Privacy Policy
Important Notice: OMore is a platform designed for children aged 8–14. We take the privacy and safety of children extremely seriously. This Privacy Policy explains how we collect, use, store, and protect information. A parent or guardian must review and accept this policy before their child uses OMore.
1. Who We Are
OMore is operated by Kokoverse ("we", "us", "our"). We are committed to protecting the privacy of all users, with particular care given to users under the age of 13 (and under 18 for users in India), in compliance with the Children's Online Privacy Protection Act (COPPA), India's Digital Personal Data Protection Act 2023 (DPDP Act), the UK Age Appropriate Design Code, and other applicable privacy laws.
Contact: look@omore.app
Website: omore.app
2. Who This Policy Applies To
This policy applies to:
- Child users (ages 8–14) who use the OMore app.
- Parents and guardians who manage accounts on behalf of their children.
3. Our Core Privacy Principles
- Minimal data collection: We only collect what is strictly necessary to operate the Platform.
- No behavioural advertising: We do not use personal data to serve targeted advertisements.
- No individual tracking: Analytics are always aggregated and anonymous — we never build individual behavioural profiles.
- No data selling: We never sell personal information to third parties.
- Parental control first: Parents have full visibility and control over their child's data at all times.
- Privacy by design: Our systems are built from the ground up to meet the requirements of COPPA, the DPDP Act, and the UK Age Appropriate Design Code.
- Emotional content protection: Content created in private wellbeing features (such as the Worry Jar) is never shared, published, or used for any purpose beyond the child's own private access and parental oversight.
4. Information We Collect
4.1 Information Provided at Registration
When a parent creates an account for their child, we collect:
| Data | Purpose | Required? |
|---|---|---|
| Child's first name and display name | Personalise the experience; shown to friends within the Platform | Yes |
| Age | Enforce age-appropriate protections under COPPA and the DPDP Act | Yes |
| School name | School-based friend discovery only | Optional |
| City and country | Content localisation and safety | Yes |
| Parent or guardian email address | Parental consent verification, account communication | Yes |
We do not collect: full legal names (beyond a first/display name), home addresses, phone numbers, social security numbers or government IDs, or payment information (OMore is free to use).
Note on school name: Where provided, school name is used solely to enable the school-based friend discovery feature. It is not shared with third parties, is not used for advertising, and is stored only for as long as the account is active.
4.2 Authentication Data
Account login is handled via Apple Sign-In. We receive a unique Apple user identifier and, if the parent permits, the parent's email address. We do not receive or store passwords.
4.3 User-Generated Content
Creative content produced within the Platform is stored on our servers, including: stories and narrative writing, artwork and design creations, journal entries, quiz questions and responses, podcast and audio recordings, presentations and slideshows, and business plan documents.
Worry Jar entries are subject to heightened privacy protections. This content is never published, never shared with other users, never used for any licence purpose described in the Terms & Conditions, and is not accessible by OMore administrators except in genuine safeguarding circumstances where there is reason to believe a child may be at risk of harm.
4.4 Device and Usage Data
For platform performance, safety, and improvement purposes, we may collect: device type and operating system version, app version, session timestamps, feature usage patterns (which tools are used — not what is created in them), and crash reports and error logs.
This data is used in aggregated, anonymous form only. We do not build individual usage profiles.
4.5 AI Interaction Data
When a child interacts with the AI Helper, the text of their request is sent to our AI service provider's API for processing. All requests pass through our content filtering layer before and after processing.
| Data | What Is Stored | Who Can Access | Retention |
|---|---|---|---|
| Session metadata | Session start/end time, feature type, message count. No message content. | Aggregated analytics only | Until account deletion |
| Individual messages | Full text of exchanges between child and AI Helper | OMore administrators (content moderation and child safety only) | Until account deletion |
| AI usage events | Service type, model used, tokens consumed — associated with child's account | OMore administrators (safety monitoring and cost management) | Until account deletion; anonymised thereafter |
| Flagged messages | Messages identified as potentially inappropriate | OMore moderation team | Until reviewed and resolved |
Parents may request a summary of their child's AI Helper interaction history by contacting look@omore.app. Requests will be fulfilled within 30 days.
