Privacy Policy

Last updated: July 23, 2026

Koko (“Koko,” “we,” “us”) turns short travel videos into sortable lists of places and day‑by‑day plans, on the web and in our mobile apps for iOS and Android. This policy explains what information we collect, how we use it, and the choices you have.

1. Information we collect

Information you provide

• Account information — a username, email address, and password when you create an account (or just your email address if you sign in with a one‑time emailed code). Passwords are stored only as a salted cryptographic hash, never in plain text. We never collect payment details — Koko has no purchases.
• Content you submit — the video or map links you paste, and the lists, plans, notes, place selections, and other content you create or save in Koko.
• Communications — messages you send us (for example, support requests by email).

Information collected automatically

• Usage and log data — basic technical information such as your IP address, device and browser type, pages or screens viewed, and timestamps, used to operate, secure, and debug the service.
• Cookies — we use a single, essential session cookie to keep you signed in. We do not use third‑party advertising or cross‑site tracking cookies.
• Push notification tokens — if you turn on notifications in the mobile app, we store your device's push token so we can tell you when a list you started is ready. Turning notifications off (in the app or in your device settings) or signing out removes the registration.

Information from the links you paste

When you paste a public video or map link (for example from Instagram, TikTok, YouTube, or Google Maps), Koko retrieves the publicly available content at that link — such as the on‑screen text, caption, and top comments — in order to identify the places it mentions. We do not log in to those platforms on your behalf or access your private accounts there.

2. How we use your information

• To provide and operate Koko — extracting places from the content you submit, building your lists and plans, mapping locations, and syncing across the web and iOS.
• To maintain, secure, and improve the service, including debugging and preventing abuse.
• To respond to your requests and communicate with you about the service.
• To comply with legal obligations.

3. How we share information

We do not sell your personal information. We share information only in these limited cases:

• Service providers. We use trusted third parties to deliver core features. The text extracted from the content you submit is processed by Anthropic (Claude) to identify places; place names and coordinates are sent to Google Maps / Google Places to geocode and display locations. These providers process the data on our behalf under their own terms and privacy policies.
• Sharing you initiate. If you create a share link for a list or plan, anyone with that link can view what you shared, until you disable it.
• AI assistants you connect. Koko can be connected to third‑party AI assistants (such as ChatGPT or Claude) as an app/connector. If you choose to connect, you sign in to your Koko account and grant that assistant permission to create, read, and update the lists and plans in your account on your behalf. We receive only the requests the assistant makes for you (for example, a list of places to save); your conversations with the assistant stay with the assistant's provider under their own privacy policy. You can disconnect at any time from the assistant's settings, which revokes its access to your account.
• Legal and safety. We may disclose information if required by law or to protect the rights, safety, or property of Koko, our users, or others.

4. Data retention

We keep your account and content for as long as your account is active. Video files fetched during processing are deleted from our servers shortly after the places are extracted; we retain the resulting lists and plans you save. When you delete content or your account, we remove the associated data from our active systems within a reasonable period, except where we must retain it to comply with law.

5. Your choices and rights (including account deletion)

• Access and correction — you can view and edit your lists, plans, and profile within the app.
• Deleting content — you can delete individual lists and plans at any time from within the app.
• Deleting your account — you can permanently delete your account and its associated data (your profile, lists, plans, notes, and place states) directly in the app: open Profile → Delete account. Deletion takes effect immediately. If you can't access the app, email [email protected] from the email address on your account with the subject “Delete my account” and we will process it within 30 days. In both cases we remove your data from our active systems, except where we must retain it to comply with law.
• Depending on where you live, you may have additional rights over your personal information (such as access, portability, or objection). Contact us to exercise them.

6. Security

We take reasonable technical and organizational measures to protect your information, including encrypted connections (HTTPS) and hashed passwords. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

7. Children

Koko is not directed to children under 13 (or the minimum age required in your country), and we do not knowingly collect personal information from them. If you believe a child has provided us information, please contact us and we will delete it.

8. International users

Koko is operated from Japan, and your information may be processed there and in other countries where our service providers operate. By using Koko you consent to this transfer and processing.

9. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, provide additional notice.

10. Contact us

Questions or requests about this policy or your data? Email us at [email protected].