Privacy

Who we are

Kubly is a trading name of KUBLY LTD, a company registered in England and Wales (company number 17512828), whose registered office is Suite RA01, 195-197 Wood Street, London E17 3NU. KUBLY LTD is the data controller for the information described here. Registered with the Information Commissioner’s Office, no. ZC272303.

If you have any question about your information, or your child's, email support@kubly.app. A person will answer.

The short version

• You are the account holder, not your child. You give us your child's first name, age and a few interests so that stories and activities fit them. We never ask a child to make an account or give us their details directly.
• What you type is used to make what you asked for, and for nothing else. Your ideas, your child's homework answers and any photo you upload go to the AI services that write the story, draw the picture or check the answer. They are not used to train those services' models, and we never sell or share them with advertisers. There is no advertising in Kubly.
• Before anything is made, we check it. Every idea is passed through an automated safety check, and photos are checked before they are stored or converted. Nothing a human reads. If we are unsure, you decide, with your parent PIN.
• Uploaded photos are deleted as soon as they have been used — a family photo for a colouring page, or a photo of a homework sheet, is gone the moment the page or the questions have been made from it.
• Everything else stays until you delete it. Stories, colouring pages, activities and homework sessions live in your account so your child can come back to them. Delete any one of them, a child's profile, or the whole account, whenever you like, from inside the app.
• The tutor's working notes are short-lived. Behind each homework session the tutor keeps notes of what it was told and what it decided. Your child's words are removed from those notes after 30 days, automatically.
• Your information lives in the EU, on servers in Frankfurt, and is sent to the United States only for the moments the AI services need it to do their work.
• We count how Kubly is used, not what is in it. To see which parts are useful and where parents get stuck, we record that a story was made, a page printed or a plan chosen — against a scrambled account reference, with no cookie, and never the story, picture, idea or your child's name.

What Kubly is and who uses it

Kubly makes personalised stories, printable colouring pages, puzzles and games, and step-by-step homework help for a child, on request. A parent or carer opens the account, adds one or more child profiles, and chooses what to make. The child may use Kubly alongside them or on their own device under their account — reading a story, tracing a maze, or typing answers to the homework tutor.

There are no child accounts. Every account belongs to an adult, and every piece of information about a child is given to us by that adult. You must be 18 or over to open an account.

When this policy says you, it means the account holder. When it says your child, it means the person a child profile describes.

What we collect

Only what is needed to run Kubly. Nothing here is inferred, bought in, or taken from other services.

We do not collect location, contacts, precise device identifiers, or anything from your child's other apps. There is no advertising and no tracking for advertising.

The AI part, plainly

Kubly does not have its own AI. When you ask for something, we send the request to two specialist services, and their answer becomes your story, picture, activity or homework hint.

Anthropic (the makers of Claude) writes the words: stories, activity content, the homework tutor's messages. It also reads homework photos to find the questions, and runs the safety check on every idea and photo before anything is made.

fal.ai draws the pictures: story illustrations and colouring pages, including turning an uploaded photo into a colouring page.

What each of them sees is the minimum needed for that one request:

• Your child's first name and age, and the interests you chose, when a story or activity is being made for them. This is what makes it their story rather than a generic one. Age is also how the tutor pitches an explanation.
• The idea or question you or your child typed.
• For the homework tutor, the conversation so far in that session, so its next hint follows on from the last one.
• The photo you uploaded, for a colouring page or homework sheet.

Neither service sees your email address, your name, your account or your payment details. Neither may use what we send to train its models: Anthropic's terms say so outright, and fal.ai's licence over what we send is limited to providing its service, though fal.ai may use anonymised, aggregated usage statistics to improve that service. Both are in the United States; see Where your information is kept for how that transfer is covered.

Every request is checked before it is sent. An automated check reads the idea (or photo) and decides whether it is fine, needs a parent's say-so, or should not be made at all. Nothing is reviewed by a person. If the check is unsure — a story about a pet dying, say — you can approve it with your parent PIN, and that approval is recorded (the category and a fingerprint of the text, not the text itself). If the check says no, nothing is made, nothing is stored and you are not charged.

