NOKO

Legal

Privacy Policy

Last updated: June 7, 2026

NOKO - Stories and Adventures is an AI-powered voice application made by WONDERLOOM CREATIONS PRIVATE LIMITED, operating as Noko Toys ("we", "us", or "our"). This Privacy Policy explains what information we collect, how we use it, and how we keep it safe.

We care deeply about your child's privacy. NOKO is built for children aged 3 to 12 and beyond, and we follow applicable child privacy laws including India's Digital Personal Data Protection Act (2023), the US Children's Online Privacy Protection Act (COPPA), and the EU/UK General Data Protection Regulation (GDPR).

NOKO - Stories and Adventures is a child-directed service. We are aware that we collect information from and about children under 13. We do not collect more information than is reasonably necessary for your child to use the app.

Who We Are

WONDERLOOM CREATIONS PRIVATE LIMITED (Noko Toys)
8 Satva Homes, Nr. G.S.T. Compound, Nr. Khodiyar, Digvijaynagar, Ahmedabad City, Ahmedabad - 382470, Gujarat, India

Email: support@nokoverse.com
Website: https://nokoverse.com

Who This Policy Applies To

This policy covers everyone who uses NOKO - Stories and Adventures:

• Children who listen to audio content and use the live voice-call feature
• Parents or guardians who set up the app and verify their phone number

What We Collect

When a parent verifies their phone number:

• Your phone number, so we can create your account and keep it secure. This is stored through Firebase Authentication (a Google service).

During setup:

• Your child's first name, so NOKO can greet them personally.
• Your child's age, so we can suggest age-appropriate content.

During live voice calls:

• When your child uses the optional live voice-call feature, their speech is streamed in real time to our speech-AI provider (ElevenLabs) so NOKO can understand and reply. This call audio is processed live to power the conversation. We do not store recordings of your child's voice, and the audio is not used to build profiles of your child or to train AI models.

If you make a purchase:

• If you buy "Noins" (an in-app currency), we receive a purchase receipt identifier from the Apple App Store or Google Play, via our purchases provider (RevenueCat), to validate and restore your purchases. If you choose to receive a receipt, we also collect the email address you provide for that purpose. We never receive your card, bank, or UPI details.

Automatically while using the app:

• Listening activity: which content is played, how long your child listens, and how often.
• Technical identifiers: device type, OS version, app instance identifiers, and IP address for performance, crash reporting, and security.
• A push notification token (Firebase Cloud Messaging), if you enable notifications, so we can send reminders and updates.

Things we do NOT collect:

• Email addresses (except an optional receipt email you choose to give us at purchase)
• Photos or videos
• Stored voice recordings — live call audio is processed in real time and is not retained
• Precise or coarse location data
• Contact lists or social media information
• Advertising identifiers (IDFA/AAID are disabled)
• Biometric data
• Any information directly from children without a parent setting things up first

How We Use This Information

We process your information based on your consent and solely for the following purposes:

• Making NOKO work for your child (providing the audio service and the live voice-call feature)
• Personalising greetings using your child's name
• Suggesting age-appropriate content based on your child's age
• Tracking listening progress and statistics
• Processing and restoring optional in-app purchases of Noins
• Sending optional push notifications (such as reminders or new content), where you enable them
• Improving the app's performance and fixing bugs
• Keeping accounts secure

We do NOT use any information for:

• Advertising or marketing to children
• Behavioural profiling or building personality profiles of children
• Training third-party AI models on your child's voice
• Automated decision-making that affects your child
• Any purpose not listed above

How We Obtain Parental Consent

Before collecting any personal information from your child, we require a parent or guardian to verify their phone number through an SMS one-time password (OTP). This serves as our parental consent mechanism.

In guest mode (before verification), NOKO stores only a first name and age locally on your device. This data never leaves the device.

By completing phone verification, you as a parent or guardian:

• Confirm you are the parent or legal guardian of the child using NOKO
• Consent to the collection and use of information as described in this policy
• Consent to the storage of this information with our third-party service providers (listed below)

In-app purchases additionally require a parental gate inside NOKO together with your device's standard Apple/Google payment authentication, so a child cannot make a purchase on their own. You may withdraw consent at any time. See "Your Rights" below.

