Privacy Policy
Krimo is an app that children use. It records their practice with the camera and shares videos across the family's devices. Because of that, we want to be exact about what we hold and what we don't. This page describes what the app actually does, without hiding behind legal phrasing.
The three things that matter most:
1. Practice you film or record is kept for you, so the family's other
devices can play it back. You can turn this off at any time.
2. Voice used to control the app is not stored.
It is used only to work out what was said, then discarded.
3. There is no advertising and no tracking of any kind.
We do not use third-party analytics either.
01What we collect
Broken down by what each feature actually needs.
| Information | Where it's stored | Why we need it |
|---|---|---|
| Parent's email address | Krimo's servers | To create the account, sign in, and send important notices |
| Profile name, emoji, colour | Krimo's servers | So they look the same on the family's devices. A nickname is fine |
| Videos the family adds (a child may appear in them) |
Krimo's servers | So the same videos are available on the family's other devices |
| Video thumbnails | Krimo's servers | To show them in the library list |
| Practice recorded with the camera or microphone | Krimo's servers (can be turned off) |
To compare with the reference video, and to see it on the family's other devices |
| Voice (voice control) | Not stored | Explained in section 02 below |
| Device identifiers and sync records | Krimo's servers | To remember how far each device has synced |
| Age band | That device only | To set things up appropriately. The birth year itself is not stored |
We never receive card details — payment providers handle those directly. In-app purchases are handled by Apple and Google.
02Children's video and voice
Video showing a child, and audio containing a child's voice, are treated as personal information under children's privacy law. Here is exactly how Krimo handles them.
Practice recorded with the camera or microphone
Video filmed with the camera, and sound captured with the microphone, are kept on Krimo's servers so the family's other devices can play them back. Turn off "Share recordings" in Settings and they stay on the device.
You choose how it is recorded: camera only, camera and sound, or sound only. It starts as camera only, with no sound. Used in a class, a microphone picks up the people around you, so adding sound is always your own decision.
Because a child's face and voice are in them, these are kept for 180 days — shorter than videos themselves (2 years). Anything past that is deleted automatically, and deleting it on the device deletes it from our servers too.
Voice control
Audio is used solely to work out what was said, and is discarded immediately afterwards. No audio is sent to Krimo's servers, and no recording is retained. On Windows, recognition happens entirely on the device. On phones and tablets we use the operating system's speech recognition and request on-device processing where the device supports it.
Videos the family adds
These are meant to be reference videos, but families can also add footage they filmed themselves — in which case a video showing a child would be stored on our servers. If you would rather nothing left the device, turn "Video file sync" off in the app's settings. With it off, video files stay on the device and only titles and settings are synced.
03How long we keep things
We do not keep anything longer than it is needed for. Anything past its period is deleted automatically.
| Information | Retention | Counted from |
|---|---|---|
| Videos and thumbnails | 2 years | The day it was last played |
| Deleted videos | 30 days | The day it was deleted |
| Profiles | While the account exists | — |
| Account information | Until the account is closed | — |
| Sync and access records | 90 days | The day it was recorded |
| Payment records | 7 years | The transaction date (required by law) |
| Practice recorded with the camera or microphone | 180 days | The day it was recorded |
| Voice used for voice control | Not stored at all | |
We always email before a video is deleted for inactivity. The notice arrives 14 days beforehand. To keep a video, just play it once in the app before then — that resets the clock and it will not be deleted. Nothing disappears silently.
04What parents can do
A parent or guardian can, at any time, review what we hold about their child, have it deleted, and refuse any further collection.
- Delete one profile's data — in the app under Settings → Privacy
- Delete the whole account — same screen
- Stop further collection — turn off "Video file sync" and "Share recordings", and neither videos nor practice recordings leave the device
- Review what we hold — contact us using the address below
Deletions made in the app reach our servers straight away, and the video files themselves are removed by a daily process. Deletion cannot be undone.
05Who else is involved
We do not sell anything we hold. We do not use it for advertising. We do not use it to train AI. We rely on the following providers only as far as running the service requires.
| Provider | Role | Children's data involved? |
|---|---|---|
| Hosting provider | Servers | Yes (it is where data is stored) |
| Wasabi | Video file storage | Yes (the videos) |
| Square | Payments | No (parent's payment only) |
| Apple / Google | Sign-in, in-app purchases | No (parent's sign-in only) |
| YouTube (Google) | Playing YouTube videos | Only when played; privacy-enhanced mode is used |
Playing a registered YouTube video contacts Google. We use
youtube-nocookie.com (privacy-enhanced mode) so that YouTube does not store
identifiers until the video is actually played. Google's own privacy policy applies to
that playback.
06Age screening and parental consent
The first time the app opens, it asks what year you were born. This is used to set things up appropriately, and the birth year itself never leaves the device — only whether the user is a child or an adult is kept, on the device.
Before creating an account, making a payment, opening an external site, or sharing, the app asks a simple arithmetic question to confirm an adult is present.
We obtain a parent's consent before collecting a child's information. On a paid plan the payment step serves as that consent; on the free plan, confirming the email address does.
07How we keep it safe
- All traffic is encrypted (HTTPS)
- Passwords are never stored in readable form
- Server access uses key-based authentication only — passwords cannot be used
- No advertising or analytics SDKs are built into the app at all
- We simply do not collect what we don't need — no date of birth, address, phone number, or location
If a breach ever occurs, we will notify affected people and report it to the relevant authorities where required.
08Where you live
Krimo is operated from Japan and is available in other countries. Depending on where you live, you may also have the right to:
- receive a copy of the information we hold
- have inaccurate information corrected
- ask us to restrict how the information is used
- complain to your data protection authority
Contact us at the address below. There is no charge for any of this.
09Changes to this policy
If we change this policy, we update the date at the top. If a change would materially alter how we handle children's information, we will email parents beforehand and ask for consent again.
10Contact
For privacy questions, or to review or delete information, please write to:
For requests about a child, we may ask you to write from the account's email address, or ask additional questions to confirm who you are, so that nobody else can make the request on your behalf.