Privacy policy

Who we are

KODOMO City is a service of KODOMO, a children's education brand since 2017. The service is operated by Still Matter AI Developing Services, a sole establishment licensed in Dubai, United Arab Emirates (professional licence no. 1662283), which is responsible for your data. Address: Flat 711, G24 Tower, Jumeirah Village Circle, Al Barsha South 4, Dubai, United Arab Emirates.

For anything about your data, write to [Contact email].

In short

• We collect as little as we can. We never ask for your child's name or photo.
• No ads, no third-party trackers, and we never sell your data.
• No chat between users.
• You can delete your data yourself at any time.

Your family's house in the city

When you build your house we keep your answers to the questions. They are all choices from lists:

• Your country.
• Your children's ages, as age bands, with no names or birth dates.
• What you would like them to learn, what worries you about screens, and their daily screen time.
• The devices at home, the learning language, and the preferred dialect for stories.
• Your monthly spending on children's activities, when the question is offered in your country.
• Your interest in tools for children of determination. We ask about interest only, never about anyone's condition.

We also keep the house name you choose (others see it only after our team reviews it), where your house is in the city, the date you joined, and who invited you if you came through an invite link.

If you ask us to tell you when we launch, we keep your email or WhatsApp number with the date you agreed, and use it for that only.

The Residents' Happiness Center

The ideas, votes, requests and messages you send us are kept with your house. No idea is shown to others before it is reviewed, and ideas are shown without their author's name.

Instagram

If you message us on Instagram to reach your house, we keep an ID that Instagram makes for our app only, and your username once you confirm the link. Others see your Instagram name only if you choose to show it and confirm you are a parent or an adult.

An account that does not finish linking is deleted after 30 days. KODOMO's follower count is kept as a number only, with no names.

The bank and payments

When the bank opens, payment happens on Stripe's secure page. We keep only the tier, amount, currency, payment status and its reference. We never see your card details.

House of White Wings: specialists and centres

When you register we keep what you write in the form:

• Your name (and in Latin letters, if you add it), your specialty or type of organisation, services, the conditions and ages you serve, how you work, and your languages.
• Phone and email, country and city, and for organisations the address and a contact person.
• Your licence number and issuing body, and the licence image if you upload one.
• Your website and social media profiles, if you add them.
• The prices you enter and the support you offer families.
• Your consent to be contacted, and your consent to be listed publicly if you give it.

None of this is public before our team reviews it and verifies the licence. Once approved, the certificate's verification page shows only the name, specialty, city and date. Your name appears in a directory for families only if you agree, and the directory is not open yet. Prices are shown only as totals for groups of 10 or more.

These forms collect no data about children.

House of White Wings: the parents' door

This is the most sensitive data we hold, because it is about a child's health. So we collect the minimum:

• The child's birth year only, with no name and no full date.
• The child's condition, from a list.
• The challenges your family faces and what would make life easier, from lists, with an optional note.
• What helped you and you would like other families to know.
• An optional description of the child's condition and stage.
• Your country, and your city if you wish.
• A name for the shield, such as "The Youssef family".
• An email, if you agree that we may contact you about what you shared.

How we protect it

• We accept it only with your separate, explicit consent.
• Everything you type (the shield name, city, description, notes and email) is encrypted in the database with a separate key. The lists, birth year and country stay readable so we can count totals.
• We refuse names, phone numbers and links in the description, and we remind you not to write them.
• Only team members with admin access can read a full submission, and every read is logged: who, when and from where.
• We only show or publish totals for groups of 10 or more families.
• Experiences you share are published only after review, and never with any data about the family or the child.
• The shield never states the child's condition, and nobody sees it unless you share it.
• You get a private link where you can delete everything at any time.

Cookies

We use only the cookies the service needs to work. No advertising or analytics cookies:

• kc_family: remembers your family's house on this device, for one year.
• kc_ww: opens your House of White Wings certificate, for two years.
• kc_wwp: opens your family's shield page, for two years.