How We Keep Your Data Safe

We take reasonable measures to protect the confidentiality, security, and integrity of your information:

• Phone numbers are managed by Firebase Authentication with industry-standard encryption.
• Profile data lives in Google Cloud Firestore with strict security rules.
• Audio is streamed over encrypted connections and never stored on your device.
• Live voice-call audio travels over encrypted connections and is processed in real time, not stored.
• All data travels over encrypted connections (HTTPS/TLS).
• Advertising identifiers (IDFA and Android Advertising ID) are disabled.

Sharing Your Data

We never sell, rent, or share personal information for advertising or marketing.

To run the app, we use the following service providers:

• Google LLC — Firebase Authentication (phone verification and sign-in), Google Cloud Firestore (user profiles and listening data), Firebase Storage (audio streaming), Firebase Analytics (anonymous usage statistics, configured for child-directed treatment), and Firebase Cloud Messaging (push notifications).
• ElevenLabs — processes live voice-call audio in real time to generate NOKO's AI voice replies. Audio is not stored or used to train models.
• RevenueCat — manages and validates in-app purchases (receives purchase receipt identifiers; never your payment details).
• Apple App Store / Google Play — process all payments. We never see, handle, or store your card, bank, or UPI details.

These services are subject to their respective privacy policies, including Google's Privacy Policy. Apart from these providers, we do not share your information with any other third parties.

Children's Privacy

NOKO is designed with kids' safety at the centre:

• We collect only the minimum information needed to make the app work.
• A parent's phone number is required to unlock full access.
• Children cannot message other people or share information with other users.
• Purchases require a parental gate inside NOKO plus the device's Apple/Google payment authentication, so a child cannot buy on their own.
• There are no advertisements in NOKO.
• There are no social features, comments, or user-generated content.
• There is no behavioural profiling, targeted advertising, or tracking of children.
• We do not make children's information publicly available.

Keeping or Deleting Your Data

We keep your data only as long as necessary:

• Account data: retained while your account is active.
• Listening activity: retained for up to 12 months, then anonymised or deleted.
• Firebase Analytics data: retained for up to 14 months.
• Live voice-call audio: not stored; processed in real time only.
• Purchase records: retained as required for accounting, tax, and legal obligations.
• Guest data: stored only on your device. Uninstalling removes it.

You can delete your account from the app via Settings → Delete Account, or by emailing support@nokoverse.com. All data is removed within 30 days.

Your Rights

As a parent or guardian, you have the right to:

• Review the personal information we have collected from your child
• Request correction of inaccurate information
• Request deletion of your child's account and all associated data
• Refuse further collection or use of your child's information
• Withdraw consent at any time
• Receive a copy of your child's data in a portable format
• Lodge a complaint with a data protection authority

To exercise any of these rights, email support@nokoverse.com. We will respond within 30 days.

Grievance Officer

In accordance with India's Digital Personal Data Protection Act, 2023, we have appointed a Grievance Officer to address questions and complaints about how we handle personal data:

Sagar Thakker, Grievance Officer
WONDERLOOM CREATIONS PRIVATE LIMITED (Noko Toys)
8 Satva Homes, Nr. G.S.T. Compound, Nr. Khodiyar, Digvijaynagar, Ahmedabad City, Ahmedabad - 382470, Gujarat, India
Email: support@nokoverse.com

We will acknowledge and respond to grievances within the timelines required by applicable law.

Changes to This Policy

If we make meaningful changes to this policy, we'll let you know through the app or our website before the changes take effect. We will seek fresh consent if the changes affect how we handle your child's data.

Questions?

We're happy to help. Reach out anytime:

WONDERLOOM CREATIONS PRIVATE LIMITED (Noko Toys)
8 Satva Homes, Nr. G.S.T. Compound, Nr. Khodiyar, Digvijaynagar, Ahmedabad City, Ahmedabad - 382470, Gujarat, India
Email: support@nokoverse.com
Phone: +91 7016170413
Website: https://nokoverse.com