Privacy Policy

Section 1Who we are and what this policy covers

Coozie is a screen-free voice companion toy for children, made and operated by KnowNest Innovations LLP ("we", "us", "our"). This Privacy Policy explains what information we collect, why we collect it, where it is processed, how long we keep it, and what rights you have.

It is written in plain language on purpose. Parents deserve to understand exactly how their child's data is handled, without a lawyer.

This policy applies to:

• Visitors to our website. Anyone browsing www.coozie.co.
• Parents and guardians. The adult who buys a Coozie, sets it up, and uses the Coozie parent app.
• Children. The child who talks to the Coozie toy, aged roughly 3 to 12.

If you have any question about this policy, write to support@coozie.co.

Section 2Our commitment to children's privacy

Every decision we make about data is guided by one rule: collect only what Coozie needs to work safely and well, and nothing more.

• We do not sell, rent or trade any child data. Not to anyone, for any purpose.
• We never show advertisements to children inside the Coozie experience.
• We do not track, monitor, profile or behaviourally target children, in line with Section 9 of the Digital Personal Data Protection Act, 2023.
• We do not use your child's conversations to train AI models, and our agreements with our service providers do not permit them to use your child's data to train theirs.

Section 3The microphone: Coozie only listens when held

This is the question every parent asks first, so we answer it before anything else.

Section 4What we collect

4.1 From you, as the parent

When you set up Coozie we collect, from you as the parent or legal guardian:

• Your full name
• Your confirmation that you are 18 years of age or older
• Your email address
• Your mobile number
• Your consent to the collection and processing of your child's data, as required under Section 9 of the DPDP Act and Rule 10 of the DPDP Rules, 2025

We send a one-time code to your mobile number and ask you to enter it, so that we can confirm the account is being set up by you.

Your email and mobile are used to run your account, send service and safety notifications, and answer your requests. We do not use them for marketing unless you separately and specifically agree.

If you invite a second parent or guardian to your account, we collect the same information from them, and they give their own consent before they get access.

4.2 About your child

You give us your child's first name and date of birth. We ask for the date of birth rather than an age so that Coozie can keep its language and content appropriate as your child grows, without you having to update it every year.

Coozie also stores a small set of details your child shares, or that you provide at setup, so conversations feel personal rather than starting from zero every time. For example a favourite colour, a pet's name, siblings, best friends, school, class, hobbies, likes and dislikes. This is used only to make your child's own experience better. It is not used to profile your child, to build advertising segments, or to share with anyone outside Coozie.

In the parent app you can see everything Coozie remembers, edit the key details, and delete all of it by deleting your child's profile.

4.3 Conversation history

Coozie keeps a written record of the conversations between your child and the toy. We use it to let you read what your child has been talking about, to help Coozie remember context so conversations connect rather than reset, and to flag anything that needs your attention as a parent.

Conversation history is stored securely and is visible only to the parents on that account. We do not use it for advertising and we do not share it.

4.4 Device identifier

Each Coozie has a unique identifier that links the physical toy to your account. It is generated automatically and used only to authenticate that connection.

4.5 Website visitors

If you join our waitlist or contact us through www.coozie.co, we collect the details you type in, such as your name and email, and use them only to reply to you or to keep you informed about Coozie as you asked. Our website does not use advertising or tracking cookies.

4.6 What we do not collect

To be completely clear:

• We do not collect precise location data
• We do not collect payment details ourselves; payments are handled by the app store or the payment gateway
• We do not use cookies or tracking technologies for advertising
• We do not collect biometric data. Coozie does not recognise your child's face or identify them by their voiceprint
• We do not have a camera. Coozie cannot see anything

Section 5Your child's voice

Coozie has to turn speech into words to understand your child, and words back into speech to reply. This is what happens.

When your child holds Coozie and speaks, the audio is sent over an encrypted connection to a speech processing service, converted into text, and the text is what Coozie works with.

The speech processing services we use act only on our instructions, under a written agreement with us, and are permitted to process the audio only to provide that conversion to us.

Section 6How we use this information

Only for these things:

• To personalise your child's experience, using their name, age and what Coozie remembers
• To let you see your child's conversations in the parent app
• To keep your child safe, by flagging conversations that mention sensitive or worrying topics
• To connect the Coozie toy to your account
• To send you service, safety and account notifications
• To improve the quality and safety of Coozie's replies over time, using aggregated insights that do not identify your child

We do not use any of it for advertising, and we do not build commercial profiles of children.

Section 7Where your data is processed

Coozie is built and operated from India. Your account, your child's profile, what Coozie remembers, and your child's conversation history are stored in India.

Some of the processing that makes Coozie work is carried out by specialist service providers. This includes turning your child's speech into text, producing Coozie's replies, and turning those replies back into speech. Some of these providers operate from servers in India and some from servers outside India, and which provider handles a given request can change depending on availability, language and quality.

We do not name individual providers in this policy, because they change as the product improves and we would rather keep this page accurate than rewrite it every time one changes. If you would like to know the categories of provider we use, or where a particular category processes data, write to support@coozie.co and we will tell you.

