Privacy Policy

Effective Date: April 16, 2026

Keopi ("we", "us", "our") is an AI literacy app designed for learners of all ages. We take your privacy seriously — especially for younger users. This policy explains what data we collect, how we use it, and your rights.

1. Data We Collect

Stored on your device only (never sent to our servers):

Display name (optional, chosen by you)
Age tier (child, teen, or adult — we do not store your exact birth year on any server)
Learning progress, streaks, achievements, and exercise completions
App preferences (notification settings, difficulty level, theme)

Sent to our servers only when you use specific features:

AI Sandbox conversations: Messages you type are sent to our server (hosted on Vercel) and forwarded to Anthropic's Claude API for response generation. Conversations are not stored on our servers — they exist only in your device's memory during the session.
News feed: Your age tier (teen or adult) is sent as a query parameter to load age-appropriate content. No other identifying information is transmitted.
Daily exercises: Your age tier is sent to generate age-appropriate exercises. No other identifying information is transmitted.

On-device AI (Apple Foundation Models):

Some AI features run entirely on your device using Apple's Foundation Models framework. These interactions never leave your device and are not accessible to us.

2. Children's Privacy (COPPA Compliance)

Keopi is designed to be safe for users aged 8 and up. For users under 13:

We do not collect personal information from children under 13.
The AI Sandbox feature is not available to users in the "child" age tier (ages 8–12).
The news feed is not available to users in the "child" age tier.
All learning data is stored locally on the device and is never transmitted to our servers.
Age tier is determined during onboarding and used solely to gate content appropriateness.
We do not use cookies, trackers, or third-party analytics.

3. Third-Party Services

Anthropic (Claude API): Powers AI conversations in the Sandbox. Anthropic's privacy policy applies to data processed by their API. We send only your message text and conversation context — no personal identifiers.
Vercel: Hosts our serverless API. Request logs may be retained per Vercel's standard policy.
Upstash (Redis): Caches generated news content server-side. No user-identifiable data is stored.
Apple (StoreKit): Processes subscriptions. Apple's privacy policy governs purchase data.
Google News RSS: Used server-side to resolve article source URLs. No user data is sent to Google.

4. Data We Do NOT Collect

Real names, email addresses, or phone numbers
Location data
Device identifiers or advertising IDs
Photos, contacts, or other device data
Analytics or usage tracking data sent to third parties
Cookies or cross-site tracking

5. Subscriptions

Keopi offers optional auto-renewable subscriptions through Apple's App Store. All payment processing is handled by Apple. We do not receive or store your payment information. Subscription status is verified locally on your device via StoreKit 2.

6. Data Deletion

You can delete all your data at any time from the Profile tab in the app. This removes:

All local learning progress, achievements, and streaks
All app preferences and settings
All cached content (news, exercises)

Since we don't store your data on our servers, there is no server-side data to delete.

7. Data Security

All network communication uses HTTPS encryption. On-device data is protected by iOS Data Protection (encrypted at rest when your device is locked). We validate all URLs to ensure HTTPS-only connections.

8. Changes to This Policy

We may update this policy as the app evolves. Material changes will be communicated through an in-app notice. The effective date at the top of this page indicates the latest revision.

9. Contact

Questions about this privacy policy? Reach us at:

privacy@keopi.xyz

Keopi is made with care in the USA. We believe AI literacy should be accessible, safe, and fun for everyone.