Privacy Policy
Koda · Last updated: May 9, 2026
This Privacy Policy explains how Koda ("we," "our," or "the app") collects, uses, and protects information when you use our mobile application. By using Koda, you agree to the practices described here.
1. Information we collect
- Account information. Email address and authentication credentials, handled by our authentication provider (Supabase). We do not store your password directly.
- Profile data. Display name, learning preferences, progress, streaks, and achievements you generate while using the app.
- Optional profile picture. If you choose to set one, you may grant Koda access to your camera or photo library. Images are stored on our backend and used only to display your profile.
- Device and usage data. Anonymous diagnostic data such as crashes, app version, OS version, and feature usage to improve the product.
- Advertising identifier. If you consent (iOS ATT prompt) and where applicable on Android, we collect your device's advertising ID to serve relevant ads via Google AdMob and to keep Koda free.
- Purchase data. Subscription and purchase status managed by RevenueCat and the Apple App Store / Google Play. We do not see or store your payment card details.
2. Permissions we request
- Camera — only when you tap "take a photo" while setting a profile picture. We do not access the camera at any other time.
- Photo library — only when you choose an existing image as your profile picture.
- Notifications — to send streak reminders and learning nudges. You can disable these in your device settings.
- Network — required to sync your progress and load lessons.
- Advertising ID (Android
com.google.android.gms.permission.AD_ID) — used by AdMob for ad personalization and frequency capping. You can opt out in your device's ad settings.
3. How we use information
- To provide and maintain the app (sign-in, syncing progress, lesson delivery).
- To personalize content and remember your learning state across devices.
- To process subscriptions and unlock premium features.
- To diagnose crashes and improve performance.
- To serve ads (free tier only) via Google AdMob.
4. Third-party services
Koda uses the following third parties, each governed by its own privacy policy:
- Supabase — authentication, database, storage.
- RevenueCat — subscription management.
- Google AdMob — advertising.
- Expo — over-the-air updates and build infrastructure.
5. Data retention and deletion
Your account data is retained while your account is active. You can request account and data deletion at any time by emailing the address below; we will process the request within 30 days.
6. Children's privacy
Koda is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can delete it.
7. Your rights
Depending on your jurisdiction (e.g., GDPR, CCPA), you may have the right to access, correct, port, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at the address below.
8. Security
We use industry-standard encryption in transit (HTTPS/TLS) and at rest. No system is 100% secure, but we work to protect your data with reasonable safeguards.
9. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be communicated via the app or email. The "Last updated" date at the top reflects the latest revision.
10. Contact
Questions or requests? Email skeletont638@gmail.com.