractual restrictions. We will explain material consequences of withdrawal before acting on it.
The person accountable for Koodos's privacy program is:
Privacy Officer: Koodos Privacy Officer
1606 N. Hale Ave, Fullerton, CA 92831, United States
Telephone: +1 714-947-3059
If a concern is not resolved, you may contact the Office of the Privacy Commissioner of Canada or the applicable provincial privacy regulator.
For Québec residents, the Koodos Privacy Officer identified above is the person responsible for the protection of personal information. Koodos obtains parental or guardian consent before collecting personal information directly from a child under 14 unless an applicable legal exception permits the collection.
A person may complain to the Commission d'accès à l'information du Québec after giving Koodos an opportunity to address the concern where appropriate.
At or before collection, Koodos takes reasonable steps to tell New Zealand users what information is being collected, why it is collected, who will receive it, whether providing it is voluntary or required, what may happen if it is not provided, who will hold it, and how to request access or correction. For indirect collection, Koodos will give any notice required by Information Privacy Principle 3A unless an exception applies.
New Zealand users may request access to and correction of their personal information, provide a statement of correction if a requested correction is not made, and complain about our handling of information. Contact [email protected] first so we can investigate. You may also contact the Office of the Privacy Commissioner.
Koodos may disclose personal information to providers outside New Zealand as described in Sections 5 and 10 only where the disclosure satisfies New Zealand law, such as because the recipient is subject to the New Zealand Privacy Act, provides comparable safeguards, or the individual gives informed authorization after being told that comparable safeguards may not apply. Koodos assesses and notifies serious privacy breaches as required by New Zealand law.
Koodos collects, uses, and discloses personal data for the purposes described in this policy and obtains consent or relies on another legally permitted basis where required. Koodos will notify individuals of its purposes, limit collection, use, and disclosure to purposes a reasonable person would consider appropriate, make reasonable efforts to maintain accuracy, use reasonable security arrangements, and stop retaining personal data when it is no longer needed for a legal or business purpose.
Singapore users may request access to covered personal data and information about its use or disclosure, request correction, withdraw consent with reasonable notice, or submit a complaint. We will explain the likely consequences of withdrawal and stop the affected collection, use, or disclosure unless continued processing is required or permitted by law.
Data Protection Officer: Koodos Data Protection Officer
1606 N. Hale Ave, Fullerton, CA 92831, United States
Telephone: +1 714-947-3059
Koodos may transfer personal data outside Singapore only after taking measures required to provide a standard of protection comparable to the Singapore PDPA. Koodos will assess suspected breaches and notify the Personal Data Protection Commission and affected people as soon as practicable when the statutory tests are met.
You may also contact Singapore's Personal Data Protection Commission.
Koodos's practices concerning children under 13 are described in Section 6 and are designed to meet the Children's Online Privacy Protection Act (COPPA). Parents may review, correct, or request deletion of their child's personal information and may withdraw consent by contacting [email protected].
Residents of states with applicable consumer privacy laws may exercise the rights provided by those laws as described in Section 11.
This subsection applies to California residents and uses terms as defined in the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the "CCPA"). We review this disclosure at least once a year.
We do not sell or share your personal information as those terms are defined in the CCPA, and we have not done so in the preceding 12 months. Koodos does not use or disclose personal information for cross-context behavioral advertising.
Koodos does not intentionally collect "sensitive personal information" for the purpose of inferring characteristics, and does not use any such information for purposes that would give you a right to limit its use.
Subject to the CCPA's exceptions, California residents may request to know, access, correct, delete, and receive a portable copy of their personal information, and may not be treated in a discriminatory way for exercising these rights. To exercise a right, email [email protected] from the account email, or have an authorized agent contact us with proof of authority.
We will verify your identity before responding and will use any verification information only to process the request, deleting it promptly afterward. You may make a request up to twice in a 12-month period. We will respond within the time the CCPA requires — generally within 45 days, with one extension of up to a further 45 days where reasonably necessary, and we will tell you if an extension is needed.
If you are not satisfied with our response, you may contact the California Attorney General's office.
We may update this policy as the Services or law changes. We will post the revised policy, update the effective date, and provide additional notice or obtain new consent when required by law.
If a change materially expands how we collect, use, or disclose children's personal information, we will obtain any new verifiable parental consent required before applying the change.
Questions, privacy requests, parental-consent requests, and complaints may be sent to:
Exotec Inc.
Attn: Privacy Officer
1606 N. Hale Ave, Fullerton, CA 92831, United States
Telephone: +1 714-947-3059
Please include enough information for us to identify the relevant account and understand the request, but do not send a password, full payment-card number, or unnecessary child information by email.
We will confirm receipt, investigate, and respond within the time required by applicable law. If you are not satisfied with our response, you may contact the privacy regulator identified for your location in Section 12.