5. How We Use Information
| Purpose | Data Used |
|---|---|
| Provide and personalise the OMore experience | Display name, age, location, usage data |
| Enforce child privacy protections (COPPA, DPDP Act) | Age |
| Verify parental consent | Parent email, consent timestamp, terms version |
| Enable friend discovery | Display name, school name (if provided), username |
| Content moderation and safety | User-generated content, AI interaction messages |
| Platform performance and improvement | Aggregated, anonymous usage data |
| Parental oversight via Parent Portal | All child account data |
| Audit and legal compliance | Consent timestamp, terms version accepted |
| Safeguarding | Worry Jar content (in defined circumstances only) |
We do not use personal data for: targeted or behavioural advertising, user profiling or scoring, sale to third parties, cross-platform tracking, or external promotional use without separate explicit opt-in consent.
6. Child Privacy Compliance by Jurisdiction
6.1 United States — COPPA
For users in the United States, we require verifiable parental consent before collecting personal information from children under 13. Our consent mechanism uses Apple Sign-In to establish that the consenting party is an adult, supplemented by a parent email verification step.
6.2 India — DPDP Act 2023
For users in India, the DPDP Act applies to children under 18. We therefore require parental consent for all users on the Platform, regardless of age. We do not undertake behavioural tracking, targeted advertising, or profiling of any child user.
6.3 United Kingdom — UK GDPR and Age Appropriate Design Code
We apply the standards of the UK Children's Code (Age Appropriate Design Code) by default across the Platform, not only for UK users. This includes: privacy-protective default settings, minimal data collection, no use of nudge techniques, no profiling for non-essential purposes, and clear age-appropriate language in privacy information.
6.4 European Union — GDPR
For users in the European Union, the legal basis for processing children's personal data is parental consent under GDPR Article 6(1)(a) and Article 8. Parents may withdraw consent and exercise data subject rights as described in Section 12.
7. Parental Rights and Controls
7.1 What Parents Can Do at Any Time
- Review all information held about their child's account.
- Update account information through the Parent Portal or by contacting us.
- Delete their child's account and all associated personal data (within 30 days of request).
- Withdraw consent — which will result in account closure and data deletion.
- Opt in to or withdraw from external promotional use of their child's creative content.
- Adjust privacy, social, and content filtering settings for their child.
- Disable the Bark Board publishing feature for their child.
- Request a summary of their child's AI Helper interaction history.
To exercise any of these rights, contact look@omore.app or use the Parent Portal within the app.
7.2 Children Under 13
We do not knowingly collect personal information from children under 13 without verified parental consent. If we discover that data has been collected from a child under 13 without consent, we will delete it promptly and notify the parent where possible.
8. Analytics and Tracking
8.1 What We Track (Aggregated and Anonymous Only)
- Total content created platform-wide (counts, not content)
- Content type distribution
- Engagement metrics (total compliments, total views) — aggregated only
- Moderation statistics
- Platform usage patterns (time-based aggregates)
8.2 What We Do Not Track
- Individual user reading or browsing behaviour
- User location beyond the city and country provided at registration
- Personal browsing patterns or cross-platform activity
- Persistent individual behavioural identifiers
8.3 No Third-Party Analytics or Advertising SDKs
We do not use Google Analytics, Facebook Pixel, or any other third-party tracking or advertising services. No child's data is shared with advertisers or external marketing platforms through the use of the OMore app.
9. Content Moderation
Content shared on the Bark Board and audio or video content submitted through the Platform's creative tools are reviewed by our moderation team before publication. Moderation is conducted to ensure content is age-appropriate and that no personal information is disclosed.
