Privacy Policy

Kaze is an AI chat companion for children, operated by Kaze App. This policy explains what personal data we collect, how we use it, who we share it with, and the rights you have over your family's information.

What information we collect

We collect different types of information depending on who is using the service. From parents and guardians, we collect: name, email address, account settings, and IP address. From children (through the parent account), we collect: name, age, learning profile (interests, learning style, reading level, languages spoken), and conversation history with the AI companion. Automatically, we collect: browser type, device information, and session data used for kid-device linking. We do NOT collect: location data, advertising identifiers, or social media profiles.

How we use information

We use the information we collect to: provide the AI chat experience for children, enable parental oversight and review of conversations, generate activity summaries for parents, perform safety monitoring and content moderation, and manage accounts and authentication (including magic link emails). We do NOT sell personal data. We do NOT use personal data for advertising. We do NOT build behavioral profiles for marketing purposes.

AI service providers

Conversations are processed by third-party AI providers (currently OpenAI and Anthropic) to generate responses. When your child sends a message, we transmit: the child's message, relevant conversation context, and personalized chat settings based on the child's age, interests, and learning style so responses are age-appropriate. These providers are contractually bound not to use conversation data for model training. We also use Sentry (a service that helps us find and fix software errors) for error monitoring, which may receive technical diagnostic data but never conversation content.

Data storage and security

Your data is stored on secured servers. Conversations are stored in our database so that parents can review them at any time. All data in transit is encrypted (the same security used by banks and online stores). Kaze uses magic link authentication, which means we never store passwords. Child sessions are created through device-linking codes and are time-limited.

Data retention

For active accounts, we retain data for as long as the account remains active. When a child profile is deactivated, the associated data is retained for 90 days and then permanently deleted. If you request full account deletion (available in Settings > Data & Privacy), all your data is permanently removed. You can also download all your data at any time in JSON format from the same settings page.

Parental rights

As a parent or guardian, you have the right to: review your child's personal information and full conversation history, download all of your family's data (Settings > Data & Privacy > Download my data), delete any child's profile and all associated data (Settings > Children > Delete), delete your entire account and all associated data, and withdraw consent at any time by deleting your account. For residents of the European Union, you additionally have the right to access, rectification, erasure, data portability, and objection under the GDPR (the European Union's data protection law). To exercise any of these rights, use the in-app settings or contact us at privacy@kazeapp.com.

Children's privacy

Kaze is designed for children under parental supervision, in accordance with COPPA (Children's Online Privacy Protection Act). We require verifiable parental consent before any child can use the service. We collect only the information necessary to provide the service. Children cannot share personal information publicly through Kaze — all conversations are private between the child and the AI, visible only to the child and their parent or guardian. AI safety filters monitor all conversations for inappropriate content.

Cookies and tracking

We use essential cookies only, for session management and authentication. We do not use advertising cookies, analytics tracking cookies, or any form of third-party tracking. There are no social media trackers, no remarketing pixels, and no cross-site tracking of any kind.

Changes to this policy

We may update this privacy policy from time to time. If we make material changes, we will notify you by email. The version number and effective date are shown at the top of this policy so you can always tell when it was last revised.