Your child is told it is an AI. Bexo, the character who presents everything in Kubly, introduces itself to children as an AI helper — a computer program, not a person — on the home screen, on everything it makes for them and at the start of every homework session, and the homework tutor is instructed to say so plainly if a child asks whether it is real. A short “Using Kubly safely” note, written for children, sits in the Homework Helper.

The AI can still get things wrong. Stories may contain mistakes; a homework hint may be off. Please read what Kubly makes before your child does, the way you would with anything from the internet. What you type is your responsibility — Kubly makes what it is asked for, within the checks above.

Children

Kubly is made for children to use, so we follow the ICO's Age Appropriate Design Code (the Children's Code). What that means in practice:

• The most private setting is the only setting. There is nothing about your child to opt into or out of. The one optional box at sign-up — news about new features — is about you, the parent, and is never ticked for you. No advertising, no profiling for marketing, no sharing with anyone except the services that make the content, no location.
• We ask for as little as possible about your child. A first name (a nickname works), an age and a few interests. We do not need, and do not ask for, a surname, date of birth, school, address or photo of them for the profile.
• A child cannot give us their details directly. All profile information comes from the account holder. The free-text boxes a child might type into (a story idea, a homework answer) are checked automatically, and anything that looks like a phone number, address, postcode or email is stopped before it goes anywhere.
• Parents stay in charge. Anything the safety check is unsure about needs the parent PIN. The PIN can be set or changed only after entering the account password, and it locks after five wrong guesses. Deleting content, a profile or the account is a parent action.
• No nudging. Kubly does not use streaks, timers, rewards or notifications to keep a child using it longer.
• Homework records are for the child's benefit. The tutor keeps which questions were tried and which hints helped, so it can pick up where the child left off. We also look at conversations, with names removed, to make the tutor better at explaining. They are never used to grade, rank or profile your child, and never shared with a school.
• Improving Kubly's helpers is done by people, not by training. To make the story writer, the activity maker and the homework tutor better, we may read a sample of what was asked for and made, with your child's name removed. Nothing your child makes or says is used to train an AI model, ours or anyone else's, and you can ask us to leave your account out (see Your rights).

We have carried out a data protection impact assessment for Kubly, because it processes children's data. A summary is available on request.

Who we share with

We do not sell information, and we do not share it with advertisers or data brokers. The companies below process information on our instructions, under contracts that limit what they can do with it, and only for the purpose stated.

We would also disclose information if the law required it — a court order, say — or if it were necessary to protect a child from serious harm. Neither has happened.

If Kubly were ever sold or merged, your information would go with it, under this policy, and we would tell you beforehand.

Where your information is kept, and for how long

Where. Your account, your children's profiles and everything Kubly has made for you are stored with Supabase in Frankfurt, Germany, inside the EU. The AI services are in the United States. When we send them a request, it is covered by the UK's data bridge to the US and by standard contractual clauses in our agreements with them, and each holds what we send only long enough to answer (Anthropic for up to 30 days for abuse monitoring, then deleted).

For how long

Deleting your account. Settings → Account → Delete account removes your account, every child profile, everything made for them, the homework records and the safety records, in one step. It cannot be undone. Your subscription is cancelled at the same time. Stripe keeps the payment records the law requires. To stop free credits being claimed more than once, we keep a one-way coded version of your email address after you delete your account. It can't be turned back into your email, and we use it only for this check.

Your rights

Under UK data protection law you can:

• See what we hold about you and your child, and get a copy. Everything made for a child, and every homework conversation, is already visible in the app under your account; for a complete copy, including the records behind it, email us.
• Correct anything that is wrong. Profiles and your account details can be edited in Settings.
• Delete any story, page, activity or homework session, a child's profile — and with it everything made for them — or the whole account, from inside the app. If you would rather we did it, email us.
• Take it with you. Stories and colouring pages can be printed or saved from the app. If you want a full export of your account in a machine-readable form, email us and we will send it within a month.
• Object to, or ask us to restrict, a particular use. The only uses we make beyond running the service are improving Kubly's helpers — the story writer, the activity maker and the homework tutor — by reviewing anonymised stories, activities and homework sessions with your child's name removed, and counting how Kubly is used. Tell us and we will exclude your account from either.
• Complain. We would rather hear from you first, at support@kubly.app. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

We answer within one month. We will ask you to confirm you are the account holder before acting on a request — usually by replying from the account's email address.

