Last updated: 18 August 2026
While we prepare for launch, the data is handled by the KROOKY team. We will publish the legal entity details here before the app is released, and a formal address for requests along with them. For now, write to hello@krooky.app with any question about data; we answer within 30 days, usually sooner.
The KROOKY app is being prepared for release. Only this website is running, and the single thing it collects is an adult’s email address left in the waiting list form. The sections below also describe what the app will collect, so that you know in advance.
The account is created by an adult, and every detail about a child is entered by that adult: name, age, gender, interests, photos of toys. A child does not register, leaves no contact details and does not communicate with other users. This website collects no children’s data at all.
In the app: the parent’s email address, the child profile (name, age, gender, interests, adventure preferences), toys with the names the child gave them and their descriptions, photos of toys and completed quests, adventure history with ratings, and AI observations about the child that you confirmed. On the website: only the email address, the date of consent and the fact that the request came from the landing page.
The data exists so that adventures are about this child’s real toys and match their age. The basis for the launch email is your consent, which you can withdraw at any time. The basis for everything else is performing our agreement with you — that is, running the app itself. We do not sell data and do not share it for advertising.
Photos of toys and completed quests are kept in private storage. No public links to them exist: access is granted through a short-lived signed link after we verify that the account owner is asking. We do not publish these pictures and do not use them in advertising.
To recognise a toy and invent a story we call external AI providers and send them only what a specific request needs: a photo of the toy, its name, the child’s age and interests. Such providers may sit outside your country of residence. While the app is unreleased nothing goes to them — there is nothing to ask about yet. We will publish the list of providers and processing regions here before release. An observation the AI made about a child does not become memory until you confirm it.
Connections to the site and the app are protected by TLS. Passwords are stored only as hashes, access to a child’s data is verified on the server for every request, and photo storage is closed to direct access. Servers and the database are located in the European Union, in the Netherlands.
The address from the waiting list is kept until the release and the announcement about it; withdraw your consent and we delete it immediately. Account data is kept while the account exists. There are no backups at this stage: the only thing stored is waiting list addresses. We will describe the backup routine here before release.
You can obtain a copy of your data, correct it, delete an individual toy, a photo, the AI memory, a child profile or the whole account, and withdraw consent to the mailing. Some of this is done inside the app, the rest by writing to hello@krooky.app. We answer within 30 days, usually sooner.
The site sets no cookies. We count visits ourselves, on our own server: how many people opened a page and how many left an email. That data goes nowhere, it cannot identify a particular person, and we have no advertising trackers — nor will we have behavioural retargeting aimed at children.
We will update this document before the app is released and will announce material changes to those who left an email.
Privacy questions and data requests: hello@krooky.app.
This policy may be updated. We publish changes on this page and notify parents by email when the changes materially affect their rights.