Each one holds a random code that says nothing about who you are. Other sites and the page's own scripts cannot read them (HttpOnly), and they are only sent over a secure connection. For the certificate and the shield we store only a fingerprint (hash) of the code, never the code itself.

Your browser also keeps a few simple preferences that are never sent to us: that you have seen the opening story, whether sound is on, and that you closed an announcement shown above the city.

To know which pages are visited, our server counts views: for each day, page and language, and the region of the browser's language setting when there is one (such as ar-EG), we keep a number and nothing else. This uses no cookie, and we keep no IP address or anything that tells one visitor from another.

Why we use data

• To run your house and the city.
• To learn what families need, so we build what helps them.
• To verify specialists and organisations and issue certificates.
• To contact you, only if you agreed.
• To publish totals that identify no one, for groups of 10 or more, for example on our Instagram.
• To protect the service from abuse.

What we never do

• No ads and no third-party trackers or analytics, on children's pages or anywhere else on the site.
• We never sell or rent your data.
• No chat between users.
• No real photos of children: the city's characters are drawings we make, and we never ask for a photo of any child.
• We never ask for your child's name or full date of birth.

Who we share it with

We share your data only with those who help us run the service, and only as much as they need:

• Hetzner Online GmbH: hosting for the server and database, in a data centre in [Hetzner server region].
• Stripe: payments, if you pay in the bank.
• Meta (Instagram): messages, only if you message us on Instagram.

This means your data may be stored outside your country. We are reviewing with a lawyer what each country's law requires for this. We may also disclose data if the law requires us to.

How we protect it

• The connection to the site is encrypted (HTTPS).
• The parents' door texts are encrypted in the database (AES-256-GCM), and all backups are encrypted.
• The admin panel is protected by a password and a second code from an app; each person on our team has their own account and permissions, and every change there is logged.
• We limit the number of requests to prevent abuse. For that, IP addresses are kept briefly in the server's memory; we keep no log of your visits.

No system is completely secure. If your data is affected by a breach, we will tell you and the authorities as the law requires.

How long we keep it

• Your house, answers and messages: until you delete them or ask us to.
• A specialist's or organisation's registration: until you ask us to delete it.
• A parents' door submission: until you delete it from your private link or ask us to.
• An Instagram account that never finished linking: 30 days.
• Encrypted backups: 14 days, so what you delete is gone from them within 14 days.
• The log of admin reads of family submissions: kept for accountability; it holds no family data.

We will set a maximum period for keeping inactive data after the legal review, and publish it here.

Your rights

• Access: to know what we hold about you and get a copy.
• Correction: to have us fix what we hold about you if it is wrong.
• Deletion: the "Delete my family's data" button in your house, or "Delete everything" on your family's shield page. To delete a specialist's or organisation's registration, write to us.
• Withdrawing consent: at any time; it does not affect what happened before.
• Objection: to object to a use of your data or ask us to limit it.

Write to [Contact email] and we will reply. We may ask for proof that the data is yours. You can also contact the data protection authority in your country.

Children and parental consent

KODOMO City is made for children, but today registration and every form are for adults: a parent builds the house, answers and consents. We ask children for no personal information.

Before we open the children's world we will update this policy, and we will not keep any data about a child before a parent consents.

If you learn that a child has sent us information, write to us and we will delete it.

The laws we work with

We work to comply with the data protection laws of the countries we serve, including:

• Egypt's Personal Data Protection Law (Law No. 151 of 2020).
• Saudi Arabia's Personal Data Protection Law.
• The UAE's Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data.
• The UAE's law on Child Digital Safety.

A lawyer is reviewing this policy now, and we will change it if the review requires.

Changes

If we change this policy, we will update the "Last updated" date at the top and explain important changes on the site.

Contact us

• Operator: Still Matter AI Developing Services, Dubai licence no. 1662283
• Address: Flat 711, G24 Tower, Jumeirah Village Circle, Al Barsha South 4, Dubai, United Arab Emirates
• Email: [Contact email]