The legal bit. We process your information because we need to in order to provide Kubly to you (performance of a contract); to keep the service safe and secure, to handle complaints, to improve Kubly's helpers by reviewing anonymised sessions and to understand how Kubly is used (our legitimate interests, weighed against your child's, and never in a way that overrides them); and where the law requires it (tax records). For counting visits to our public pages we rely on your consent, given on the banner and withdrawn just as easily with “Cookie settings”. We do not rely on consent for anything else, so there is nothing else to withdraw — but you can stop all of it by deleting your account.

Parents in the United States

If you are in the United States, the Children's Online Privacy Protection Act (COPPA) applies to the information Kubly holds about your child. This is how Kubly meets it; the rest of this policy is the detail.

• Who the operator is. KUBLY LTD, named under Who we are at the top of this page, reachable at support@kubly.app. No one else collects or holds your child's information through Kubly.
• Only parents have accounts. You must be 18 or over to open one, and you confirm that at sign-up. Children do not register, are not asked for an email address or a password, and cannot create an account of their own. There are no accounts for children under 13 or for anyone under 18.
• What we collect about a child, and from whom. From you: a first name or nickname, an age, a few interests and a chosen avatar. From your child, as they use Kubly under your account: the ideas they type, their homework questions and answers, and the tutor conversation. Nothing else. We do not collect a surname, date of birth, school, address, photo, location or any identifier from a child, and nothing a child types is made public or shared with other users.
• How you give consent, and how we verify it. You consent when you open the account and when you add a child profile. We verify that you are the account holder in two steps: the email address you sign up with must be confirmed by a link we send to it, and when the first child profile is added we send a second, separate notice to that address setting out what we hold about the child, why, who sees it and your rights, with the means to object. Where you pay for a plan, the card payment is a further verification. We do not disclose children's information to third parties for their own purposes, which is what allows this email-based method; the services that act for us are listed under Who we share with and may use the information only to do that work.
• Your rights. You can review everything about your child in the app at any time; ask us for a complete copy; correct or delete a profile, anything made for it, or the whole account from Settings; and refuse any further collection or use by deleting the profile or the account. We will not condition your child's use of Kubly on providing more information than it needs.
• Retention. How long each kind of information is kept is set out under Where your information is kept, and for how long; nothing about a child is kept longer than it is needed for the purpose it was collected for, and everything goes when you delete it.
• Security. The measures under Security below are how we keep your child's information confidential and intact; the services that act for us are held to the same by contract.

Questions, requests or complaints about your child's information: support@kubly.app. We answer within one month.

Security

Everything travels over encrypted connections and is stored encrypted at rest. Passwords and the parent PIN are stored as one-way hashes; we cannot read either. Each account can only ever read its own rows in the database — that is enforced by the database itself, not just by the app. The keys that let our server talk to the database and the AI services are never present in the app your browser runs. Access to production systems is limited to the people who run Kubly, and every action the server takes on your behalf is tied to your signed-in session.

If we ever had a breach that put your information at risk, we would tell you within 72 hours of finding out, and tell the ICO.

Cookies and things stored in your browser

We use no advertising cookies and no third-party trackers. Our public pages set one analytics cookie only if you accept the banner there; inside the app we count how Kubly is used without setting any cookie — nothing is stored on your device for it (our Cookie notice explains both). What we do store:

Because none of these is used to track you across sites or for advertising, there is no banner inside the app. The banner on our public pages is the only place we ask; it asks before anything is set, and “Cookie settings” at the foot of those pages lets you change your answer at any time.

Changes to this policy

When we change something that matters — a new service that sees your information, a change to what we collect or how long we keep it — we will email the account holder before it takes effect and put the date at the top of this page. Small wording changes we will just make. Previous versions are available on request.

Version 1.11 — 24 October 2026. See also our Terms.