Moderation data (reports, decisions, and actions taken) is retained for 12 months for safety and compliance purposes. Moderation analytics are anonymised and do not identify individual users.
10. Data Sharing
| Recipient | What Is Shared | Why |
|---|---|---|
| AI service provider (via API) | Text of current AI Helper session only | To power the AI Helper feature |
| Firebase (Google Cloud Platform) | App data and authentication | Our backend infrastructure provider |
| Educational research partners | Anonymised, aggregated platform statistics only | Platform improvement and research |
| Law enforcement | Data required by a valid legal order | Legal obligation |
All third-party providers are subject to data processing agreements that prohibit them from using OMore data for their own purposes. We never sell personal data. We never share identifiable child data with advertisers.
11. Data Retention
| Data Type | Retention Period | Notes |
|---|---|---|
| Account and profile data | Until account deletion request | |
| User-generated creative content | Until account deletion or specific removal request | |
| Worry Jar entries | Until account deletion or parent removal request | Heightened access controls apply |
| Personal data after account deletion | Removed within 30 days | |
| Parental consent records | 7 years | Legal compliance requirement |
| Moderation logs | 12 months | Anonymised after this period |
| Aggregated, anonymous analytics | Up to 2 years | Not personal data |
| AI session metadata | Until account deletion | |
| AI individual messages | Until account deletion | Accessible to admins for moderation |
| AI usage events (audit log) | Until account deletion; anonymised thereafter | Required for safety monitoring |
| Flagged AI messages | Until reviewed and resolved, then anonymised |
Note on AI usage events: The audit log of AI API calls is retained in identifiable form for the life of the account for child safety monitoring purposes. Upon account deletion, this log is anonymised rather than deleted, to preserve platform-level safety statistics.
12. Your Rights
Depending on your jurisdiction, you (as a parent or guardian) have the right to:
- Access the personal information held about your child — we will respond within 30 days.
- Correct inaccurate or incomplete information.
- Delete your child's account and associated personal data — completed within 30 days.
- Withdraw consent to processing, resulting in account closure.
- Object to certain uses of data.
- Port your data to another service where technically feasible.
- Complain to a supervisory authority if you believe your rights have been violated.
To exercise any right, contact look@omore.app or use the Parent Portal.
13. Data Storage and Security
All data is stored on Firebase (Google Cloud Platform), which provides encryption at rest and in transit. Access to user data is governed by role-based security rules. In the event of a data breach affecting children's personal information, we will notify affected parents within 72 hours of becoming aware, and report to relevant authorities as required by applicable law.
14. Privacy Settings Defaults
| Setting | Default | Options |
|---|---|---|
| Profile discovery | Friends only | Public / Friends only / Private |
| Show in search | On | On / Off |
| Allow story sharing | On | On / Off |
| Bark Board publishing | Enabled | Enabled / Disabled |
| Content filtering level | Moderate | Strict / Moderate / Permissive |
| Friend request approval | Not required | Required / Not required |
| Friend limit | 50 | Up to 50 |
These defaults are intentionally privacy-protective and meet the minimum safety standards required under the UK Age Appropriate Design Code, which we apply as a baseline globally.
15. Cookies and Local Storage
OMore is a native iOS application. We use Apple's standard device storage (UserDefaults) to store session authentication tokens, terms acceptance records, and user preferences. We do not use browser cookies or cross-site tracking technologies in the iOS app. No advertising or analytics SDKs are embedded in the application.
16. Updates to This Policy
When we make material changes to this Privacy Policy, we will update the version and date at the top, present the updated policy to parents via an in-app prompt, and require parents to read and re-accept before continued use.
17. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your child's data:
Email: look@omore.app
Website: omore.app
We aim to respond to all privacy enquiries within 5 business days and to all formal data rights requests within 30 days.
This Privacy Policy forms part of the OMore Terms & Conditions. By accepting the Terms & Conditions during sign-up, you (as a parent or guardian) also accept this Privacy Policy.