Wherever your data is processed, the same protections apply:

• It is sent over an encrypted connection
• It is shared only to the extent needed to produce Coozie's reply
• The provider acts only on our instructions, under a written agreement with us
• The provider is not permitted to use your data or your child's data for its own purposes, including training its AI models
• The provider is not permitted to pass your data on to anyone else, other than to its own approved sub-processors under equivalent obligations

Indian law permits personal data to be transferred outside India, and by setting up Coozie you consent to the processing described here. We take all reasonable technical and organisational measures to protect your child's data wherever it is handled, and we remain responsible for it under Indian law regardless of where it is processed.

Section 8Parental consent and control

Coozie is a parent-first product. A parent or guardian must complete setup before a child can use it. By completing setup you confirm that you are 18 years of age or older, that you are the child's parent or legal guardian, and that you consent to the collection and use of data described here.

You have these rights at all times, through the parent app or by writing to support@coozie.co:

• See everything. Read your child's full conversation history and everything Coozie remembers about them.
• Correct it. Update anything inaccurate about your child or yourself.
• Delete the conversations. Erase your child's entire conversation history from the parent app, in one action, whenever you want.
• Delete everything. Delete your child's profile, which permanently removes their profile, everything Coozie remembers, and their conversation history.
• Withdraw your consent. You can withdraw your consent to us processing your child's data at any time by deleting your child's profile in the parent app. It takes the same few taps that giving consent took. Once you do, we stop processing that data and erase it, along with instructing our service providers to do the same, except anything we are required by law to keep.
• Pause Coozie. Stop the toy from listening or replying at any time, from the parent app.
• Complain. Raise a grievance with us (Section 13) or with the Data Protection Board of India.

Section 9How we store and protect data

Data is stored on secure cloud infrastructure using industry-standard practices, and is encrypted both in transit and at rest. Access controls, role-based permissions and authentication safeguards are in place.

Inside KnowNest, access to personal data is limited to the people who need it to run and improve the product. No outside party has access to your child's data, other than service providers acting on our instructions and bound by written agreements and confidentiality, or where the law requires disclosure.

If a personal data breach ever happens, we will tell affected parents and the Data Protection Board of India, as the DPDP Rules, 2025 require.

Section 10How long we keep data

We keep personal data only as long as it is needed for the purposes in this policy.

• While you are using Coozie. We keep your child's profile, what Coozie remembers, and the conversation history, so the product works and the parent app is useful to you.
• If you stop using it. If your account is inactive for 3 continuous years, we will automatically erase your child's profile, what Coozie remembers, and their conversation history. We will email you 30 days before this happens, so you have a real chance to log in and keep it if you want to.
• If you delete it yourself. You can erase all conversation history from the parent app at any time, and delete your child's profile entirely. We action full deletion requests well within the timelines in the DPDP Rules, 2025, and in no case later than 90 days.
• Voice audio. We do not retain it. See Section 5.
• Technical logs. Limited logs for security, troubleshooting and legal compliance are kept for one year, then erased. These logs do not contain your child's conversations.

Section 11Service providers

Coozie uses a small number of trusted service providers to run the product. They fall into these categories:

• Secure cloud hosting and data storage
• Speech processing, turning your child's speech into text and Coozie's replies into speech
• Conversation intelligence, producing Coozie's replies
• Account communications, such as the codes we send to verify your email or mobile

Providers in these categories may operate from servers in India or outside India, as described in Section 7. Each one acts only as a processor on our behalf, under a written agreement with us. They process data strictly on our instructions and are not permitted to use your data or your child's data for their own purposes.

We do not use any advertising networks, social media trackers, or analytics platforms that profile children.

If you would like to know the categories of providers we use in more detail, write to support@coozie.co and we will tell you.

Section 12Indian law

KnowNest Innovations LLP is registered in India and operates from Kanpur, Uttar Pradesh. This policy is designed to comply with the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, including the specific protections for children's data under Section 9 of the Act and Rule 10 of the Rules.

Under those laws we commit to:

• Obtaining verifiable parental consent before processing any child's personal data
• Using data only for the specific purposes disclosed here
• Not tracking, monitoring, profiling or behaviourally targeting children, and not serving them targeted advertising
• Giving parents the right to access, correct and permanently delete their child's data, and to withdraw consent
• Engaging every service provider that handles personal data only under a written contract, as Section 8(2) of the Act requires
• Erasing personal data when its purpose is served, when consent is withdrawn, or when we no longer need it, and ensuring our service providers do the same
• Keeping appropriate technical and organisational safeguards in place
• Notifying the Data Protection Board of India and affected parents of any personal data breach

If you believe your rights under the DPDP Act have been infringed, you can complain to the Data Protection Board of India.

Section 13Grievance redressal

If you have a concern about how your data or your child's data is being handled, contact our Grievance Officer:

We will acknowledge your concern promptly and resolve it within 90 days of receiving it, as the DPDP Rules, 2025 require.

Section 14Changes to this policy

We will update this policy as Coozie grows and new features arrive. When we make a significant change we will tell parents through the parent app and update the effective date at the top. We keep previous versions available so you can see what you agreed to and when. Continuing to use Coozie after an update means you accept the revised policy.

Section 15Contact us

Any question, concern or request about this policy or your child's data:

We aim to answer every privacy query within 7 business days.