Privacy policy

In short

A parent creates the account. Children never sign up or enter an email address.
For each child we keep only a first name or nickname, age, chosen animal and learning progress.
No ads, no advertising identifiers, no third-party analytics or tracking, and we never sell data.
The microphone is used only in the moment for speaking games. We don't record or store your child's voice.
You can delete your account and all your children's data at any time from the Parent Area.

1. Who we are

Kululu is provided by Mmogo Media (Pty) Ltd, a company registered in South Africa ("we", "us"). We are the responsible party (data controller) for the personal information described in this policy.

Our Information Officer is Tawanda Makunike. You can reach us at support@kululu.kids.

This policy covers the Kululu app for iPad and iPhone and this website, kululu.kids. We follow South Africa's Protection of Personal Information Act (POPIA), and apply the same care to families in other countries, including under the EU and UK GDPR and the US Children's Online Privacy Protection Act (COPPA) where they apply.

2. What we collect

Information	What it is	Why we need it
Parent account	Your email address, and a password you choose (stored only as a secure hash by our authentication provider). If you use Sign in with Apple, we receive the email address Apple shares, which may be a private relay address.	To create your account, sign you in on your devices, and contact you about your account.
Child profiles	For each child: a first name or nickname, age, and the animal they choose. Up to 6 children per account.	To show the right activities for each child's age and let them find their own profile.
Learning progress	Stars earned in each activity and a history of when stars were earned.	To track progress, adjust difficulty and keep progress in sync across your devices.
Family circles (optional)	A circle's name, its invite code, the family name you choose, which families are members, and sticker cheers sent between children in the circle.	To let families you invite see each other's children's first names and weekly stars, and send cheers.
Subscription status	The signed transaction record the App Store gives the app for your Kululu Premium subscription, which confirms the product, dates and that it's active. We never receive your card or bank details.	To confirm you have Premium before providing Premium features such as the name voice.
Offer views	Which subscription offer was shown to your account, where in the app, and the App Store country.	To show fair, relevant offers and understand which offers work, in aggregate.
Name voice (optional, Premium)	Your child's first name, used to create short spoken recordings of Kululu and Juno saying it, and a record of when a new name was recorded.	To let Kululu greet your child by name, and to limit how many new names can be recorded.
Waitlist (optional)	The parent's email address, if you join the waitlist on this website.	To send your launch offer for iPhone, iPad or Android and to tell you when Kululu arrives on Android. We don't use it for advertising and don't share it. You can ask us to remove it at any time.
Support messages	Anything you choose to tell us when you email us.	To help you.

Some things are kept only on your device and never sent to us: your settings, whether you've seen onboarding, downloaded name recordings, and your sign-in session (kept in the device's secure keychain).

3. What we don't collect

No advertising or tracking. Kululu has no ads, no advertising identifiers and no third-party analytics or tracking tools, and does not track you across other apps or websites.
No voice recordings. In speaking games Kululu listens only while the game is running. Speech recognition runs on your device where the device supports it; on devices that don't, Apple's speech recognition service processes the audio under Apple's privacy policy. Loudness in adventures is measured on the device. We don't record, store or receive your child's voice.
No drawings. Pictures made in Create stay on the screen and are not saved or uploaded.
No location, contacts, photos, camera or surnames. We never ask for them.
No payment details. Apple handles all payments.

4. How we use information

We use the information above only to:

provide Kululu, including syncing children and progress across your devices;
provide and verify Kululu Premium;
run optional features you switch on, such as family circles and the name voice;
keep Kululu secure and prevent abuse, such as limiting how many new name recordings can be made;
answer your questions and send important messages about your account, such as password resets; and
improve Kululu using aggregated information that doesn't identify you or your child.

We rely on your consent as parent or guardian for information about your children, on our contract with you to provide the service, and on our legitimate interest in keeping Kululu secure. You can withdraw consent at any time by switching off an optional feature or deleting your account. We do not use information for advertising, we do not build profiles of children, and we do not make automated decisions that affect you.

5. Children's privacy

Only a parent or legal guardian aged 18 or over can create a Kululu account and add children.
We ask only for a child's first name (a nickname is fine) and age. We never ask children for an email address or any contact details.
Anything that leaves the play area, such as settings, purchases, links and account actions, is behind a grown-up check.
Children can't chat or send free text. In family circles, children can only send a fixed set of spoken sticker cheers to families their parent has chosen to join.
Parents can review, change or delete their children's information at any time in the Parent Area, or by emailing us.

If you believe a child has created an account without a parent, contact us and we will delete it.

We never sell or rent personal information. We share it only with service providers that help us run Kululu, under contracts that require them to protect it and use it only on our instructions:

Provider	What they do	Information involved
Supabase	Database, sign-in and file storage	Account, child profiles, progress, family circles, subscription status, offer views, name recordings
fal.ai	Text-to-speech used to create name-voice recordings	Only the text of the lines to be spoken, which include your child's first name. No account, device or other details are sent.
Apple	App Store payments, Sign in with Apple, and speech recognition on devices that can't do it on the device	Handled under Apple's own privacy policy
Pairly	Our customer relationship (CRM) and email tool	The email address of people who join the waitlist, and the fact that they joined
Vercel	Hosts this website	Standard web server logs, such as IP address and pages requested

We may also disclose information if the law requires it, to protect the safety of a child or others, or as part of a sale or reorganisation of our business, in which case this policy will continue to apply.

Other families in a family circle you join can see your children's first names, animals and weekly stars, and the family name you choose. They cannot see your email address or anything else.

7. Where information is stored

Kululu's database and files are stored by Supabase in the European Union (Ireland). The name-voice service, fal.ai, is based in the United States. When information leaves South Africa, we rely on the protections POPIA requires, such as the recipient being subject to laws or binding agreements that give comparable protection.

8. How long we keep information

We keep your information for as long as you have a Kululu account. When you delete your account in the Parent Area, we immediately and permanently delete your account, your children's profiles, their progress and star history, your family circles and memberships, cheers sent and received, subscription records, offer views and name-voice records.

To make recordings efficient, a name such as "Lily" is recorded once and reused for every child with that name. These shared recordings are not linked to you once your account is deleted, and contain only the spoken name. Copies of deleted data may remain in encrypted backups for a short time until those backups are overwritten on a rolling basis.

Support emails are kept for up to two years, then deleted.

9. Your rights

You can ask us to:

tell you what information we hold about you and your children, and give you a copy;
correct information that's wrong (you can also do this in the Parent Area);
delete your information (you can also do this in the Parent Area); and
stop using information for a particular purpose, or withdraw your consent.

Email support@kululu.kids from the address on your account. We'll reply within 30 days, and we won't charge you. If you're not happy with our response, you can complain to South Africa's Information Regulator (inforegulator.org.za) or, if you live in the EU or UK, your local data protection authority.

10. Security

All information is encrypted in transit. Access to each family's data is restricted at the database level so that a family can only reach its own information, and your sign-in session is stored in your device's secure keychain. We never see your password. No system is perfectly secure, but we work hard to protect your family's information, and we'll tell you and the Information Regulator promptly if a breach affects you.

11. This website and cookies

kululu.kids uses Google Analytics, which sets cookies, to count visits, see which buttons people use and how many join the waitlist. With your agreement, we also use this information through Google Ads to show Kululu ads to grown-ups who have visited the site. Google receives your IP address, browser details and the pages you visit. It never receives your email address, and we never use waitlist emails for advertising.

When you first visit, a banner lets you accept or decline these cookies. If you're in the EU, UK or Switzerland, nothing is set until you accept. You can change your choice at any time with , found at the bottom of every page, or block cookies in your browser. Your choice is stored on your device, not in a cookie.

The website loads no other third-party scripts, and the Kululu app itself has no ads, analytics or tracking. If you join the waitlist, your email address is passed through our hosting provider to our database provider, Supabase, and to our CRM and email tool, Pairly, and stored there until we've sent the launch email or you ask us to remove it. Our hosting provider keeps standard server logs for security and reliability.

12. Changes to this policy

If we make important changes, we'll tell you in the app or by email before they take effect, and we'll always ask for consent again before collecting new kinds of information about children. The date at the top shows when this policy last changed.

13. Contact us

Mmogo Media (Pty) Ltd
Johannesburg, South Africa
Information Officer: Tawanda Makunike
Email: support@kululu.kids